Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
File: 9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft (raw, json)
Hash identifier: P0brrQbKwGcmqC8r6rkq+iQWlXeuUKrWog2VgRDr48s=
Subject key identifier: A9:32:93:4F:C4:C0:E7:E6:5A:C7:2C:6A:C9:FB:80:60:8B:F4:99:89
Authority key identifier: F6:09:32:C7:B8:94:51:9D:34:62:47:30:2E:B3:65:F5:C4:09:B0:3C
Certificate issuer: /CN=f60932c7b894519d346247302eb365f5c409b03c
Certificate serial: 019E1E6C8B83A5427B8549115BF419DBE525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
Manifest number: 0242
Signing time: Tue 12 May 2026 23:01:30 +0000
Manifest this update: Tue 12 May 2026 23:01:30 +0000
Manifest next update: Wed 13 May 2026 23:01:30 +0000
Files and hashes: 1: 9gkyx7iUUZ00YkcwLrNl9cQJsDw.crl (hash: ImR3xhEBtgtYiHwauMiluj+P8whAcVbPFEo7T+1coZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:8b:83:a5:42:7b:85:49:11:5b:f4:19:db:e5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60932c7b894519d346247302eb365f5c409b03c
Validity
Not Before: May 12 23:01:30 2026 GMT
Not After : May 13 23:01:30 2026 GMT
Subject: CN=a932934fc4c0e7e65ac72c6ac9fb80608bf49989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:41:2b:4b:6b:28:18:91:d6:9b:5d:2a:59:61:
cb:b5:6e:9d:5d:ca:07:66:43:32:3b:cd:68:30:bd:
af:18:86:ef:bb:75:28:4e:e3:c7:e5:1f:f6:20:d4:
dd:d6:8a:8a:e2:8b:18:ea:dc:f2:ca:e0:ac:a3:32:
64:83:1a:c4:7f:1a:f7:8c:22:5e:bf:24:6c:91:5f:
32:76:65:1a:cf:0f:e0:5e:75:51:8d:7f:a1:d0:d6:
3d:25:c3:df:90:5b:fc:c3:d9:2d:b1:52:5f:00:29:
44:be:31:af:3e:9e:d4:ca:e4:4c:4c:1c:1d:c7:b3:
3a:e3:a8:ec:0d:c9:3f:50:1d:ce:ca:64:d6:22:f1:
f8:18:7c:fb:0e:80:d6:59:33:1a:55:cd:6b:22:41:
c8:be:42:a9:5d:35:e0:b0:f3:0c:49:a5:48:84:b7:
6b:fb:fb:88:f2:a8:0e:f1:4c:e5:b0:f3:9b:e6:41:
ce:4c:f2:d8:ea:7d:c1:f6:1f:bd:95:02:05:65:c5:
5a:63:a2:b8:ef:39:34:64:4a:3f:a7:ed:18:d3:2c:
a6:78:7b:41:f9:46:8c:1f:cd:78:24:49:76:dc:fe:
4e:2b:e7:d8:9c:d6:c0:26:0f:df:91:3f:63:2f:34:
1d:ab:c5:f8:4e:8b:71:3a:92:39:6b:ce:1e:da:df:
a7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:32:93:4F:C4:C0:E7:E6:5A:C7:2C:6A:C9:FB:80:60:8B:F4:99:89
X509v3 Authority Key Identifier:
keyid:F6:09:32:C7:B8:94:51:9D:34:62:47:30:2E:B3:65:F5:C4:09:B0:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:01:04:11:ed:a5:ae:dc:a6:9e:43:5b:25:a7:39:1c:25:73:
a1:f8:d1:a6:39:91:c3:36:2a:92:6e:f1:30:ee:44:a5:dd:55:
db:e0:fe:40:ab:d2:5a:78:bd:fd:19:e3:c5:11:25:41:15:11:
51:70:3b:3a:b0:71:88:7a:bf:7c:bd:c2:98:5b:39:f3:02:e8:
df:4c:5c:6f:c7:e6:08:9c:aa:a9:c6:5d:4b:ca:3c:78:0c:47:
19:c2:bf:88:7c:c4:9f:52:1c:e2:d9:5a:7d:d6:42:6e:3f:d5:
9d:cd:65:88:8d:56:d0:4a:9c:bd:0d:c3:75:fd:4a:57:c4:a7:
b2:8e:21:fd:92:7a:31:e2:18:08:7e:2b:10:2d:52:54:f6:ce:
a1:f3:e9:ff:09:13:90:2a:28:ee:ff:80:a4:95:34:a0:58:7b:
21:d7:cf:d4:92:f9:8c:f3:2a:31:b6:70:68:57:04:96:ee:ee:
68:51:36:53:00:e5:5b:e7:9d:1a:aa:94:ec:62:61:eb:83:cd:
3e:73:4f:92:75:a6:4f:80:11:6e:fd:14:d5:4b:a5:b3:72:f3:
36:f9:db:d3:a2:36:80:27:6a:02:cc:87:c0:61:fa:71:05:c0:
eb:e3:ab:c3:a3:ef:f9:40:47:53:42:d2:c9:b4:bf:13:f3:0d:
2c:aa:1f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:06 2026 by rpki-client