Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
File: m9LNu_XMLYOp2PExgRJx8DLSFFA.mft (raw, json)
Hash identifier: CLnI+Z8wO1vyJMbJv0NFD1Njic7Br/tM/DnFUUrkRoo=
Subject key identifier: 52:56:CF:A7:B3:CB:53:7B:DC:22:A5:93:FA:2F:F0:EA:8E:CC:BD:C9
Authority key identifier: 9B:D2:CD:BB:F5:CC:2D:83:A9:D8:F1:31:81:12:71:F0:32:D2:14:50
Certificate issuer: /CN=9bd2cdbbf5cc2d83a9d8f131811271f032d21450
Certificate serial: 019D9BBE643FFB56663C0DF4BBA77EED5AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
Manifest number: 58
Signing time: Fri 17 Apr 2026 14:00:39 +0000
Manifest this update: Fri 17 Apr 2026 14:00:39 +0000
Manifest next update: Sat 18 Apr 2026 14:00:39 +0000
Files and hashes: 1: m9LNu_XMLYOp2PExgRJx8DLSFFA.crl (hash: yttrotAQdkoEXuWfJkknFRbfIixn7EdaiGwdUSOzERc=)
2: sRIRtm1WlkJMryRVLofyBLDhtX0.roa (hash: Ho8VKDeLdI3OgV2j2givaKlNGpZaNoqeOK7mD/4wmSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:64:3f:fb:56:66:3c:0d:f4:bb:a7:7e:ed:5a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd2cdbbf5cc2d83a9d8f131811271f032d21450
Validity
Not Before: Apr 17 14:00:39 2026 GMT
Not After : Apr 18 14:00:39 2026 GMT
Subject: CN=5256cfa7b3cb537bdc22a593fa2ff0ea8eccbdc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:ab:75:85:ba:36:be:58:1c:c2:2a:ef:bf:
0d:25:1e:d6:b9:97:ee:0e:81:30:50:fc:f8:0a:2c:
4d:4b:91:44:9b:c5:83:0f:f6:3f:59:98:82:44:ed:
15:f9:7d:7e:fe:56:75:62:17:d9:c6:a5:22:dd:1f:
2d:38:bc:18:b2:11:90:c0:41:04:67:a3:ad:3b:56:
0a:f8:a1:ae:df:ad:4e:1c:18:f3:2c:87:58:44:6c:
d6:bb:6b:2b:b5:c4:0e:b6:92:f8:38:d3:00:80:7a:
58:f5:32:a2:9a:2a:19:cd:ef:af:a8:91:b3:e1:4b:
b0:9d:d3:dc:4e:9d:81:25:11:47:23:ac:39:8f:2b:
b3:4d:f4:71:91:b0:10:48:a7:5c:f4:ca:f0:9d:f5:
5d:ed:0a:a4:2f:9e:68:4a:58:4d:c0:da:6e:0b:1e:
5d:82:f2:cc:10:62:ed:0e:85:f5:cb:1e:8c:e7:d0:
15:08:19:92:aa:1a:c1:38:03:c2:43:9d:33:28:3b:
a2:a7:85:7f:f9:63:a8:1f:36:86:5b:0c:37:b3:d2:
dc:00:52:aa:31:4e:63:ec:67:92:0d:42:1f:c1:1b:
b8:ff:6d:53:39:30:54:4d:17:3f:65:10:84:33:1f:
74:af:bf:0e:5e:3b:4b:43:a1:83:37:84:d2:f1:d4:
a0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:56:CF:A7:B3:CB:53:7B:DC:22:A5:93:FA:2F:F0:EA:8E:CC:BD:C9
X509v3 Authority Key Identifier:
keyid:9B:D2:CD:BB:F5:CC:2D:83:A9:D8:F1:31:81:12:71:F0:32:D2:14:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e4:2b:40:c2:be:af:bf:00:b5:3d:a9:66:28:d4:cc:1a:55:
5f:ca:b4:d2:0d:ab:2e:f4:a4:f5:22:15:22:c7:34:69:1e:3d:
1c:21:af:b0:d1:5b:69:b1:ff:74:a0:67:04:a9:aa:c2:bd:e6:
0f:44:f8:e0:dc:38:09:f5:7c:fb:9e:d8:35:e6:77:15:2c:da:
0b:85:da:8d:5e:e7:28:76:3a:0a:de:92:43:96:1f:89:ea:8f:
96:f0:2a:fd:dd:d6:ac:d2:d0:4a:0c:c7:67:38:93:00:cb:51:
bc:7d:0a:9d:aa:a4:33:d4:38:1c:53:63:3e:c6:68:7f:a7:e3:
97:ea:58:fa:d2:f0:1f:38:64:04:0e:89:97:2b:9c:03:68:32:
5f:ce:30:27:d2:35:96:10:4f:e0:76:3e:08:85:a4:fa:83:f3:
eb:32:98:9d:74:7e:22:78:95:70:a0:be:55:7a:91:cb:9e:2f:
26:ba:1d:69:ee:71:4f:77:62:86:1a:5a:0e:a4:eb:fc:0b:1a:
d7:b0:28:91:af:32:1b:3b:3e:ba:66:46:15:26:98:7a:0a:d8:
c3:a5:13:ad:b5:d1:bb:bd:1e:28:f4:f1:da:42:b7:71:7e:dc:
b1:c3:5d:74:46:5f:c1:d6:11:de:f0:c8:41:d2:e1:12:71:d1:
d0:80:75:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:19 2026 by rpki-client