Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
File: 9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft (raw, json)
Hash identifier: 3zQA0DH70KKQ6OnwTCOt1BCMjLCx0VJWUT7cVSyzRnI=
Subject key identifier: DB:31:27:CF:09:BD:6D:59:DF:21:BC:5A:90:A2:7A:25:49:C4:D5:15
Authority key identifier: F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
Certificate issuer: /CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
Certificate serial: 019CAC7E19C6602EA545E7B9F1BF35052A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
Manifest number: 063A
Signing time: Mon 02 Mar 2026 03:01:11 +0000
Manifest this update: Mon 02 Mar 2026 03:01:11 +0000
Manifest next update: Tue 03 Mar 2026 03:01:11 +0000
Files and hashes: 1: 9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl (hash: Qfxk4PkRHP4MCod2raXVck0BBMyUctGTRqTKtQk7tXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:19:c6:60:2e:a5:45:e7:b9:f1:bf:35:05:2a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
Validity
Not Before: Mar 2 03:01:11 2026 GMT
Not After : Mar 3 03:01:11 2026 GMT
Subject: CN=db3127cf09bd6d59df21bc5a90a27a2549c4d515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0e:be:5b:a3:22:0e:86:e2:df:18:a4:b9:fa:
5c:9d:3e:cb:e1:8a:f7:b6:8d:c0:2d:56:28:a6:6f:
bd:13:0c:b2:92:69:0c:59:5b:ca:d0:21:04:c3:d4:
23:58:79:d0:e6:16:4c:a0:5f:12:72:15:01:1d:71:
91:be:49:0e:2b:59:f4:ea:ad:08:bd:9b:1f:67:88:
d0:f4:96:66:bc:1f:48:72:65:ed:79:29:98:9a:33:
8a:4f:4b:28:ca:48:7c:ff:86:c7:15:39:fb:93:ed:
b2:7a:3f:2e:a2:e2:6c:67:62:ff:b6:5f:25:b7:1a:
b0:b0:95:99:36:08:4e:30:12:e8:ac:bb:0f:9d:c6:
3f:76:62:ab:41:53:e4:44:1c:7b:94:28:f9:bb:25:
3d:16:a9:97:77:80:8a:dc:50:d5:c7:f1:e6:7e:aa:
a9:78:2a:d2:b7:22:df:44:68:43:a7:9f:d5:b9:82:
d4:aa:aa:3a:9c:31:49:7d:b0:99:a8:e8:c4:11:bc:
58:5d:6a:f4:bf:ad:94:15:78:ca:64:fe:4b:89:6a:
bd:32:ae:d6:3e:57:65:69:00:92:12:14:98:43:b3:
42:4b:a4:b7:60:bd:c6:97:99:80:cb:78:09:9c:08:
ec:37:d0:2a:91:34:93:71:9d:64:10:a5:d3:e3:79:
94:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:31:27:CF:09:BD:6D:59:DF:21:BC:5A:90:A2:7A:25:49:C4:D5:15
X509v3 Authority Key Identifier:
keyid:F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3f:95:07:a4:c9:d0:eb:c7:55:8d:ad:87:2e:96:a4:57:c9:
20:df:98:3b:5d:32:cc:40:62:75:8c:9a:f5:1e:bb:d1:90:c5:
59:c2:60:1a:ba:ea:c5:fa:92:d1:a2:c0:c1:a7:44:2d:dd:38:
86:8d:6b:77:e6:cc:d1:62:f9:04:a0:9f:cc:18:d9:41:2f:ea:
b7:55:e1:1e:2f:cd:09:92:43:4d:dc:e2:a6:ba:30:7e:e8:08:
fc:d3:ed:23:fb:7d:c1:b4:98:70:21:48:9d:d4:03:76:bd:7e:
4c:8c:8a:94:dd:2d:b6:e7:df:7d:75:77:d0:7d:5b:02:35:75:
0f:43:fd:22:08:ba:25:0c:0e:87:ed:5f:8b:50:94:31:d5:71:
f2:8e:14:c6:c1:07:b6:f9:9e:0f:8b:6b:1a:1e:69:d2:59:e4:
27:27:e7:aa:e2:e6:b6:7d:a5:f2:74:49:96:e9:36:5d:15:e1:
1d:85:78:5f:20:ee:5b:10:c1:8f:3e:01:28:25:ae:98:55:7e:
e0:20:dd:1b:5c:dc:8f:7b:a9:4f:ee:5a:50:08:24:8f:f0:4f:
01:fe:70:c0:c8:e2:da:22:7a:df:dd:5a:fa:b2:24:02:f9:14:
c0:90:06:c4:58:30:21:a0:2f:54:6a:5e:46:e5:fa:a8:18:3f:
57:06:1b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:16 2026 by rpki-client