Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
File: 9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft (raw, json)
Hash identifier: fyYsgUfAeI+diAgEoIPbIa9RiGuxEFW2jFfyGYm1yf0=
Subject key identifier: 53:99:86:E0:69:89:DE:66:68:A6:E0:72:9E:24:1E:71:C3:56:80:AF
Authority key identifier: F6:09:32:C7:B8:94:51:9D:34:62:47:30:2E:B3:65:F5:C4:09:B0:3C
Certificate issuer: /CN=f60932c7b894519d346247302eb365f5c409b03c
Certificate serial: 01A0CFDA9526F63C9405D28D49A9DAA65398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
Manifest number: 03A7
Signing time: Wed 23 Sep 2026 20:00:03 +0000
Manifest this update: Wed 23 Sep 2026 20:00:03 +0000
Manifest next update: Thu 24 Sep 2026 20:00:03 +0000
Files and hashes: 1: 9gkyx7iUUZ00YkcwLrNl9cQJsDw.crl (hash: tzC51WBM0e20h7LL2Evc4SWaa97hexymfqokuwKpPPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:95:26:f6:3c:94:05:d2:8d:49:a9:da:a6:53:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60932c7b894519d346247302eb365f5c409b03c
Validity
Not Before: Sep 23 20:00:03 2026 GMT
Not After : Sep 24 20:00:03 2026 GMT
Subject: CN=539986e06989de6668a6e0729e241e71c35680af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:94:d6:8e:09:65:77:11:84:ed:48:ab:5c:b2:
f2:40:53:7e:6d:11:de:57:2a:d7:b7:6c:e3:61:e1:
7c:12:4f:d9:d0:63:40:13:a1:14:e7:9a:79:fa:01:
62:42:fb:dd:f4:18:f1:f1:73:9e:09:08:ce:ca:a2:
51:23:59:7e:86:dd:12:9f:a9:4f:17:c2:a5:25:a2:
b5:66:4c:82:ea:6f:e5:db:96:22:ef:84:47:61:a6:
fa:7c:70:a8:5f:a1:50:30:bb:73:cc:04:a8:09:7a:
3d:06:bb:b2:64:0f:92:2a:2f:54:cf:0e:79:9d:01:
4e:83:66:74:d8:a2:28:c6:f3:00:88:c0:73:7a:e4:
3f:ce:8f:5d:9e:70:79:0f:33:1b:ce:d2:58:7c:5a:
80:0d:73:5c:6a:0c:08:db:94:0b:87:8e:ee:cc:69:
81:d9:1a:f0:88:e7:8c:69:0b:09:5e:6b:a0:ac:60:
74:b9:3f:75:a0:2e:ea:2d:37:c8:cb:e2:4e:ae:31:
55:99:d6:a2:57:20:91:01:44:da:7e:47:44:c2:4a:
de:c1:41:48:ec:89:92:6c:f2:a5:a1:e5:99:74:73:
42:ff:93:54:b8:a6:b0:65:67:80:10:21:62:51:b6:
80:e5:81:a8:40:fb:eb:98:81:40:2d:86:45:01:5f:
7f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:99:86:E0:69:89:DE:66:68:A6:E0:72:9E:24:1E:71:C3:56:80:AF
X509v3 Authority Key Identifier:
keyid:F6:09:32:C7:B8:94:51:9D:34:62:47:30:2E:B3:65:F5:C4:09:B0:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9f:c4:e0:78:4f:42:41:b0:8c:fd:c4:db:b6:f9:aa:7a:5f:
55:2f:72:f3:14:84:75:7e:55:66:2c:f3:71:fc:84:2f:4a:2f:
c5:13:e5:94:e6:74:47:48:d9:f0:05:93:e9:b4:26:ae:9f:4d:
25:b5:73:b0:a6:f2:4c:22:8c:fb:ca:7d:2f:8b:ce:e9:11:f0:
e9:b7:fa:9f:ed:3c:57:35:c0:f4:31:11:d5:5e:50:ff:a8:60:
5d:91:67:3e:cd:17:cc:63:58:19:64:e7:4d:2e:9d:cc:e9:cb:
3a:6f:6a:81:1d:f2:36:da:82:f3:2a:f2:69:89:1a:7f:77:1e:
6e:00:33:44:d6:44:4b:57:e0:ec:0a:14:0a:4e:e0:d2:ef:bc:
df:64:2b:54:11:67:5f:4c:27:b5:41:1f:6f:c0:7b:0f:6d:89:
fc:13:0b:3a:b7:50:ca:39:d6:fb:b7:fd:ad:58:2c:41:b5:77:
a9:1c:64:d3:1b:3f:42:6b:2e:17:c8:86:03:83:63:c4:dd:f9:
cf:35:33:bf:be:ed:f0:6d:3a:78:f2:00:a6:d9:29:0c:50:21:
89:74:b9:99:58:96:a6:e7:f9:28:db:78:9c:c3:53:dc:d2:8f:
9c:1c:5e:b2:77:8f:2c:42:82:c8:cd:02:75:ba:ca:0a:5e:87:
8a:03:85:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:51:00 2026 by rpki-client