Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
File: 9URgWW1tUyQB3jE9-JA2blN21gI.mft (raw, json)
Hash identifier: PQzhcLLC6dK3drEtwZorrAfxLUBjR0xsk6TsIfWnWpk=
Subject key identifier: CA:92:22:3F:E5:87:6B:EC:EE:CC:54:AF:2C:39:A3:B8:16:A4:EB:04
Authority key identifier: F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
Certificate issuer: /CN=f54460596d6d532401de313df890366e5376d602
Certificate serial: 019CABD94FB82B4EFE1C1BD6F8418008D91F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
Manifest number: 0818
Signing time: Mon 02 Mar 2026 00:01:11 +0000
Manifest this update: Mon 02 Mar 2026 00:01:11 +0000
Manifest next update: Tue 03 Mar 2026 00:01:11 +0000
Files and hashes: 1: 9URgWW1tUyQB3jE9-JA2blN21gI.crl (hash: AvdCx5Q7/2PCVYcosBohXCl6ztOVjMVjOozTzsMseKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:4f:b8:2b:4e:fe:1c:1b:d6:f8:41:80:08:d9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f54460596d6d532401de313df890366e5376d602
Validity
Not Before: Mar 2 00:01:11 2026 GMT
Not After : Mar 3 00:01:11 2026 GMT
Subject: CN=ca92223fe5876beceecc54af2c39a3b816a4eb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d8:d4:c1:c2:34:f6:ac:16:cd:48:24:cc:94:
b4:d6:d1:f9:f0:98:a4:e9:39:39:48:18:22:7a:50:
b5:c2:0c:3f:06:03:93:76:bf:a1:c4:70:8f:2d:2c:
ab:13:d6:da:ef:d9:e6:8f:39:c6:82:dc:d7:a2:ab:
24:6b:82:dc:55:5a:da:56:ba:80:fb:4d:ac:1c:dd:
8c:1d:cd:52:4f:dd:5a:ea:2a:c3:5d:6d:94:94:a6:
96:7e:d6:f1:3e:28:c2:32:79:7d:80:59:0f:b2:ac:
7b:d3:50:04:0c:a3:ee:2d:fe:9b:8b:88:27:de:dc:
6f:7e:41:8d:16:5b:49:fc:11:19:6b:fd:e8:71:be:
21:d1:15:f3:9d:b3:bf:32:e8:47:d5:25:02:bc:e5:
2d:4b:e0:28:31:96:88:2f:70:a9:c1:81:f4:6e:2f:
f3:d5:be:bd:36:85:ba:55:0a:30:0e:62:0c:cb:6c:
a3:56:02:61:8f:d9:70:50:88:9d:85:6e:57:fd:d9:
72:aa:03:24:47:7f:61:ba:2d:b3:43:9c:f7:d1:25:
6e:ab:24:f5:1b:37:9e:94:df:b9:1a:2a:bc:bc:18:
63:c6:70:be:cb:1d:10:5b:29:85:98:67:4c:b5:6a:
03:ea:32:a6:19:a6:12:3c:e1:a8:c3:18:1e:69:62:
22:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:92:22:3F:E5:87:6B:EC:EE:CC:54:AF:2C:39:A3:B8:16:A4:EB:04
X509v3 Authority Key Identifier:
keyid:F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b7:a5:1c:4f:8b:b3:44:21:cc:0b:3e:15:8e:a0:f0:4b:27:
6c:09:f8:fa:06:9a:55:51:ef:c6:9f:5c:ee:0c:e2:6d:53:75:
23:0b:cf:6b:0c:50:93:36:7f:4a:2f:0a:cc:e8:e8:c0:c3:e8:
8b:21:b1:2d:e7:51:21:8b:5c:cd:d4:f6:c4:ec:2f:d6:35:29:
76:47:d3:a3:67:26:0a:d2:0a:ac:0a:e0:01:1a:60:0e:6c:46:
08:a4:e9:55:67:2e:ae:2d:e7:2b:46:ed:12:23:2c:a9:4b:ce:
a4:d5:b7:5d:64:ad:21:20:6e:20:e7:47:06:c1:04:fa:78:a1:
ef:b2:e0:6a:af:64:54:e5:68:77:3a:2b:b9:07:d9:9c:ac:3d:
f5:40:2a:3b:bf:66:44:22:26:e9:97:de:e2:58:43:ba:83:c3:
8c:05:23:fc:9b:81:a1:53:7a:3a:a3:b3:7a:46:d0:f4:f3:9e:
0a:f2:49:34:29:2e:24:40:4d:54:4b:4d:8d:11:76:02:b5:c9:
3f:b6:2b:e9:89:2e:54:3f:36:f4:44:79:dd:cb:8c:4b:04:93:
03:2a:ff:96:c1:30:29:f3:dd:34:67:f4:cb:ba:1d:d4:56:3a:
3d:d5:c4:c1:ea:ab:01:02:b5:df:fc:d0:9e:5c:8f:67:64:f1:
b3:87:14:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:31 2026 by rpki-client