Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
File: 9l95H50M9str44nJRWjId0BeUUQ.mft (raw, json)
Hash identifier: u+8BstoSSb171hpK42/p6iIVofgc3+EqSS8h3hAUS18=
Subject key identifier: 7D:4F:CE:05:83:92:23:E1:83:1D:B4:C4:28:BB:B9:AA:3F:9E:64:BD
Authority key identifier: F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
Certificate issuer: /CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Certificate serial: 019CABD977C0E050E1C012006162190152F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
Manifest number: 07B0
Signing time: Mon 02 Mar 2026 00:01:21 +0000
Manifest this update: Mon 02 Mar 2026 00:01:21 +0000
Manifest next update: Tue 03 Mar 2026 00:01:21 +0000
Files and hashes: 1: 9l95H50M9str44nJRWjId0BeUUQ.crl (hash: Bq3OuILaaNwGpyyZWdrbR0zHvSZPaN/9dQ/57oR1Bc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:77:c0:e0:50:e1:c0:12:00:61:62:19:01:52:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Validity
Not Before: Mar 2 00:01:21 2026 GMT
Not After : Mar 3 00:01:21 2026 GMT
Subject: CN=7d4fce05839223e1831db4c428bbb9aa3f9e64bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:48:ee:ef:17:31:b3:a4:ff:4c:df:f8:53:29:
06:7e:48:3d:95:21:39:75:72:96:e1:5c:82:44:57:
93:a6:78:0d:17:1e:8e:42:34:66:b1:f4:87:61:3f:
cb:18:75:3f:33:68:f6:d1:06:7d:3c:fc:18:06:7b:
e5:dd:ba:df:22:bd:9f:e4:9c:0d:b6:25:f7:3f:4f:
d4:1b:a0:aa:3e:71:ba:3a:09:e5:6a:76:11:28:4c:
00:5f:d9:47:32:8a:f6:46:e5:61:35:a2:65:91:44:
21:65:db:59:00:81:88:87:11:c9:91:99:70:63:a9:
07:1c:0b:13:02:f6:f1:ae:a5:3a:5e:01:a2:ba:e1:
bf:2b:bb:a7:d6:19:ff:9c:24:52:b9:df:c1:07:96:
54:30:e5:3f:de:bb:a4:ab:a7:6d:1b:96:69:cb:87:
10:aa:67:2a:e5:d2:c3:e4:9d:db:0d:b4:8b:1d:0b:
bf:3e:fe:08:e4:48:ef:c8:a3:f4:e4:57:30:19:9d:
9c:8e:d0:89:e8:22:dc:db:c5:e6:00:da:d7:a3:16:
7a:6a:85:68:d5:69:c1:c2:e4:2a:73:f1:f8:2d:76:
78:ee:47:68:2d:85:a9:f8:6d:04:2e:38:99:71:15:
1b:9b:50:38:28:5e:5d:95:d7:07:8e:2d:dd:17:4e:
f4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4F:CE:05:83:92:23:E1:83:1D:B4:C4:28:BB:B9:AA:3F:9E:64:BD
X509v3 Authority Key Identifier:
keyid:F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:68:33:07:83:3e:4d:8d:50:45:5a:39:bd:2a:d0:b8:15:f1:
f3:af:46:55:7d:5e:12:0b:ce:12:d1:76:24:a0:5d:e9:3c:01:
38:dd:78:6d:2c:0f:67:9c:16:d5:05:d9:d1:16:8f:4a:39:71:
7b:9d:ea:ac:4e:cf:95:c7:8a:05:f3:e0:2c:f5:fe:6c:30:c1:
ba:e2:c7:a4:5d:48:bf:07:c9:1b:be:c4:4e:94:dd:62:ce:49:
aa:14:7e:83:51:04:20:02:f0:c5:8e:f4:23:39:2b:0c:ef:16:
82:b2:87:f4:39:09:cb:29:ac:e3:0a:c0:6c:88:a5:92:07:95:
f4:ca:77:14:82:12:52:df:65:08:6f:77:7e:1e:0b:78:43:eb:
43:4e:cd:20:f1:b4:70:0d:b9:c9:2a:28:c5:63:e3:0e:a7:fb:
bd:13:34:4a:3b:63:91:b7:46:e6:45:9a:cc:82:4b:ed:fa:00:
d6:5f:39:46:1a:03:3e:b8:e6:ba:a1:5b:8d:f0:58:1f:06:66:
b3:06:46:7c:45:e6:a7:63:bb:33:c9:80:7f:79:30:47:2d:9c:
06:6a:d9:aa:df:2c:ab:35:8c:89:0b:c9:0c:1a:41:cd:61:d4:
4a:f1:eb:37:2b:15:a5:2d:dc:95:b7:b8:e1:44:ee:86:e2:a7:
03:df:e2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:28:57 2026 by rpki-client