
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
File: c-9b03Yu9g-njtVfVE-joFE_2EI.mft (raw, json)
Hash identifier: dmZVe4NbbIBOiUjN7l7YtovP3BKALggsGF9QIwgDt/A=
Subject key identifier: D1:8F:EC:EB:55:AE:CC:EF:68:58:D1:AD:67:D9:4F:9D:51:52:C4:76
Authority key identifier: 73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42
Certificate issuer: /CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
Certificate serial: 019CAB6B5F0BF7040385FE11D8160964352E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
Manifest number: 134C
Signing time: Sun 01 Mar 2026 22:01:06 +0000
Manifest this update: Sun 01 Mar 2026 22:01:06 +0000
Manifest next update: Mon 02 Mar 2026 22:01:06 +0000
Files and hashes: 1: c-9b03Yu9g-njtVfVE-joFE_2EI.crl (hash: 3R2xt2ZY+clKquFLtHjkjBvr7ejWHF//fMtHENpW4CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:5f:0b:f7:04:03:85:fe:11:d8:16:09:64:35:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
Validity
Not Before: Mar 1 22:01:06 2026 GMT
Not After : Mar 2 22:01:06 2026 GMT
Subject: CN=d18feceb55aeccef6858d1ad67d94f9d5152c476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:79:53:52:68:b3:2d:5c:f9:d9:ff:e0:79:b3:
96:68:30:b3:63:1d:74:b3:27:a4:6c:94:27:82:5a:
2d:d7:eb:95:20:10:07:26:1c:1e:5d:7c:55:3f:59:
d7:3a:d3:3b:26:9d:17:37:72:f1:e6:06:85:ff:3b:
43:e5:96:45:23:69:66:85:7b:bf:3b:93:82:64:53:
d4:cc:37:4e:69:3a:6a:c9:dc:00:99:47:21:92:80:
16:71:f3:cf:bd:2c:76:fe:46:d1:1b:b5:e5:1c:52:
50:9b:22:eb:92:64:33:e7:98:0c:d8:93:2c:a6:95:
e8:6f:f7:df:02:d1:a5:98:ed:9d:07:76:fc:0d:78:
35:fe:a5:3b:9f:2a:3a:51:46:cd:ba:63:1e:17:01:
af:c3:25:8d:ab:8c:5a:bc:95:8e:62:69:12:3f:b5:
b1:18:5f:d1:30:ab:e4:d2:b7:03:87:61:5c:f7:05:
56:74:47:47:f7:b7:a7:7c:26:21:22:a7:77:0e:a0:
f4:00:7d:1a:50:de:2b:cd:07:66:50:4b:35:a6:0a:
e3:4a:49:3d:bd:71:cc:7e:10:fc:7e:d0:8a:42:d4:
d2:bb:ac:40:f2:fc:7f:c0:bc:1a:25:7f:85:e6:2f:
02:9b:c3:a2:e2:9d:a5:34:0f:c9:fe:4a:04:b2:e2:
4a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8F:EC:EB:55:AE:CC:EF:68:58:D1:AD:67:D9:4F:9D:51:52:C4:76
X509v3 Authority Key Identifier:
keyid:73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:34:9a:6f:dd:5c:76:19:85:fb:ec:2b:1c:8f:ad:ca:2b:9d:
7e:dc:31:57:28:49:f3:6e:aa:6a:be:c2:5c:c9:4e:78:62:72:
55:b4:2a:fc:9d:1a:0f:02:f3:91:5c:c4:cb:04:c1:46:6b:e1:
a4:6d:e8:30:ce:0a:7e:b8:cb:4d:0c:3c:ac:ef:ff:fa:c2:21:
31:75:69:88:b1:01:39:70:dc:6a:56:67:8f:5a:be:eb:5d:17:
c9:1b:42:5b:bf:e3:29:71:6f:bf:4b:92:28:36:7c:9b:d2:a8:
b5:8c:97:4f:37:82:af:e7:31:b7:8c:bc:cb:40:03:74:cb:97:
ea:14:b3:44:5a:fc:47:5d:e2:1f:52:69:b7:8e:e4:a2:23:02:
e2:e8:5a:7f:fe:72:04:b0:db:05:08:15:20:8b:3b:1b:5c:eb:
43:72:3b:cb:02:b5:16:9a:68:cf:f6:3a:19:7e:07:c8:77:10:
a8:b0:1e:67:82:2b:ab:e7:af:36:97:a9:11:68:99:0e:ce:0f:
02:a9:bd:8c:45:28:56:59:ae:55:92:55:23:6b:d9:50:5c:98:
e9:34:74:ed:a7:37:ca:b0:6d:ad:23:18:12:5e:74:1b:b2:af:
79:6c:99:be:db:1f:8b:a2:bc:a9:88:fc:97:de:13:03:b7:c5:
0c:0c:31:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:39 2026 by rpki-client