Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
File: 9kixVYLTS9UXCp3RO4EyW6uuXjo.mft (raw, json)
Hash identifier: /ss+W1ERjsy4uJBjfHWGFSYe3/BfpJ5mkdGuI297UhM=
Subject key identifier: F7:7D:08:EB:C2:02:6D:4C:2C:09:DA:2D:C7:E6:F5:D5:B3:41:F1:EB
Authority key identifier: F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
Certificate issuer: /CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Certificate serial: 019E1D9000478F490BF25F429D6A6C757687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 19:00:36 +0000
Manifest this update: Tue 12 May 2026 19:00:36 +0000
Manifest next update: Wed 13 May 2026 19:00:36 +0000
Files and hashes: 1: 9kixVYLTS9UXCp3RO4EyW6uuXjo.crl (hash: 7yVvXz8B8wGVd0xdY7MPfhXtdYm6X4663+6UY120k5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:00:47:8f:49:0b:f2:5f:42:9d:6a:6c:75:76:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Validity
Not Before: May 12 19:00:36 2026 GMT
Not After : May 13 19:00:36 2026 GMT
Subject: CN=f77d08ebc2026d4c2c09da2dc7e6f5d5b341f1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:15:b0:41:9e:16:7f:81:4a:33:82:35:b7:e7:
b8:04:ff:5b:7b:eb:3b:40:30:72:26:47:d1:e5:74:
a0:af:b7:fd:8d:6c:a7:2e:46:73:55:1d:0d:9d:c8:
09:39:8c:c3:5c:3c:ec:f4:26:b9:bb:5c:7e:7d:74:
9e:38:7e:e8:a3:48:3c:69:16:3f:04:0a:b2:f1:0f:
0c:31:19:42:45:6c:d1:49:da:15:81:6b:e8:97:75:
1d:9a:d7:e2:9e:7f:80:ff:3c:c7:a7:2d:01:dc:a3:
08:0a:ab:8d:fd:b8:48:53:71:c6:8e:b8:80:e9:91:
22:56:ba:44:8f:dc:bd:55:a0:f3:f8:65:c3:f6:ef:
af:9c:ee:53:d3:ec:84:38:ac:ad:e1:3d:1a:25:bc:
8d:1f:bd:c3:b3:08:b6:b8:bc:6b:93:8b:57:f4:65:
f2:93:b5:9b:ce:33:d4:8d:1d:2f:47:0e:6f:e6:bf:
d8:09:0d:7d:3f:f7:84:24:f6:15:18:84:a7:ec:27:
b1:ae:96:1a:75:27:9d:72:6b:af:53:3f:b2:fd:50:
e2:ca:fb:75:7f:04:36:62:b9:3e:75:4a:8b:ec:15:
30:36:16:46:4f:06:30:4e:57:41:54:0c:24:7a:5e:
27:e6:df:30:5d:f4:18:45:d3:6c:cc:46:c9:25:e9:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7D:08:EB:C2:02:6D:4C:2C:09:DA:2D:C7:E6:F5:D5:B3:41:F1:EB
X509v3 Authority Key Identifier:
keyid:F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:81:29:a2:54:7f:04:e5:d3:e0:19:97:b4:fe:d5:3c:2c:c9:
3c:e4:b0:9a:e2:b9:c2:df:94:7d:8b:1a:dd:65:e1:e6:ee:8f:
cc:6d:ff:07:d1:0c:0f:d7:84:21:f5:0a:68:a5:0a:bc:cf:db:
51:ec:a9:2d:ab:93:ec:62:d7:25:ec:32:b9:50:e0:fd:83:c0:
2e:3f:25:93:14:f3:60:8a:d6:d9:1f:1a:a7:f0:cd:09:41:ee:
d8:fa:48:8e:9c:75:04:bb:b4:8b:b1:8c:a0:bd:aa:ad:15:e1:
3c:91:16:1f:25:89:b7:6e:31:16:95:08:26:8f:6e:79:32:69:
be:af:aa:d0:d0:f0:b0:55:bd:fc:58:36:94:3d:32:c6:dd:79:
fd:bf:4b:be:b2:f7:f5:46:95:81:f4:f0:11:89:fa:98:0b:54:
20:ec:72:a2:78:f1:42:1e:e0:df:6a:f1:a7:fa:1f:b2:fb:91:
8d:6b:61:d6:fc:63:8e:82:b3:c9:13:73:a2:43:41:91:17:e9:
63:cc:cb:27:7a:d9:82:86:45:77:f6:23:cd:4f:81:e1:24:89:
ea:dc:41:cf:db:8c:98:00:cf:11:ab:a7:28:ca:86:34:54:c6:
d5:06:85:34:52:a5:e6:60:5c:93:4f:93:0e:14:31:f7:fe:52:
3d:dd:89:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:09:00 2026 by rpki-client