Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
File: 9rES1L7bpvNYUoqDcUG3SwkphZM.mft (raw, json)
Hash identifier: CCit0KZjlCcwdz0tBlPxI3jx9c/z6366WXOZHJ7LMeg=
Subject key identifier: D8:D8:92:2E:4F:99:C5:B6:2E:FC:97:3A:53:B3:23:1B:E5:50:B9:92
Authority key identifier: F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
Certificate issuer: /CN=f6b112d4bedba6f358528a837141b74b09298593
Certificate serial: 019CAAC6D1BA1AA4A458E64C9C89F5FE51C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
Manifest number: 1795
Signing time: Sun 01 Mar 2026 19:01:22 +0000
Manifest this update: Sun 01 Mar 2026 19:01:22 +0000
Manifest next update: Mon 02 Mar 2026 19:01:22 +0000
Files and hashes: 1: 9rES1L7bpvNYUoqDcUG3SwkphZM.crl (hash: ftXBMe22kFcCP+3IwaTr30uNzqnmmGrYSGTi/89TpJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:d1:ba:1a:a4:a4:58:e6:4c:9c:89:f5:fe:51:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b112d4bedba6f358528a837141b74b09298593
Validity
Not Before: Mar 1 19:01:22 2026 GMT
Not After : Mar 2 19:01:22 2026 GMT
Subject: CN=d8d8922e4f99c5b62efc973a53b3231be550b992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:13:b5:cd:c5:cc:10:75:27:88:19:50:64:18:
f0:e3:1c:41:92:39:34:3f:79:50:1a:2e:d9:f0:eb:
e5:2a:b4:d8:d9:c9:4e:b3:80:52:a4:04:b7:47:e8:
07:77:ed:76:f4:67:e1:fa:9c:87:2f:e1:08:50:e8:
33:d6:e2:2e:96:49:a5:e6:a1:03:35:3c:39:06:2c:
38:57:16:c4:81:fc:a2:e5:65:8d:89:67:55:f7:4b:
20:c9:33:9d:53:4a:c3:fd:b7:a9:d5:5a:4c:38:6e:
06:0c:84:07:e2:36:3b:96:f0:55:e6:f2:04:52:d3:
70:37:17:2b:9c:e3:0f:35:ce:b4:a8:69:9d:ba:46:
9a:b7:a5:fb:d5:e4:0d:6b:72:c8:2b:be:30:71:2d:
72:60:c6:82:cb:6d:62:f9:c6:6a:9e:71:64:e9:2d:
74:af:58:38:9f:37:39:55:c4:e0:f8:f1:41:12:5d:
15:61:0f:ed:23:cb:d7:3b:1b:f0:c3:93:d9:45:a7:
cc:e9:45:a9:fa:a5:53:f7:e5:6f:a4:7d:36:01:9f:
6e:1f:d0:72:dc:37:69:51:d9:3c:46:da:16:e5:71:
1d:8e:57:c9:4c:98:29:36:d4:71:53:c8:57:3e:5c:
98:0d:dc:2b:69:7a:c7:26:3c:e4:99:5d:70:6c:d8:
16:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D8:92:2E:4F:99:C5:B6:2E:FC:97:3A:53:B3:23:1B:E5:50:B9:92
X509v3 Authority Key Identifier:
keyid:F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ec:9c:d8:7b:55:0b:be:e3:44:d8:39:57:de:29:a9:d6:12:
c9:73:9e:3e:ea:e5:5c:06:30:12:33:0d:92:4e:4a:f7:fc:19:
f4:c9:53:b9:30:7a:9a:eb:3c:84:5c:61:98:7c:2c:e3:cf:36:
8c:ea:6b:02:5a:0c:b1:a6:55:e6:7c:f4:2f:cb:93:56:f6:d8:
a3:56:57:b5:22:c1:f4:8a:05:7f:46:3b:d8:5c:38:17:af:71:
a7:58:77:75:be:b9:79:eb:68:c6:9f:50:aa:d5:b2:84:37:d0:
bb:44:84:9e:1a:8a:09:4f:30:21:d0:d9:e3:6d:f8:b7:19:d7:
63:48:0a:b4:a5:50:58:07:a4:9c:2c:28:3a:b3:63:cf:7f:4b:
c2:e1:79:e0:b4:59:be:7c:b7:39:ab:91:74:cf:9e:1c:2e:a4:
4f:50:4e:ff:f2:0e:b4:48:e2:d3:55:fd:d5:c0:a7:7a:10:d1:
1f:29:c2:da:35:1a:f1:72:05:98:20:9c:5b:d6:41:e9:98:dd:
97:c6:cd:6a:1f:9e:df:94:48:63:46:60:47:5a:e9:c7:07:a1:
8c:cb:bf:1a:49:84:09:91:28:5e:bc:5d:44:a9:63:2c:53:5d:
d9:28:ae:42:8a:8d:24:78:25:c0:2b:37:72:8a:e2:98:8b:58:
19:6b:a5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:56:01 2026 by rpki-client