Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
File: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft (raw, json)
Hash identifier: PouSOor2VwVh5YohoPKxAFXtF5sN04p//hZsec+0NZw=
Subject key identifier: E4:D7:17:50:33:30:94:A4:D5:46:92:24:0E:ED:D8:ED:C2:A5:E8:76
Authority key identifier: F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
Certificate issuer: /CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Certificate serial: 019CACB553454E3011F74191A12DF8E695FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
Manifest number: 047B
Signing time: Mon 02 Mar 2026 04:01:30 +0000
Manifest this update: Mon 02 Mar 2026 04:01:30 +0000
Manifest next update: Tue 03 Mar 2026 04:01:30 +0000
Files and hashes: 1: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl (hash: tGcKblneY/pZiEDqjNxVZ35Ja6WDdy0IRpSQACBWlmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:53:45:4e:30:11:f7:41:91:a1:2d:f8:e6:95:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Validity
Not Before: Mar 2 04:01:30 2026 GMT
Not After : Mar 3 04:01:30 2026 GMT
Subject: CN=e4d71750333094a4d54692240eedd8edc2a5e876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9e:bd:8a:3f:5e:0c:23:eb:9a:b6:69:df:ef:
3f:6a:d3:15:15:45:2f:9e:0d:e6:c9:70:86:a6:4a:
51:bd:6f:71:2d:7f:66:5d:3a:08:45:73:c6:f5:53:
d1:09:7e:03:05:d5:ab:63:b6:88:da:05:41:2c:44:
08:10:81:79:d4:7b:09:f3:72:97:0d:e8:94:14:9f:
05:08:bc:ef:20:b3:6c:cb:86:90:94:db:80:51:e2:
fd:bd:3b:ef:b0:3a:d0:a9:dd:27:86:b8:31:e6:3b:
68:8d:4c:a7:6d:60:95:2d:72:0d:08:2c:90:a4:c9:
65:85:3e:cf:b4:1e:d9:4b:01:a3:c1:8a:1a:56:b8:
06:a7:bc:61:69:53:a7:1f:7f:af:64:5a:89:83:24:
72:71:9b:3d:48:6a:e2:d1:5b:93:dd:3d:39:b1:c9:
08:3c:3c:75:28:7c:9a:d9:5b:1a:55:1d:db:41:2b:
f6:8a:37:6d:93:8b:72:00:63:af:3e:a8:e7:32:e4:
3f:f1:df:b2:cd:f0:9f:ff:ef:c5:7e:c0:40:86:9f:
32:1e:63:17:88:d0:14:62:4c:63:3d:b9:d0:26:4b:
9a:f6:15:c4:08:38:5b:cf:41:02:f4:4e:af:78:67:
23:9a:13:cb:d5:59:e0:68:a1:98:65:7c:1e:30:61:
fc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D7:17:50:33:30:94:A4:D5:46:92:24:0E:ED:D8:ED:C2:A5:E8:76
X509v3 Authority Key Identifier:
keyid:F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:67:1b:4e:8f:bf:cf:ae:25:2d:91:9e:a9:38:6d:c0:52:2e:
8a:1e:58:97:33:2a:cd:90:d3:a4:e3:3d:b4:53:ad:f7:9d:93:
9c:a4:3c:3c:20:93:83:e8:f9:8e:9d:8e:bb:4f:fa:69:04:e9:
e7:64:65:5f:dc:3c:06:fb:2c:01:b1:99:6d:c8:51:f4:fe:2d:
37:39:b8:ab:ff:d7:e7:dd:bf:d2:c5:79:03:6a:c5:78:6a:44:
5c:d2:cf:04:d6:49:10:3d:52:49:d4:cc:74:a4:45:67:b0:e9:
0f:7a:48:6f:ec:2b:ec:bb:b9:99:dd:3f:a1:ad:bb:78:5a:37:
d2:ce:be:56:fa:4c:1b:af:15:bc:0e:c9:b2:01:e5:3f:16:6e:
ea:e3:a6:f7:1f:41:5e:86:53:fe:fa:71:c5:ec:76:c8:73:c2:
e9:47:b5:ef:09:07:bc:1f:6b:f2:5a:6c:cd:76:15:1c:55:55:
2e:c8:80:6b:ac:d3:8f:3a:12:09:4e:73:12:e6:2f:94:69:91:
e4:c5:88:16:c0:2f:1a:93:79:5b:17:8f:72:36:58:59:fb:56:
7a:ea:ea:84:14:70:60:01:7b:07:c6:75:97:cd:ff:9d:94:c4:
3e:24:20:bc:2b:62:36:38:6d:37:d0:d5:77:8e:f4:cd:73:f3:
18:ef:f4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:49 2026 by rpki-client