Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
File: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft (raw, json)
Hash identifier: wQ2+8L2M6mTLZOzbSMNpm2P+GXMOU03mYDmxJCdvTPw=
Subject key identifier: E3:DA:BA:3F:E0:DC:ED:45:8A:F8:93:BC:37:30:1C:5B:F9:87:FA:87
Authority key identifier: F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
Certificate issuer: /CN=f57766f0726cff8618af968258f5bb229e937c6e
Certificate serial: 019CAAC6690C60B8B1F8E39F62A1B778016A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
Manifest number: 0F72
Signing time: Sun 01 Mar 2026 19:00:55 +0000
Manifest this update: Sun 01 Mar 2026 19:00:55 +0000
Manifest next update: Mon 02 Mar 2026 19:00:55 +0000
Files and hashes: 1: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl (hash: E4ZI8S+R/mbXj8Rz+Lyl2XszrOcrySKhaUupliLr2+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:69:0c:60:b8:b1:f8:e3:9f:62:a1:b7:78:01:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57766f0726cff8618af968258f5bb229e937c6e
Validity
Not Before: Mar 1 19:00:55 2026 GMT
Not After : Mar 2 19:00:55 2026 GMT
Subject: CN=e3daba3fe0dced458af893bc37301c5bf987fa87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:39:ac:b3:4d:73:c9:f3:3d:0e:09:c4:03:b3:
e4:37:f0:81:1c:4a:19:f5:ec:1d:95:c8:6f:b4:c8:
da:93:d8:5f:76:ac:95:c3:5e:4f:72:2c:bd:0b:c5:
cb:85:fa:79:44:08:6f:33:0a:20:c3:1c:8b:a9:f4:
ac:15:36:36:8e:d2:a2:f9:69:7b:a6:6a:5e:c9:cb:
f2:9b:94:cf:53:c9:23:64:fd:b7:9f:35:55:b9:43:
41:12:86:97:27:58:fd:a1:bb:42:32:fa:ce:f4:aa:
23:39:59:9c:72:f4:0c:a7:c6:a0:8e:2b:ce:b4:88:
69:51:fe:58:da:4f:70:74:1a:05:62:03:a6:01:8d:
1e:dc:82:af:20:65:ea:ab:ab:84:a5:ee:22:92:63:
a8:70:cb:f1:90:2f:12:ba:e1:b2:84:ac:57:3c:e6:
57:fc:90:57:46:26:06:6f:7c:d1:ef:f4:4a:62:98:
84:95:51:21:46:a8:2a:e7:dd:78:d7:f0:22:f6:5a:
45:9d:3c:e0:68:99:c0:08:79:11:27:bd:3b:46:d3:
5c:49:ac:b1:84:57:57:a4:5e:db:23:04:8e:99:d9:
34:38:73:5e:cb:4a:e1:b2:4b:89:d9:4c:95:c8:ff:
94:99:24:ae:ba:6f:fb:b5:de:bc:cb:28:0e:57:c7:
0b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DA:BA:3F:E0:DC:ED:45:8A:F8:93:BC:37:30:1C:5B:F9:87:FA:87
X509v3 Authority Key Identifier:
keyid:F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:67:d5:75:0d:5b:a0:02:7e:d4:1b:f4:cb:1f:8f:09:b7:be:
a7:35:1a:17:73:f2:18:c6:46:86:3e:8e:90:7e:1b:31:5a:69:
3e:1c:cb:36:db:38:b3:ca:ac:02:ad:81:32:80:d1:23:12:9d:
ce:0d:dd:04:b9:a0:62:55:3c:36:d8:90:6f:85:e4:f7:06:94:
3b:0e:bb:8d:f3:02:f9:89:3d:3d:81:74:2e:49:33:2a:0a:17:
6d:a0:d7:0a:ae:d1:f2:b8:c6:16:4d:08:85:c0:30:05:73:a8:
12:92:9f:1a:0e:79:bb:6f:4e:68:91:e1:69:98:4a:3e:b8:be:
cb:37:5e:01:b7:2b:2d:0a:f6:87:b0:47:e0:6c:9a:2a:6e:ac:
26:be:10:d8:46:bc:9c:18:f0:c7:ed:2c:ce:dd:87:a8:84:5f:
5b:f4:61:c3:5a:3d:02:23:3d:27:a2:e0:d1:72:65:d2:26:3f:
96:a9:76:29:d4:34:56:f0:f7:19:0e:71:4d:1a:5f:75:97:08:
8c:fa:8d:dc:4d:5c:1a:15:39:4e:bd:f3:23:d2:f8:cb:ec:88:
c9:b5:a9:38:24:4a:d8:42:0d:2c:75:7f:f8:13:cc:1a:76:33:
33:d1:54:e8:6b:e0:22:a9:0f:8e:d5:e2:fe:51:67:7c:40:bf:
eb:ad:bb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:54:36 2026 by rpki-client