Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
File: 9h0r7udUOkGpCKGgHs_AqHJqOuI.mft (raw, json)
Hash identifier: pAG/UhTvJq1j2W3WNxlTythSweeLae2k6LQYgG/sWyA=
Subject key identifier: 05:E4:D8:22:D3:C5:76:6D:CF:6C:7D:2B:72:AB:E4:28:8D:59:7A:18
Authority key identifier: F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
Certificate issuer: /CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Certificate serial: 019CAC7E174689D94F29E4B4C4C4C56459C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
Manifest number: 0CE8
Signing time: Mon 02 Mar 2026 03:01:10 +0000
Manifest this update: Mon 02 Mar 2026 03:01:10 +0000
Manifest next update: Tue 03 Mar 2026 03:01:10 +0000
Files and hashes: 1: 9h0r7udUOkGpCKGgHs_AqHJqOuI.crl (hash: QlGcsNsmDQTEOifT4sOeok8xNYg/vX008rLjSQjdgkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:17:46:89:d9:4f:29:e4:b4:c4:c4:c5:64:59:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Validity
Not Before: Mar 2 03:01:10 2026 GMT
Not After : Mar 3 03:01:10 2026 GMT
Subject: CN=05e4d822d3c5766dcf6c7d2b72abe4288d597a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:31:33:dd:b5:fc:11:ec:b3:ae:9e:47:c7:be:
57:0c:bb:59:0c:3b:d2:ff:e5:02:07:06:20:e5:12:
11:d6:fe:43:5b:08:d4:d5:89:77:ec:39:fd:69:4b:
86:68:7f:5e:e0:0a:24:91:20:75:0e:16:6e:9a:53:
b3:54:a0:42:e3:00:a6:0a:d5:fd:90:69:9f:06:e8:
eb:db:ed:64:9f:dd:78:7f:35:87:9e:87:bc:07:ac:
e8:e0:69:9d:ef:d5:ce:06:5e:b9:b8:61:80:3e:28:
b1:49:fe:32:cd:93:6c:50:05:78:f3:69:60:dd:80:
9c:33:74:2d:75:cd:10:86:b6:e6:8e:cb:63:be:f5:
7b:4e:7b:5b:f4:e2:82:6a:a6:9b:a0:49:70:15:83:
60:b2:b3:d4:50:89:8f:2c:92:90:ac:10:e9:d3:15:
be:de:06:db:ff:d1:54:13:ba:7f:01:0d:51:88:7e:
68:bc:4b:6e:3f:fa:c9:fb:08:dd:a5:20:12:26:3f:
6c:b4:59:4c:be:95:15:f7:ba:f5:97:19:79:5d:00:
01:cc:0b:28:3f:da:64:64:06:ed:69:11:65:18:4d:
57:61:c2:f8:aa:9a:e9:ad:25:14:39:b0:be:f0:f7:
87:a2:c1:6e:32:f1:8f:7b:ad:24:0c:b6:a2:dd:06:
77:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E4:D8:22:D3:C5:76:6D:CF:6C:7D:2B:72:AB:E4:28:8D:59:7A:18
X509v3 Authority Key Identifier:
keyid:F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:4c:03:1f:c8:2f:7c:03:31:6e:60:79:bc:b2:4d:af:be:ea:
51:06:bd:9a:ee:73:2a:3d:35:66:79:95:f9:95:0b:47:bd:a5:
04:d1:49:ee:03:7d:9a:f2:68:95:35:ab:f1:0d:ea:fc:48:e9:
af:6b:4b:00:69:4e:d0:c4:6a:87:bd:d2:f8:49:a6:4f:1e:b1:
ed:00:eb:44:2f:86:ff:2e:a7:87:fe:d0:3b:1b:31:2b:9e:9d:
9d:72:51:e6:22:e9:f7:b9:62:8f:da:04:94:36:88:84:1e:60:
5a:c0:f7:2c:be:ea:ca:cf:b1:56:c5:02:07:05:b0:cf:31:5d:
46:4d:9d:1a:77:bf:04:ad:cd:79:2a:41:6c:c9:b4:ba:fb:a6:
c1:7c:9d:d9:73:b3:14:11:66:b6:78:62:8f:8c:6e:8c:92:57:
9c:2c:aa:31:9a:b6:bf:99:ba:97:6f:fb:28:62:62:a8:b1:66:
b5:4d:7f:0f:fd:f2:c7:bf:4d:0b:4b:a7:0d:a1:94:ec:3e:0c:
ca:5e:63:0e:4f:d7:65:fc:4d:16:8d:59:30:f9:a4:b5:6f:06:
da:a1:8f:27:bc:95:02:41:86:16:21:71:ed:c8:67:c1:8b:f2:
10:4c:30:56:38:e6:b7:23:28:e2:04:bf:c2:0f:21:53:72:e1:
69:fc:47:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:20:33 2026 by rpki-client