Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
File: 9h0r7udUOkGpCKGgHs_AqHJqOuI.mft (raw, json)
Hash identifier: 9/qB8tkpBJYmUrqaFO0p9/GfTe0AEnKaTDrqNhaDZ/U=
Subject key identifier: 02:DD:3F:58:18:05:B1:E8:88:50:4B:48:B4:59:A6:D8:36:80:51:80
Authority key identifier: F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
Certificate issuer: /CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Certificate serial: 019D9A0769F92D78962192EE731EC148B37E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
Manifest number: 0D63
Signing time: Fri 17 Apr 2026 06:01:10 +0000
Manifest this update: Fri 17 Apr 2026 06:01:10 +0000
Manifest next update: Sat 18 Apr 2026 06:01:10 +0000
Files and hashes: 1: 9h0r7udUOkGpCKGgHs_AqHJqOuI.crl (hash: VNzKY0xQSUbdoHE/gBx9S65CEeTEu5j1oKmgSxn6KSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:69:f9:2d:78:96:21:92:ee:73:1e:c1:48:b3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Validity
Not Before: Apr 17 06:01:10 2026 GMT
Not After : Apr 18 06:01:10 2026 GMT
Subject: CN=02dd3f581805b1e888504b48b459a6d836805180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:90:c0:0c:db:ac:81:ce:b0:a7:a8:86:8e:
c0:bd:f3:44:f1:d7:fb:15:f1:b3:e6:50:a8:28:cf:
72:83:08:38:34:ee:3e:c7:d3:2a:27:05:9d:08:7a:
18:84:83:bd:21:c6:a0:fc:3c:c5:5c:56:c4:e0:4f:
cc:9e:83:2d:52:3d:fa:06:45:3b:c7:19:78:ff:df:
11:98:94:e6:94:a2:4f:c3:13:85:56:8b:73:86:9b:
e3:59:4a:25:3b:dc:bd:a4:eb:30:14:5d:6f:9e:e4:
db:d3:28:c4:5c:15:c3:af:2d:fb:0e:80:f0:92:70:
88:d6:9d:e6:64:22:7a:49:2c:f6:d1:80:16:b7:c8:
fc:b0:93:d9:88:33:df:19:c6:db:dd:f3:71:1e:09:
d6:50:b2:dc:45:5b:10:d9:bc:20:55:fd:c6:dc:30:
98:71:b2:55:f2:47:56:8a:f6:14:89:ad:0f:bc:8c:
ac:0a:1e:f9:9f:2b:f6:ac:f9:97:78:8e:b3:82:86:
dd:12:3b:0e:8c:9e:07:17:d3:91:9f:99:15:45:55:
64:86:56:24:fb:93:32:c8:2a:0e:78:79:85:e9:aa:
6e:55:17:c2:5a:cd:42:16:f7:ac:54:9d:40:56:6a:
17:08:a9:32:1f:9c:57:05:e4:a8:fe:bc:7d:0f:54:
6b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DD:3F:58:18:05:B1:E8:88:50:4B:48:B4:59:A6:D8:36:80:51:80
X509v3 Authority Key Identifier:
keyid:F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:78:60:ef:6a:c8:47:21:4a:c5:49:c1:4a:0e:d9:72:3b:11:
e9:c8:88:00:57:bf:0e:22:8a:5d:4d:ab:ea:59:0c:06:dc:4a:
e4:13:c5:a0:11:bc:e5:f9:4d:d3:56:5a:18:35:5a:00:0d:11:
65:28:77:06:d7:b7:be:1e:a6:43:e3:c8:b2:46:59:0a:72:ad:
ae:02:f0:e0:c0:1e:c4:19:dd:23:47:d2:2a:b6:73:d4:00:5f:
2a:02:11:bc:b6:44:1c:f9:f9:86:f8:dd:6a:43:5b:1a:4b:71:
14:e1:8d:91:40:2c:ca:95:4e:df:1b:b7:38:85:9d:1d:87:bc:
13:ff:c1:1b:ea:08:17:5a:a5:dc:da:31:8d:2c:94:5f:8f:bd:
08:e4:96:db:f6:75:8a:bd:9a:a9:5e:5e:7c:66:71:f6:c8:5d:
ef:7a:7e:0b:9f:8f:fb:4f:3a:4b:87:60:82:47:39:fd:10:79:
47:49:90:32:4f:f0:95:02:58:59:2f:61:23:d2:7a:88:3f:f4:
d8:d9:00:09:2e:1a:8a:92:74:c2:7f:f2:b0:f2:0e:95:7d:ac:
6a:82:77:23:af:e9:28:de:ec:00:c5:a5:9b:5d:8f:77:c0:1e:
bc:93:c0:89:b6:ac:d7:e7:1c:7a:86:76:31:72:dc:db:62:da:
d0:26:59:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:44 2026 by rpki-client