Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
File: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft (raw, json)
Hash identifier: ErBBn268fkF5mXe+pqyU4+Heduz//KPX9z2emQC7RvY=
Subject key identifier: 0F:26:82:15:4A:36:73:F2:3E:C2:81:61:29:93:D9:75:91:FA:4E:76
Authority key identifier: B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36
Certificate issuer: /CN=b7d296d69059457be39c3c82466aceed02766836
Certificate serial: 019D9B50F2F40BDA34006FB4BF832BFA8F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
Manifest number: 09B4
Signing time: Fri 17 Apr 2026 12:01:06 +0000
Manifest this update: Fri 17 Apr 2026 12:01:06 +0000
Manifest next update: Sat 18 Apr 2026 12:01:06 +0000
Files and hashes: 1: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl (hash: +2RCJOs01N5zL788XySKeDpLNRKLAua98LsWlYQBoSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:f2:f4:0b:da:34:00:6f:b4:bf:83:2b:fa:8f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7d296d69059457be39c3c82466aceed02766836
Validity
Not Before: Apr 17 12:01:06 2026 GMT
Not After : Apr 18 12:01:06 2026 GMT
Subject: CN=0f2682154a3673f23ec281612993d97591fa4e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:2d:97:4d:2c:ec:9e:1f:4e:ae:ba:6f:6e:
49:63:4b:ce:1c:51:e5:31:2a:1c:9d:11:3f:20:cf:
99:5b:9f:e9:d8:1f:5a:fe:ae:b4:70:9a:75:64:2a:
73:41:9a:45:b6:fa:85:e3:24:a2:75:55:3a:f5:77:
40:83:0c:e2:e4:1e:d0:06:15:fb:9a:42:ec:ca:a9:
ee:98:39:b8:6d:78:ab:10:57:2a:da:00:0e:e6:c2:
68:a5:c0:49:8c:ea:2a:b1:51:98:1f:da:1b:22:27:
c8:a6:85:98:68:51:67:08:e2:6c:22:54:ff:7d:51:
b1:e7:ff:d2:0c:05:70:b2:f8:b5:ab:c7:3c:3a:e8:
62:3f:e8:e8:26:6c:ed:41:0d:29:24:db:58:e3:5e:
24:b5:11:f7:c7:ad:62:84:74:be:3f:e1:35:88:f4:
7e:c3:1a:14:2d:d0:f4:ad:36:69:69:74:93:b0:58:
f9:80:98:c2:61:6b:ba:4c:58:da:76:64:54:2d:de:
8d:8d:cc:b8:9e:78:30:47:0f:1c:21:76:d9:32:6c:
f7:4c:65:be:2f:f7:50:10:a2:41:28:da:a2:79:5d:
f6:04:e8:54:4e:0e:9a:50:e2:04:5b:9d:9c:cf:5e:
16:7b:54:66:be:2d:52:52:2f:d5:d9:c5:ea:09:9d:
6b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:26:82:15:4A:36:73:F2:3E:C2:81:61:29:93:D9:75:91:FA:4E:76
X509v3 Authority Key Identifier:
keyid:B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0a:c2:d9:ca:ec:69:6d:2f:9e:aa:b5:fe:bf:95:c8:a6:8e:
f0:91:6c:c1:b6:94:bc:8f:0f:af:91:d6:91:0d:17:0e:56:13:
b6:3e:f4:2a:dd:f4:61:62:fa:13:1e:fa:b8:db:1c:c7:16:10:
e8:85:ad:9a:98:d4:27:b7:12:72:7a:1a:da:fa:29:37:a2:d4:
81:85:67:51:28:ef:04:73:0b:3b:5a:4e:88:5c:30:a8:3a:b9:
8b:56:e6:41:5c:b1:c8:6a:2b:18:dd:6d:95:dd:0e:55:bd:8a:
f5:d2:3c:e7:9d:b4:c0:d7:05:6b:b0:be:1d:47:3f:d4:72:a0:
52:81:e8:e9:5b:d0:1b:bb:88:09:5d:48:44:60:a0:cd:df:4d:
5c:42:8f:d2:48:81:9e:e4:b7:d1:87:16:bc:51:c9:f4:94:eb:
3e:62:03:3b:7c:86:01:81:c0:19:21:fd:22:91:18:f5:3e:24:
91:6d:49:e7:38:30:2f:c3:66:e0:22:dd:69:0f:90:e7:0a:12:
ff:0f:82:a3:94:ba:cf:a9:57:4a:09:0b:0d:e7:da:70:d0:1b:
d5:5a:a0:bb:b2:f5:e7:6d:2d:fa:5c:1e:9e:7b:ce:1e:e7:69:
ae:21:dc:02:04:16:35:54:a4:de:41:77:d6:1b:60:f9:b2:21:
75:83:45:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:50 2026 by rpki-client