Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft
File: 9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft (raw, json)
Hash identifier: YZl/JBYMWdqfNiDpOUREdB+Tq0kWf+4XccfNMoVbz48=
Subject key identifier: F2:E1:27:91:AB:DC:25:9C:C5:76:F5:3B:EB:C7:F4:D1:D1:28:A1:95
Authority key identifier: F7:14:3E:85:7E:21:54:30:FE:0C:B5:2C:2D:F4:CB:ED:1B:34:73:8D
Certificate issuer: /CN=f7143e857e215430fe0cb52c2df4cbed1b34738d
Certificate serial: 019E1DC74815238A67BEDF43E97B39983C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft
Manifest number: 02A8
Signing time: Tue 12 May 2026 20:00:59 +0000
Manifest this update: Tue 12 May 2026 20:00:59 +0000
Manifest next update: Wed 13 May 2026 20:00:59 +0000
Files and hashes: 1: 9xQ-hX4hVDD-DLUsLfTL7Rs0c40.crl (hash: RwpLpsma4a9FIqHHMiGX/vlVGp6D2tOHSZTHMnpz3KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:48:15:23:8a:67:be:df:43:e9:7b:39:98:3c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7143e857e215430fe0cb52c2df4cbed1b34738d
Validity
Not Before: May 12 20:00:59 2026 GMT
Not After : May 13 20:00:59 2026 GMT
Subject: CN=f2e12791abdc259cc576f53bebc7f4d1d128a195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:27:cf:e9:32:53:64:91:32:e3:54:ac:96:d9:
43:49:1c:1a:fa:69:cb:cf:b5:db:09:e8:a0:41:ef:
f9:11:1a:f8:af:73:de:f5:a0:a8:90:7f:b8:a9:57:
b1:bf:c7:c8:cd:a1:bd:f7:c0:75:11:36:5a:01:be:
14:a5:20:b3:a8:58:d1:e9:36:ab:7b:88:86:dc:19:
50:19:c7:30:1c:5b:0c:43:17:b8:ca:66:ba:4a:71:
32:dc:a6:cf:0b:de:30:e8:4f:66:76:21:87:cf:bd:
a6:d1:e6:a4:37:04:62:38:bd:75:83:fd:a0:17:3b:
52:85:9d:94:71:87:f4:ba:e8:13:88:d1:d4:73:08:
08:39:75:cb:0a:dc:60:5f:ac:24:0f:8e:6d:0d:14:
42:02:ce:b4:e9:19:7c:5b:02:75:f6:c0:02:74:eb:
81:70:c0:c7:06:2a:f3:f3:17:ae:f6:cf:05:0f:47:
31:7f:64:cf:b9:e5:92:d9:f8:04:c7:a5:55:99:3c:
d2:61:a9:f1:dc:ed:dc:8e:08:1f:5d:97:3d:1b:0e:
ad:ee:31:f1:3e:32:b2:3c:71:0f:9b:c2:86:72:61:
57:42:f8:ac:8d:83:7c:12:6a:71:99:72:12:6b:2d:
3e:30:f7:d6:98:05:fc:89:f1:c9:77:05:1b:4c:c3:
53:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E1:27:91:AB:DC:25:9C:C5:76:F5:3B:EB:C7:F4:D1:D1:28:A1:95
X509v3 Authority Key Identifier:
keyid:F7:14:3E:85:7E:21:54:30:FE:0C:B5:2C:2D:F4:CB:ED:1B:34:73:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9b:b9:59:6a:c2:36:67:4f:8d:66:e4:1b:88:de:e3:2f:2e:
46:a0:77:3e:78:21:a3:a1:bb:5f:2e:30:7f:d2:1e:b7:7a:20:
09:84:c6:a1:5c:62:2e:f2:e4:2b:8b:99:7d:53:d0:9a:ea:a9:
43:95:24:70:33:99:bd:ad:f6:9e:bb:34:73:19:a5:67:d8:28:
40:42:15:ef:b8:b1:9a:5c:71:b3:e1:34:62:92:6a:1e:9a:19:
31:65:ee:4d:3a:ef:0d:83:ba:b6:26:a0:59:5a:85:d2:b8:66:
d8:fd:a6:33:de:7b:17:a1:0c:4c:5e:9c:e0:33:7f:f8:13:36:
f7:88:d4:a5:c2:5f:bc:e3:e0:e1:87:9c:ba:a6:d2:58:65:19:
d4:e3:c3:51:29:55:89:ec:6d:70:5e:d4:a1:50:32:6b:37:24:
f4:0c:79:e5:85:fb:ac:27:e2:d9:42:32:29:e3:5b:22:19:a7:
96:89:f4:5e:40:6d:cf:ee:3d:52:e3:1d:35:34:fa:18:e5:8d:
ae:8b:52:5f:d3:85:d9:20:09:0b:2d:f0:99:c7:54:6b:83:e2:
e9:14:51:a9:3b:34:b3:6c:d1:64:a4:2f:76:b4:83:18:97:73:
e8:da:ee:e7:de:46:1d:be:93:8d:b1:cf:91:8d:40:14:8c:4a:
3d:2c:2e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:23:19 2026 by rpki-client