Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
File: 9n1n2ohguDIsTyBNYRsAYTjxs5E.mft (raw, json)
Hash identifier: +msFzR7VilFIpRSEtdiz/0T12mwWAdkMthfZHMyo0TI=
Subject key identifier: 6C:FB:AA:C2:B9:57:4A:E1:2F:F1:6E:76:A7:AA:BB:11:38:8D:44:29
Authority key identifier: F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
Certificate issuer: /CN=f67d67da8860b8322c4f204d611b006138f1b391
Certificate serial: 019CAC0FA47F62F847E908B97F94E0AB11CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
Manifest number: 0545
Signing time: Mon 02 Mar 2026 01:00:32 +0000
Manifest this update: Mon 02 Mar 2026 01:00:32 +0000
Manifest next update: Tue 03 Mar 2026 01:00:32 +0000
Files and hashes: 1: 9n1n2ohguDIsTyBNYRsAYTjxs5E.crl (hash: 1F/+2FABZYrPrseXzodZSXM8nRc9bAkfLzpbF7D4dKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:a4:7f:62:f8:47:e9:08:b9:7f:94:e0:ab:11:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f67d67da8860b8322c4f204d611b006138f1b391
Validity
Not Before: Mar 2 01:00:32 2026 GMT
Not After : Mar 3 01:00:32 2026 GMT
Subject: CN=6cfbaac2b9574ae12ff16e76a7aabb11388d4429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6d:2c:1d:21:0e:5f:80:d7:aa:16:c5:87:21:
85:08:32:da:c2:0d:c9:5f:e3:61:c5:f0:95:5d:63:
d3:01:d9:58:78:7d:9f:ce:a6:c5:84:40:9b:51:9b:
89:16:5c:58:ce:75:d0:88:a7:24:91:33:c0:83:62:
f3:e9:80:a5:21:76:1e:d1:4c:2c:9c:b6:25:a2:49:
9b:2e:7a:0d:64:0b:cb:44:d0:03:f9:02:03:13:23:
fe:7f:ba:2f:bf:27:eb:b5:ae:02:60:29:6e:33:4d:
e1:77:f0:91:ff:03:f4:e5:e4:0d:56:da:74:93:d7:
6e:b6:eb:99:f6:2b:d7:8e:57:40:9f:4f:fe:df:49:
22:eb:53:b9:98:fd:67:80:5e:ac:7c:8b:44:c9:fb:
ea:c7:a6:07:80:d6:01:72:e3:c1:7f:e1:51:2b:51:
7e:cd:16:8b:97:8e:fe:d1:08:73:db:22:2f:09:1d:
c3:a4:11:58:98:cb:99:05:0b:58:14:80:59:d6:07:
b0:c7:f3:2e:b2:02:02:27:93:4e:2d:33:fa:75:96:
f3:2e:2d:36:fa:c2:82:7a:48:7b:99:ed:56:b3:b3:
62:43:37:bf:a8:55:df:eb:87:00:5d:d0:a4:d0:02:
01:4a:22:2a:58:d1:07:c4:b5:c8:4a:21:ed:a2:96:
d2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FB:AA:C2:B9:57:4A:E1:2F:F1:6E:76:A7:AA:BB:11:38:8D:44:29
X509v3 Authority Key Identifier:
keyid:F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:03:84:fb:1b:07:bc:04:62:81:db:27:4c:06:fd:33:77:b8:
19:de:7a:9b:3f:0e:5d:7e:80:b1:e9:f5:e0:0d:4c:a6:96:d1:
27:bb:8a:91:a8:57:0d:40:2f:02:19:c7:e9:67:d9:08:af:c7:
b5:21:1a:60:f8:61:a5:c5:a1:83:e9:93:9e:c1:c9:c4:3e:0d:
d4:7d:f1:1d:4e:47:9e:6c:16:8e:9d:24:46:0b:cf:59:41:97:
2d:38:94:ec:7b:b4:4d:94:04:d3:f7:15:b9:a9:e6:f5:4f:2a:
33:63:25:8c:5a:56:3b:3f:15:85:fc:5a:62:a3:bc:f1:d6:9d:
ee:e9:18:a7:2e:a2:65:66:d3:c6:44:40:bd:0c:ad:49:e9:23:
b4:38:db:65:d7:4d:a1:33:1b:c8:ce:e2:1a:3e:cb:d1:fa:3c:
04:6d:af:b5:c0:bc:75:ee:3f:92:74:23:8e:8f:c3:70:b8:3a:
53:a0:24:5f:0e:8e:76:7d:cf:ae:d2:64:20:21:6c:17:b1:7f:
9e:1e:3e:01:d8:46:42:af:2a:10:95:e9:45:9f:72:46:16:dc:
49:35:d7:f1:77:2d:e8:e9:db:af:c0:e3:8d:b5:03:3f:cb:88:
3a:24:3f:55:e5:0f:b3:51:ca:b9:a2:6f:81:e3:12:3e:21:b9:
29:5a:14:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:22:30 2026 by rpki-client