Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
File: 9yR1sGTeionxUD6u_H1yrczzihY.mft (raw, json)
Hash identifier: i4be4ErBYIxjd15xX1h7Hkzoid1wKwyvdZhzePOdH40=
Subject key identifier: D6:48:4A:03:9F:28:00:C1:EB:EC:79:BA:15:62:96:63:B2:33:39:6C
Authority key identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
Certificate issuer: /CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Certificate serial: 01A0CB224F47ECC234B9878682CB33E71670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
Manifest number: 1A64
Signing time: Tue 22 Sep 2026 22:00:18 +0000
Manifest this update: Tue 22 Sep 2026 22:00:18 +0000
Manifest next update: Wed 23 Sep 2026 22:00:18 +0000
Files and hashes: 1: 9yR1sGTeionxUD6u_H1yrczzihY.crl (hash: +uPqBM2IbxYs+V43TEQckhDMR8t3W9RXjUHolSXEkZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:4f:47:ec:c2:34:b9:87:86:82:cb:33:e7:16:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Validity
Not Before: Sep 22 22:00:18 2026 GMT
Not After : Sep 23 22:00:18 2026 GMT
Subject: CN=d6484a039f2800c1ebec79ba15629663b233396c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:33:6b:fc:cf:e3:c3:ed:c9:b1:a9:53:98:ad:
dd:4f:3f:1a:58:3f:99:f2:b2:41:37:40:a9:94:62:
86:2d:db:28:ba:dc:9c:37:a4:43:26:8c:bd:2b:55:
ce:db:c0:1b:01:08:2c:98:cf:bb:37:51:01:c0:28:
87:b5:28:c5:a1:28:64:1c:56:c9:cc:a5:a4:41:62:
b6:3b:b3:d3:5a:64:cc:e0:18:7a:41:a9:d6:23:d0:
c1:64:3d:f2:02:c3:e0:b6:63:81:4a:8b:a4:42:61:
b1:84:dd:e2:c2:a5:92:3f:9b:97:04:a0:01:b7:be:
b0:e3:01:4c:eb:e3:e4:17:20:fe:3a:92:7e:6f:1e:
f8:12:7e:fc:18:b1:53:8f:2c:d6:43:3b:94:c9:f4:
98:66:db:e6:22:eb:ab:6b:36:c4:c9:ad:f4:83:42:
35:7a:55:71:bf:cb:f8:66:34:a5:43:17:5d:68:1b:
8a:47:7f:3f:06:1f:11:45:70:9b:20:0c:ec:26:d1:
80:96:43:93:ee:bd:ff:1a:b9:e4:49:62:38:be:0b:
09:1a:58:94:9e:27:4b:45:88:3c:0a:f5:9a:43:f1:
7c:88:d2:11:e4:a1:e8:aa:30:39:0d:62:b4:23:f4:
74:94:d4:1d:12:b9:3d:80:45:88:3e:15:50:b4:cc:
45:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:48:4A:03:9F:28:00:C1:EB:EC:79:BA:15:62:96:63:B2:33:39:6C
X509v3 Authority Key Identifier:
keyid:F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:79:38:36:f0:07:49:0d:cb:c2:85:ea:65:8b:e0:59:09:8b:
64:16:56:2d:08:67:91:d0:a0:22:42:51:8b:2d:11:41:01:a3:
b3:a9:da:61:fd:6e:2b:b5:6c:7d:71:68:91:33:f3:9b:92:b7:
78:3a:44:54:64:0f:e0:6f:42:c0:27:8f:83:d1:09:bd:b0:26:
fe:3a:1f:45:ae:f9:64:b7:6c:8b:a4:b6:0e:0f:2b:61:7a:8c:
40:18:f6:43:8d:ab:dc:e1:db:e6:aa:d6:4b:ca:4c:7c:81:52:
18:33:b1:13:1d:ca:4e:47:df:62:71:73:17:d0:ac:ab:41:cb:
c5:50:9a:dd:0d:b0:5f:35:75:2d:2b:ba:53:85:b6:6f:39:5f:
a6:e2:d7:74:00:75:1e:a6:23:b9:ab:98:93:16:fa:73:40:3c:
81:7f:45:18:7c:a4:7b:65:5b:c3:25:b8:73:d8:79:f1:92:50:
81:14:95:c3:b3:43:fa:01:ed:68:73:59:76:f7:a3:68:48:43:
c1:6d:49:b2:ba:32:6b:f5:9d:f4:12:70:50:b4:50:80:bf:5f:
d9:d4:52:f4:51:a2:ca:c2:56:3f:d2:97:df:6f:3a:6a:79:7c:
5a:8e:c8:44:21:5f:89:99:7f:cb:33:ac:4a:0e:6d:0f:10:3d:
03:f8:90:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:26:06 2026 by rpki-client