Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
File: 9kixVYLTS9UXCp3RO4EyW6uuXjo.mft (raw, json)
Hash identifier: Vjf1LcJImSu6sby/+tQh9zaP998AnahXj81pJH6+yEk=
Subject key identifier: 3B:70:19:38:F2:E8:F2:8C:BB:0E:85:5F:A2:FE:15:A9:22:63:6A:83
Authority key identifier: F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
Certificate issuer: /CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Certificate serial: 019F9248441933F4E1963CBABABFA112C356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 04:00:37 +0000
Manifest this update: Fri 24 Jul 2026 04:00:37 +0000
Manifest next update: Sat 25 Jul 2026 04:00:37 +0000
Files and hashes: 1: 9kixVYLTS9UXCp3RO4EyW6uuXjo.crl (hash: BAy2xQOanYS36VdOrJiJx5wNRc7gVnAUgeu8Yj4lfF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:44:19:33:f4:e1:96:3c:ba:ba:bf:a1:12:c3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Validity
Not Before: Jul 24 04:00:37 2026 GMT
Not After : Jul 25 04:00:37 2026 GMT
Subject: CN=3b701938f2e8f28cbb0e855fa2fe15a922636a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a7:fc:13:63:03:da:fa:95:dc:39:e7:32:77:
41:23:5a:c6:bc:75:07:34:a7:64:9c:f8:48:e1:ec:
6f:7f:20:4f:91:3a:8c:a4:6c:f8:3d:34:93:cc:bd:
b7:9c:26:df:0c:e1:78:c7:d3:ab:c4:f4:e4:d1:3a:
02:fa:0d:7f:28:52:3b:8f:e3:18:55:9b:99:76:78:
d5:d7:6d:45:13:2d:b1:92:f7:aa:4c:bc:f6:8b:f8:
e9:89:16:b1:1e:11:d4:33:ea:ca:47:b2:42:fa:97:
6e:78:09:95:18:0f:3b:c2:bc:e0:3c:9e:f8:d8:fd:
5b:23:77:8c:d8:ca:70:4e:37:76:63:2e:fd:39:1c:
0e:d9:75:eb:29:6c:2b:51:9d:c5:65:7c:43:bd:62:
46:67:da:be:05:65:33:a1:a7:93:67:ab:57:a4:32:
cb:41:57:e7:62:68:13:26:a4:83:b1:78:7c:62:22:
c4:8f:5d:79:72:b7:f9:3f:88:c2:01:c1:f9:bf:b4:
96:5d:35:ea:50:cd:38:d4:f5:cf:5f:24:01:45:ff:
64:93:7d:8c:78:d5:f9:0f:40:08:26:c6:34:07:dd:
08:04:d4:eb:f3:67:06:c9:49:79:58:f5:3d:90:4b:
dc:44:b2:cc:f8:54:2f:d8:c0:bb:60:9c:fd:cd:99:
c7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:70:19:38:F2:E8:F2:8C:BB:0E:85:5F:A2:FE:15:A9:22:63:6A:83
X509v3 Authority Key Identifier:
keyid:F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:44:71:81:70:ac:1e:c4:ed:f0:75:b5:3b:b4:b6:cb:cc:4f:
79:c9:60:42:65:eb:ff:09:a0:a4:ae:17:3e:b9:18:83:d3:46:
fe:2c:26:7a:42:d6:78:ae:32:ad:07:05:23:0d:3a:cc:02:56:
63:2a:71:12:43:e1:bf:8f:30:ef:f5:25:f5:cc:3e:6e:1f:50:
aa:6f:32:6f:3e:00:6e:09:1f:3e:3b:2d:0a:cb:c1:11:d4:17:
5a:a6:ae:5a:df:5f:63:50:7a:60:b1:b6:27:2b:d6:9b:50:b4:
f5:b1:2c:55:8c:d9:40:88:61:1c:2a:60:dc:b8:28:4e:09:57:
2a:09:d0:ee:fb:c0:ce:bd:28:f3:33:cb:dc:5d:3c:83:76:c9:
9e:5e:36:0d:8d:56:c5:93:07:c1:2c:b8:c4:38:0d:16:de:74:
3d:ca:4e:b2:c2:43:fe:ee:60:bc:5f:02:aa:42:fc:59:78:f6:
c2:34:cd:e7:36:c4:39:bd:7a:e8:10:03:b7:79:b5:7d:bf:1b:
16:9f:e8:99:5e:f1:4d:4e:b4:50:c1:41:29:2e:03:10:60:87:
46:e7:ab:00:29:e1:b9:c7:17:e0:f6:3c:e0:7f:0f:07:61:ba:
12:c9:fc:da:07:bc:f0:ba:15:73:b5:24:48:18:0a:10:e9:c1:
03:87:85:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:16:00 2026 by rpki-client