Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
File: n9e3i11VWv7XZxyRbCbrf_x-LJo.mft (raw, json)
Hash identifier: sFeeSDW2JiPTvj6gaS07Buj0xt0FV1CsPUoCUnrW37U=
Subject key identifier: A9:01:7A:A2:FD:B1:53:87:76:9F:6E:9C:C6:BC:3C:A0:FA:66:14:07
Authority key identifier: 9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A
Certificate issuer: /CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
Certificate serial: 019D99D0DF4F6DDD9E6CC438CED3C826349F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
Manifest number: 07BD
Signing time: Fri 17 Apr 2026 05:01:35 +0000
Manifest this update: Fri 17 Apr 2026 05:01:35 +0000
Manifest next update: Sat 18 Apr 2026 05:01:35 +0000
Files and hashes: 1: n9e3i11VWv7XZxyRbCbrf_x-LJo.crl (hash: Grk1bwgBeeTw9iyDVnzChWiBJz4oEnKElXccidwKKZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:df:4f:6d:dd:9e:6c:c4:38:ce:d3:c8:26:34:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
Validity
Not Before: Apr 17 05:01:35 2026 GMT
Not After : Apr 18 05:01:35 2026 GMT
Subject: CN=a9017aa2fdb15387769f6e9cc6bc3ca0fa661407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bc:fd:73:76:54:89:68:af:81:f4:aa:64:89:
17:4a:b3:b6:21:20:c8:f2:09:fa:87:b3:b1:27:40:
95:68:c1:a8:f4:4c:df:bb:33:31:5f:f3:4e:0b:4e:
f4:98:f1:73:9f:c2:bb:70:85:bb:45:fe:d4:fe:79:
46:d7:d8:f6:87:cc:96:25:ac:3c:14:c5:c2:8c:a9:
5f:70:a8:b1:8a:a4:0c:e3:86:dc:6f:59:7f:31:de:
42:db:de:eb:e3:7a:fe:35:9d:6b:13:80:6e:e4:32:
e7:9c:93:4b:51:b5:40:01:cd:a3:85:ee:b4:04:75:
70:bc:3c:b6:82:c2:e5:e8:ef:57:e2:08:cc:ae:69:
17:d4:40:8b:10:dc:b7:26:f3:58:47:b7:96:a3:33:
c4:31:83:ac:31:fa:a0:a1:f0:86:4d:16:25:dd:8e:
22:e5:b6:db:64:db:e0:36:3d:47:e3:99:5d:25:42:
a2:cf:82:2e:ae:52:cf:31:d1:61:99:38:72:20:f0:
ce:0f:16:6f:b9:36:89:77:84:58:70:9b:ef:fa:56:
0d:20:2c:e7:b5:61:5b:b8:5d:b8:ef:2a:b8:84:31:
f1:eb:2d:d6:07:b8:52:61:d2:9c:b1:a6:8b:5e:53:
96:66:82:bf:15:e1:b2:45:15:f6:af:db:2e:ec:2b:
16:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:01:7A:A2:FD:B1:53:87:76:9F:6E:9C:C6:BC:3C:A0:FA:66:14:07
X509v3 Authority Key Identifier:
keyid:9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a6:45:f6:29:7f:62:2c:c2:33:e5:24:25:43:ee:c7:84:38:
58:0b:e2:eb:91:9e:5d:76:db:f9:20:41:c8:4a:b7:c5:ee:dd:
fb:36:15:58:cf:cc:ae:96:e0:fc:41:fa:18:21:59:53:f6:63:
25:62:b5:43:a9:7d:86:bd:43:5b:34:ac:0c:af:02:d9:a1:90:
ca:20:2e:a9:7a:9d:a0:e4:da:c1:e9:ad:70:d1:43:dc:93:ab:
b3:5d:55:50:a2:14:97:90:71:a5:5f:01:58:bf:a1:92:a6:eb:
34:c2:d4:bd:0d:d2:c8:ef:43:80:af:33:32:c7:78:61:0a:19:
f6:44:e3:ba:59:3a:02:ef:0e:d8:a7:3d:74:d0:3e:29:8b:71:
c5:62:6c:4d:43:fc:68:5f:8c:a1:96:d8:1b:67:70:03:3c:4d:
7b:48:c8:3f:50:9f:75:64:19:0d:ff:13:3a:10:a3:0d:f9:95:
a8:07:91:23:b0:24:4b:9e:e5:9f:87:37:32:f7:38:30:4d:75:
77:a1:2c:c1:e4:6e:b7:86:08:a6:1a:2f:ec:bd:38:79:50:8a:
cc:4c:26:06:af:4b:c1:cf:52:c8:c8:cf:5b:4b:27:b6:9a:a2:
8e:a6:96:52:96:a1:9f:20:a9:5c:71:ea:d9:58:05:40:11:a2:
d6:ee:d6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:21:40 2026 by rpki-client