Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
File: 9WFTxQuIFb0o37sA4j5vJjIDFy4.mft (raw, json)
Hash identifier: 4WqXAEQZOzWkw/xG0ZxvExRuYoM4MHojM1kom+5QrkI=
Subject key identifier: B6:B4:44:5B:4F:B8:97:51:43:5A:70:F1:32:1F:54:15:B8:22:62:A3
Authority key identifier: F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
Certificate issuer: /CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Certificate serial: 019CAA5934CBE6442DBAF00075CE7F731807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
Manifest number: 0D28
Signing time: Sun 01 Mar 2026 17:01:38 +0000
Manifest this update: Sun 01 Mar 2026 17:01:38 +0000
Manifest next update: Mon 02 Mar 2026 17:01:38 +0000
Files and hashes: 1: 9WFTxQuIFb0o37sA4j5vJjIDFy4.crl (hash: sYQo7p3yuS4ZV9Jxxg7EK/G0CxCQYqfcwju95g0gV84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:34:cb:e6:44:2d:ba:f0:00:75:ce:7f:73:18:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Validity
Not Before: Mar 1 17:01:38 2026 GMT
Not After : Mar 2 17:01:38 2026 GMT
Subject: CN=b6b4445b4fb89751435a70f1321f5415b82262a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:be:a0:81:d9:0f:84:54:a1:5b:10:9b:60:
65:4a:5a:c6:89:c8:ed:f0:33:4d:74:de:47:28:54:
b7:7f:07:d2:5f:32:b6:26:8c:a3:c6:37:89:1b:e3:
4c:c6:91:b0:cd:f7:4f:b1:45:bc:1a:d3:0d:7d:60:
08:8a:7e:79:af:8c:33:86:3d:5c:f4:fc:61:b2:a6:
41:9c:38:10:0b:9a:4b:12:94:e8:44:84:6c:d5:26:
e5:c2:d0:98:de:c0:ba:e1:6b:6b:fb:24:80:a9:da:
3d:6c:5c:6e:b5:c1:9d:b6:7f:2f:08:53:39:93:1c:
42:e7:ac:47:9b:e0:c4:21:04:91:da:fc:9d:17:7d:
f6:68:99:0f:b1:53:54:68:55:b8:dd:eb:73:59:e7:
3a:16:e7:ba:66:91:54:37:13:d5:b3:66:dc:00:62:
27:bf:72:36:b9:06:ec:e5:e4:a5:1f:08:2f:32:02:
fb:83:ea:64:48:06:52:6b:9c:4c:6e:6d:b3:fc:7d:
13:61:c3:3d:55:e1:91:c9:f3:80:30:78:91:7a:64:
bc:b6:40:bb:8e:03:0a:e0:22:f1:55:9b:b0:e5:56:
e5:46:7a:10:db:8c:98:92:a7:3f:47:df:fd:1d:2f:
75:0e:83:fa:3c:24:eb:0f:35:1b:d8:71:12:b6:7e:
36:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B4:44:5B:4F:B8:97:51:43:5A:70:F1:32:1F:54:15:B8:22:62:A3
X509v3 Authority Key Identifier:
keyid:F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:07:de:77:f7:3b:dd:71:3e:81:74:9a:95:43:be:6a:d6:7d:
64:47:e5:55:d0:e6:c0:21:c5:e2:39:39:41:a4:be:79:57:82:
86:dd:c3:da:b8:7d:cd:cc:27:f8:1b:63:0a:3a:4a:a3:7c:b5:
ab:2f:fd:e8:a0:45:b7:87:09:76:57:fb:e7:c8:e2:6c:da:64:
6f:31:19:c2:67:13:02:d2:88:29:af:ad:a6:5b:79:a3:d4:e3:
9c:42:1d:59:52:d3:35:c0:c9:c4:03:7b:d7:49:13:b7:72:0c:
ff:43:75:b4:ba:83:b3:a1:35:d0:40:51:a8:6a:90:47:95:40:
68:05:99:7c:69:f3:46:99:51:5e:c8:63:74:42:89:e7:09:94:
78:e1:f3:75:c3:30:01:9c:dd:27:17:56:f8:2f:65:3c:1b:0d:
ca:08:17:d1:03:ee:60:ae:3b:e5:b7:bd:13:a8:30:1e:a9:6d:
f0:b3:07:69:aa:65:25:fd:b6:49:a9:85:7c:fd:71:da:2f:fc:
97:62:bf:84:52:33:8f:fb:1c:8b:96:53:22:00:45:dc:d2:d7:
6c:84:07:85:e9:ad:a5:66:a5:4f:07:22:9d:82:36:a6:ae:e9:
df:79:3c:72:9f:27:1f:42:c1:a4:3a:bc:d1:24:63:f2:60:52:
77:1e:15:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:16 2026 by rpki-client