Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
File: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft (raw, json)
Hash identifier: CdJ+pn1RjKRQLze13GpvhBMIL12giczS80vi2qCxiE4=
Subject key identifier: 70:4E:09:62:E0:29:02:90:9C:B6:E5:2C:44:D0:D4:1C:67:25:35:6B
Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
Certificate issuer: /CN=f4272ac0423fb097583c6872567d84cae410c89b
Certificate serial: 019DA5679923D0D794F62B9EF8AEBE679129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
Manifest number: 0BDE
Signing time: Sun 19 Apr 2026 11:02:03 +0000
Manifest this update: Sun 19 Apr 2026 11:02:03 +0000
Manifest next update: Mon 20 Apr 2026 11:02:03 +0000
Files and hashes: 1: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl (hash: IdMvBdVBJWelXMkYwxaz9gPsAmULIByYk5t3dPic2BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:67:99:23:d0:d7:94:f6:2b:9e:f8:ae:be:67:91:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b
Validity
Not Before: Apr 19 11:02:03 2026 GMT
Not After : Apr 20 11:02:03 2026 GMT
Subject: CN=704e0962e02902909cb6e52c44d0d41c6725356b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ec:60:4f:29:a0:c0:0c:04:d0:97:7a:86:06:
8e:be:0e:50:db:4f:67:b8:7a:3b:fc:49:7f:db:d2:
69:1d:0f:c1:97:cb:66:b8:31:82:f6:20:28:a7:14:
d8:10:70:41:20:11:b5:b9:b0:c5:dd:a2:62:ef:69:
a9:eb:56:27:cc:54:6f:0d:96:28:4e:0f:3f:77:67:
1a:8a:c9:77:20:70:d1:76:d4:b8:58:bc:8b:37:07:
11:ca:97:34:d3:96:41:fe:02:89:ae:f9:1e:96:04:
b0:6f:35:04:2e:88:94:e4:fa:c8:c5:c1:5d:b3:fe:
6a:9c:b2:25:41:5c:06:41:3a:18:76:dd:72:27:0d:
b6:81:f7:e7:da:b5:05:40:20:5d:cb:aa:02:68:d6:
31:a7:19:f3:ea:5f:60:41:c8:74:35:83:6c:61:23:
12:e0:08:ee:53:6a:3c:0a:c9:e9:dc:9f:22:40:36:
29:37:15:b8:76:24:f6:57:fa:bf:1d:8f:0c:d6:45:
93:19:fb:a9:ab:8f:ea:e1:49:0e:97:6b:34:86:2d:
31:80:3d:fb:01:e2:15:d1:6f:b5:97:e8:b2:9e:dd:
21:60:3d:17:50:51:9c:8a:69:ac:bf:a9:62:1e:a2:
4b:f5:1e:91:56:db:45:e4:9a:4d:65:2e:ea:a4:c2:
96:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4E:09:62:E0:29:02:90:9C:B6:E5:2C:44:D0:D4:1C:67:25:35:6B
X509v3 Authority Key Identifier:
keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:13:3e:bd:f2:b3:bd:c7:b2:71:2e:2c:48:e0:76:0a:49:77:
4d:c5:7d:88:95:10:94:ea:71:5e:8b:52:b4:32:76:b9:a6:3f:
5e:fc:e4:7f:87:63:4f:8d:f9:e6:36:48:06:14:75:90:1b:85:
bf:5f:c3:e2:b8:ec:38:a0:34:fa:7c:6d:15:88:f4:e4:47:dd:
5d:c9:1f:15:1e:59:a6:a6:c5:c6:41:ac:29:2b:2f:9f:01:e5:
bf:d9:01:9c:2d:3d:2d:68:70:4b:00:ef:17:8b:2c:49:73:a6:
c4:0d:f0:5e:b9:be:87:2a:1f:9b:0d:a8:97:f3:42:ef:68:8c:
54:4a:03:2f:39:6c:45:8d:c0:e7:23:c4:19:0e:53:d6:91:fc:
a5:d2:25:a5:19:94:da:e4:97:fd:c0:a4:2b:8c:e2:8a:e2:5d:
3c:41:2f:db:ca:13:11:34:d1:b5:d1:b3:75:6b:93:1d:49:8b:
fb:f3:61:d5:1d:14:b6:e2:50:42:ac:63:a4:25:5c:74:e0:c1:
39:ad:5d:26:1c:d6:c7:e6:5e:be:18:b4:d9:f5:50:74:27:5a:
9d:62:8c:71:d4:b1:50:3c:25:ad:dd:22:2a:0e:49:14:6f:b2:
48:7c:09:6c:63:f0:fc:2f:6e:fc:87:e4:cf:c9:bd:f4:06:11:
7d:36:32:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:54:26 2026 by rpki-client