Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
File: 9yjCKwJQJ1-m63NLoA55D343pVA.mft (raw, json)
Hash identifier: HT4ffNWobGUir4bwPkOvLTZPIKLmui6ckepYS62u1dk=
Subject key identifier: 2A:7F:E1:60:5B:43:20:B9:87:14:4B:D1:E6:8E:79:E0:37:92:54:30
Authority key identifier: F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
Certificate issuer: /CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Certificate serial: 019D9AE3762DF3601CE37AE9B9348F1AAF76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
Manifest number: 0BEF
Signing time: Fri 17 Apr 2026 10:01:31 +0000
Manifest this update: Fri 17 Apr 2026 10:01:31 +0000
Manifest next update: Sat 18 Apr 2026 10:01:31 +0000
Files and hashes: 1: 9yjCKwJQJ1-m63NLoA55D343pVA.crl (hash: 2ZSh0m8tzmCSgTeycTl7v3cRTuYMxYBg20LO4YjSRVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:76:2d:f3:60:1c:e3:7a:e9:b9:34:8f:1a:af:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Validity
Not Before: Apr 17 10:01:31 2026 GMT
Not After : Apr 18 10:01:31 2026 GMT
Subject: CN=2a7fe1605b4320b987144bd1e68e79e037925430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:63:9b:71:1c:e5:51:4e:e7:72:ec:03:16:c2:
ef:69:dc:d4:de:a9:92:8a:a5:6c:ee:d2:e0:f2:ff:
c1:43:eb:4a:85:ed:34:74:2d:9f:9c:6c:71:c7:7b:
be:d9:8e:7a:e9:e4:82:a6:62:20:a3:9b:41:84:01:
01:fa:88:ee:d4:8c:49:90:9b:9f:49:86:d2:ca:02:
25:b0:b9:f0:52:98:12:ef:78:e2:e5:89:47:6d:e1:
04:61:28:ff:86:cf:fe:2a:96:c8:a6:29:98:13:1b:
ce:3c:cf:90:f2:8e:04:08:2e:85:fc:10:01:3f:af:
9c:a7:2f:cd:ad:df:66:1b:8b:4e:d1:9d:a0:f7:97:
08:fe:b6:a8:43:09:2e:5b:c6:d5:5f:a5:5d:c3:c4:
d0:b9:3c:c3:db:31:d3:29:89:ff:88:b5:13:28:8e:
be:0c:7f:74:35:e0:99:14:ed:08:fd:2c:2d:03:9c:
67:f2:e2:2a:db:8a:76:ac:7b:11:38:34:66:92:45:
55:3e:77:3a:7a:b6:25:76:87:bf:ec:38:ef:09:37:
7f:80:08:82:b5:73:1c:1f:02:06:67:ee:04:61:76:
ce:17:c8:20:dd:39:86:31:21:29:7c:00:0b:3f:86:
70:7e:29:0e:32:7e:28:3d:57:57:2a:6f:53:db:db:
38:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7F:E1:60:5B:43:20:B9:87:14:4B:D1:E6:8E:79:E0:37:92:54:30
X509v3 Authority Key Identifier:
keyid:F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2d:82:3d:fb:10:94:24:d2:49:4a:39:35:3a:72:11:40:61:
c7:75:b1:ef:d4:00:ff:0f:c8:53:f8:a4:59:ba:d0:d1:27:2f:
ed:68:54:75:a3:8d:29:b2:4c:7e:f8:ee:f7:7e:05:da:96:3c:
bb:6a:71:99:71:fb:3c:7e:f5:ae:c2:ba:fa:69:c9:e2:3b:9d:
f1:ae:2a:5d:25:7c:57:31:ea:84:46:b6:6d:22:ec:23:42:6f:
44:3f:10:fb:61:70:23:df:e0:23:12:32:e6:35:cb:c6:da:4c:
8f:61:6f:a7:f9:81:66:35:92:31:4a:b5:38:85:e6:0e:9d:87:
7e:a1:24:89:e1:14:ec:e8:41:93:3a:a4:79:d8:26:06:34:54:
4e:98:24:1f:5c:a7:c6:a1:57:80:fb:b3:08:c8:e6:43:74:77:
45:b3:75:70:00:57:91:00:1e:8e:08:0a:52:d7:51:ea:d2:56:
28:2c:b7:04:2d:83:59:33:64:be:74:74:a8:e0:77:f9:96:f1:
fa:5b:da:83:06:be:ec:c8:7b:1f:2d:8b:20:15:3b:25:45:68:
1c:c0:c1:2a:1f:58:ec:21:60:40:3b:5b:9d:89:66:61:6e:87:
50:80:b8:24:65:73:62:5a:3e:2f:1d:7d:a8:94:e3:02:1f:f8:
1a:36:f8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:06:52 2026 by rpki-client