Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
File: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft (raw, json)
Hash identifier: NXDfBfQFKFaK4QNWy6o47aaJarGFRQsSPCr4MPZO7I0=
Subject key identifier: 23:D0:81:FF:13:8B:D9:6A:FD:55:4F:99:9E:BE:0A:42:E7:42:7A:2F
Authority key identifier: F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
Certificate issuer: /CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Certificate serial: 019F9023114C445F5BAA1CC720AD65024FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
Manifest number: 0947
Signing time: Thu 23 Jul 2026 18:00:45 +0000
Manifest this update: Thu 23 Jul 2026 18:00:45 +0000
Manifest next update: Fri 24 Jul 2026 18:00:45 +0000
Files and hashes: 1: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl (hash: lVuATy95FKMgImWrgmIVXxf37m8tPNyzOLi0TCpkFaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:11:4c:44:5f:5b:aa:1c:c7:20:ad:65:02:4f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Validity
Not Before: Jul 23 18:00:45 2026 GMT
Not After : Jul 24 18:00:45 2026 GMT
Subject: CN=23d081ff138bd96afd554f999ebe0a42e7427a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:3f:14:ec:be:45:ad:9f:7d:c1:89:dd:85:
a9:bc:37:3a:da:b0:8d:8a:2a:39:49:00:b9:2f:93:
46:1c:7d:51:33:c7:a0:20:1e:b1:b9:2b:77:6e:6f:
ed:8e:d0:f2:87:d6:ae:35:de:33:1a:09:48:bf:de:
21:c0:bb:59:7c:f6:f6:7f:c4:d8:85:64:1a:df:9e:
4f:00:e8:e4:98:2a:fe:1e:47:a4:93:4d:60:17:5b:
93:2b:1e:52:c2:bb:dc:57:70:1a:02:ea:28:da:6a:
b7:8b:cb:17:de:8a:fe:d0:ce:3c:55:eb:e0:8d:0d:
11:68:a1:82:93:3e:a6:d5:92:4a:68:3a:1e:1d:e8:
70:b1:79:cb:3c:b7:cd:f9:df:a7:a7:1b:41:c7:25:
42:3b:86:05:91:62:8d:10:e4:94:fc:42:b8:2d:e8:
cd:53:5c:00:b5:ff:87:c5:ea:28:88:4c:8c:d9:ca:
8f:20:bb:18:e2:c0:7f:93:89:e0:ca:8d:a3:5a:99:
ef:c8:93:da:14:17:da:1d:9c:50:7e:5c:5e:ca:f6:
d5:7b:99:d1:df:0a:7c:2d:6c:9b:96:5d:b7:d1:6b:
14:0c:30:ac:48:9c:c4:c7:9e:c0:b3:4e:1e:89:a7:
df:a4:02:24:e7:22:c3:8a:aa:e7:c6:dc:f1:ee:6a:
c0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D0:81:FF:13:8B:D9:6A:FD:55:4F:99:9E:BE:0A:42:E7:42:7A:2F
X509v3 Authority Key Identifier:
keyid:F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:bb:32:fb:7f:63:ab:db:99:a4:89:38:ff:7c:28:30:79:20:
fa:c4:31:fa:7d:25:df:0d:e9:be:55:50:c9:98:e0:c9:62:4b:
4a:8e:38:8c:05:10:33:f8:d7:8a:b3:aa:b6:73:1a:63:ca:4a:
c0:6b:aa:fd:97:21:ac:92:20:b4:00:a2:ff:8b:19:b8:2e:a6:
0f:ea:59:03:36:f9:bf:00:52:aa:78:1a:06:49:7f:eb:de:65:
e8:9e:82:3a:96:3d:7e:d7:a1:f6:b6:53:78:95:7b:1c:8b:09:
68:22:56:b7:0c:1b:6b:44:84:f5:95:65:0e:e6:ec:17:de:ef:
9a:7a:6d:17:95:7a:45:95:32:00:26:04:79:79:30:45:df:3b:
b2:2a:cc:e6:91:65:cd:2b:79:83:1c:c6:e4:f1:66:84:d4:db:
b3:86:06:3e:11:57:0b:d9:19:bd:5f:f8:53:ab:6f:7f:52:e4:
b1:a2:13:02:45:2b:05:40:66:b2:d9:57:67:09:e0:81:29:ea:
60:4a:67:93:72:b7:b3:f9:20:ba:d1:2b:00:55:1f:ea:7c:75:
46:d6:78:e4:2c:18:e0:bf:fb:fb:dc:da:c1:ae:e2:33:88:91:
f9:9e:5d:3b:78:d8:9e:73:1a:5b:c1:56:a7:ee:17:c9:73:e6:
2b:1e:81:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:39 2026 by rpki-client