Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/a9e321-9de6-4d92-bbe0-5df76b291c6f/1/1-dYKjvdx8ekBY9zaUPcyIzxdEuU.mft
File: 1-dYKjvdx8ekBY9zaUPcyIzxdEuU.mft (raw, json)
Hash identifier: LAXr9syFpv4wsuTimph0jkxjjH8gtKd4fDfidmdTUww=
Subject key identifier: 7B:C0:78:DD:1E:59:10:08:ED:7D:45:D6:9A:76:6B:22:70:E5:2C:89
Authority key identifier: F9:D6:0A:8E:F7:71:F1:E9:01:63:DC:DA:50:F7:32:23:3C:5D:12:E5
Certificate issuer: /CN=f9d60a8ef771f1e90163dcda50f732233c5d12e5
Certificate serial: 01A0CA473543F542DB62BD5AD9719E9CA754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-dYKjvdx8ekBY9zaUPcyIzxdEuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a9e321-9de6-4d92-bbe0-5df76b291c6f/1/1-dYKjvdx8ekBY9zaUPcyIzxdEuU.mft
Manifest number: 95
Signing time: Tue 22 Sep 2026 18:00:59 +0000
Manifest this update: Tue 22 Sep 2026 18:00:59 +0000
Manifest next update: Wed 23 Sep 2026 18:00:59 +0000
Files and hashes: 1: 1-dYKjvdx8ekBY9zaUPcyIzxdEuU.crl (hash: yJf/G3GSaRnue397pRquKtmGWPdf35Yv3+jHr/jRY+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a9e321-9de6-4d92-bbe0-5df76b291c6f/1/1-dYKjvdx8ekBY9zaUPcyIzxdEuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a9e321-9de6-4d92-bbe0-5df76b291c6f/1/1-dYKjvdx8ekBY9zaUPcyIzxdEuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-dYKjvdx8ekBY9zaUPcyIzxdEuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:35:43:f5:42:db:62:bd:5a:d9:71:9e:9c:a7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d60a8ef771f1e90163dcda50f732233c5d12e5
Validity
Not Before: Sep 22 18:00:59 2026 GMT
Not After : Sep 23 18:00:59 2026 GMT
Subject: CN=7bc078dd1e591008ed7d45d69a766b2270e52c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:33:3f:e3:49:9e:0f:0b:22:70:83:04:d5:bd:
fa:ab:4d:8f:55:5b:58:74:5d:f1:ae:45:da:4c:52:
15:48:be:43:85:a2:a0:ca:3a:84:7f:73:f8:c0:5c:
ad:fe:0d:e7:14:41:b4:1e:05:3f:92:44:47:2a:45:
38:cf:70:b6:94:4e:95:1b:8c:80:dd:42:e9:69:ad:
6e:bd:fd:af:38:37:2c:94:11:24:53:10:a3:e1:69:
da:6f:aa:6b:3c:5d:4f:ca:3b:e5:75:d7:e0:ca:ab:
f9:db:8f:48:27:91:bb:bc:d1:cb:f4:b6:63:46:8e:
52:d8:da:9d:9e:c5:a4:30:75:9b:a8:e9:f1:32:77:
2f:44:d1:cc:7d:ea:54:1a:d0:21:69:7c:63:61:b6:
8e:e1:bd:1b:fd:e8:fd:c6:35:80:35:e0:1f:cc:1e:
bb:f6:72:2f:01:b0:3c:35:3f:49:94:5e:fb:e7:26:
84:b0:1b:b7:2f:c0:45:6a:72:ca:13:d9:b0:70:72:
61:91:30:5b:f2:e9:9a:11:a5:b0:a8:f0:33:1a:fe:
1d:89:01:a5:a1:01:a4:a1:92:b8:30:27:6f:e5:5d:
be:63:f4:db:38:1d:c8:93:1b:66:45:8f:fe:f0:09:
d2:69:2b:68:62:92:d9:12:65:13:7f:92:e3:ce:dd:
82:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C0:78:DD:1E:59:10:08:ED:7D:45:D6:9A:76:6B:22:70:E5:2C:89
X509v3 Authority Key Identifier:
keyid:F9:D6:0A:8E:F7:71:F1:E9:01:63:DC:DA:50:F7:32:23:3C:5D:12:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-dYKjvdx8ekBY9zaUPcyIzxdEuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a9e321-9de6-4d92-bbe0-5df76b291c6f/1/1-dYKjvdx8ekBY9zaUPcyIzxdEuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a9e321-9de6-4d92-bbe0-5df76b291c6f/1/1-dYKjvdx8ekBY9zaUPcyIzxdEuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ae:10:09:05:e4:a7:88:2a:b4:9f:ac:67:85:aa:f6:50:4d:
b3:45:f8:65:51:a2:d1:cf:38:c3:46:c9:50:3e:31:86:e8:00:
5d:b4:82:27:69:a2:17:cc:5f:da:3c:9f:c1:31:e2:b0:83:b5:
d1:11:40:ce:e5:b4:58:bd:6a:af:5a:31:da:6e:6f:4c:8f:88:
89:23:07:a7:08:8e:c2:9c:58:10:fe:1d:6f:a7:dc:4f:17:75:
c1:51:58:53:a1:29:d9:c4:8e:c7:20:a3:e5:2c:1f:95:b9:22:
75:2c:bd:1d:46:35:13:13:ec:b7:9c:99:f1:68:fe:13:b7:b1:
a8:76:98:ce:c1:af:c1:10:c2:23:1c:64:08:ec:76:87:fd:2e:
8c:19:74:5a:b9:1b:7a:48:8c:1d:bd:1d:05:3e:eb:0d:df:4c:
24:1d:7a:4b:a9:0f:ca:e9:a6:55:52:71:b3:4f:cf:a9:f9:2e:
4c:e5:4d:5d:3f:09:f0:44:0a:d0:73:06:dd:21:eb:68:e6:2b:
48:75:1e:85:d7:65:5b:ae:53:60:c8:1d:0f:34:5f:b2:9a:85:
95:aa:e7:c3:61:7b:c8:b2:24:39:4a:84:78:64:f7:cf:12:1a:
ab:5a:1f:18:42:b9:e8:e4:f0:c6:ae:a7:04:e3:5b:e6:5d:6e:
4e:4c:ac:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:45:43 2026 by rpki-client