Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
File: 9kixVYLTS9UXCp3RO4EyW6uuXjo.mft (raw, json)
Hash identifier: duP5a4rS3zykO2awPbQld6PEm5SzWfo4rjyZ+/SdYx4=
Subject key identifier: 16:A2:F2:EE:1D:70:40:7A:1B:36:2D:79:02:38:83:5A:59:BF:2A:A6
Authority key identifier: F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
Certificate issuer: /CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Certificate serial: 01A0CEFF99C89C2B9224D2D828A774010C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 16:00:52 +0000
Manifest this update: Wed 23 Sep 2026 16:00:52 +0000
Manifest next update: Thu 24 Sep 2026 16:00:52 +0000
Files and hashes: 1: 9kixVYLTS9UXCp3RO4EyW6uuXjo.crl (hash: 8oBVdGw0/pmIUtgwiPIbOZahByPCupjN6XLTbqPBXyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:99:c8:9c:2b:92:24:d2:d8:28:a7:74:01:0c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Validity
Not Before: Sep 23 16:00:52 2026 GMT
Not After : Sep 24 16:00:52 2026 GMT
Subject: CN=16a2f2ee1d70407a1b362d790238835a59bf2aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:67:0d:c1:1f:0b:b1:e6:b8:84:15:7c:f3:1d:
4f:90:0f:80:af:6c:50:33:54:02:58:58:37:b6:02:
7c:d6:a4:93:a3:a7:98:ff:fc:24:ef:d0:00:2f:9a:
d5:a4:37:0e:30:6c:34:9f:cd:59:a5:37:c4:97:d1:
cd:22:0c:f3:c2:dd:53:c6:e7:17:49:57:e8:be:b6:
43:62:c6:42:99:51:b9:9f:e7:68:2b:82:79:d2:16:
7d:a7:cb:11:69:2e:e9:ea:9f:69:20:be:d2:17:1d:
25:9f:9d:1b:37:9a:3c:3e:1a:80:04:9f:95:7b:ce:
b7:6d:35:65:72:83:ac:5f:5e:df:06:1b:de:a3:b0:
9e:80:97:0f:96:79:36:cc:a5:95:2b:d9:b2:c7:ea:
82:48:5e:5c:56:d7:65:a9:81:86:44:5c:73:ea:14:
f9:63:d0:3c:eb:d6:85:c1:e2:01:57:18:1a:50:7a:
f0:a7:c9:94:60:1a:2d:5d:df:65:02:78:6f:0c:61:
62:4c:25:9f:3d:b5:a2:b4:88:37:60:2d:d7:ef:50:
fc:6d:4a:40:dd:a8:7e:5d:ad:e4:4b:e5:17:8e:c3:
c4:82:4f:54:e3:4c:fb:e6:10:fb:09:9c:60:66:10:
1a:24:cc:01:f3:aa:db:ae:5f:3d:2c:d7:ad:a5:51:
64:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A2:F2:EE:1D:70:40:7A:1B:36:2D:79:02:38:83:5A:59:BF:2A:A6
X509v3 Authority Key Identifier:
keyid:F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5f:6c:71:60:35:5c:e1:d9:66:c2:62:ec:56:7a:13:8a:0e:
8f:14:56:2b:58:eb:42:9c:a3:76:d2:c6:e6:d6:53:aa:35:2e:
5e:d5:24:63:26:dd:cc:6b:e5:46:bf:66:ad:fe:14:55:af:fe:
85:3a:98:e6:57:0f:31:0d:18:1c:34:3e:f4:b7:e4:dc:5b:af:
13:b7:c4:84:16:66:f3:77:a5:c5:d0:53:37:7f:8b:5e:88:c2:
a5:d7:09:80:13:50:08:1b:27:93:3a:a6:de:79:02:65:15:5b:
d5:97:46:8c:08:df:fa:cd:a5:94:4d:ba:43:08:8b:82:c0:d8:
e0:f7:68:22:59:dd:8e:e8:9d:73:45:54:f5:d3:53:60:86:9b:
fc:65:7b:68:20:ef:b6:fb:99:02:88:d8:f2:79:0f:6a:c9:62:
bd:ae:bc:2f:9d:79:ab:6a:b0:07:1c:60:47:00:7b:01:5c:46:
a8:f3:d7:7d:92:42:b1:12:d3:27:95:27:aa:85:c2:40:9f:41:
00:89:14:26:da:59:43:d6:a7:00:f7:0e:be:d8:92:f5:a9:63:
20:fd:65:cf:fb:18:3b:b7:4a:77:d2:2d:71:15:39:38:33:34:
37:25:61:dd:21:39:7d:0e:bd:8a:70:64:30:aa:44:51:c9:19:
52:6d:39:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:43:44 2026 by rpki-client