Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.mft
File: 9aKrEck1CB9eSaaFyDl49vc9TaE.mft (raw, json)
Hash identifier: zi7RsYzIzfURziPtziKj3aOiwUylwfPaXjoPSXRo6g4=
Subject key identifier: CA:94:E6:CF:01:08:6E:22:85:0A:B5:F0:45:53:9C:F8:3B:FC:8B:DA
Authority key identifier: F5:A2:AB:11:C9:35:08:1F:5E:49:A6:85:C8:39:78:F6:F7:3D:4D:A1
Certificate issuer: /CN=f5a2ab11c935081f5e49a685c83978f6f73d4da1
Certificate serial: 019D2A72B5B04D88CE0AA6A3FC12AE51985B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aKrEck1CB9eSaaFyDl49vc9TaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.mft
Manifest number: 05D5
Signing time: Thu 26 Mar 2026 14:00:53 +0000
Manifest this update: Thu 26 Mar 2026 14:00:53 +0000
Manifest next update: Fri 27 Mar 2026 14:00:53 +0000
Files and hashes: 1: 9aKrEck1CB9eSaaFyDl49vc9TaE.crl (hash: 5ZJxcmdA+eX81INnbkoGKUD5cnuKpXzkAu898LgfYlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aKrEck1CB9eSaaFyDl49vc9TaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:b5:b0:4d:88:ce:0a:a6:a3:fc:12:ae:51:98:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a2ab11c935081f5e49a685c83978f6f73d4da1
Validity
Not Before: Mar 26 14:00:53 2026 GMT
Not After : Mar 27 14:00:53 2026 GMT
Subject: CN=ca94e6cf01086e22850ab5f045539cf83bfc8bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ae:cb:84:02:5a:65:10:20:5b:84:0d:ec:91:
44:77:6f:3c:50:54:90:e6:46:92:cf:ce:dd:fe:3a:
79:96:09:8e:c0:c4:3f:5d:72:ef:04:80:02:d6:32:
a7:ef:96:99:87:8d:02:98:d4:ed:36:85:11:61:24:
34:76:db:46:8c:51:ba:6d:af:8b:5b:ff:4d:09:f0:
dc:95:1b:f2:22:e5:c5:15:e4:33:c5:95:32:be:4c:
c4:73:a0:5c:0a:8f:1f:0a:a8:60:b9:4f:37:77:45:
5d:61:f1:e5:8b:22:4b:c8:0a:bd:29:13:b6:3a:50:
77:95:09:6a:ca:0c:c2:d4:f6:a8:9c:b6:76:a8:f7:
85:12:83:51:55:30:64:1e:94:14:c9:01:6a:f2:42:
75:85:1c:a5:2b:b7:f7:a6:c3:a9:51:6a:9d:89:70:
94:9b:b5:70:22:92:5d:c0:78:c0:1d:f0:44:a7:c0:
3a:a5:7f:5a:46:0f:65:12:4a:58:3f:f9:ae:df:39:
4d:4e:9d:3b:d6:ba:37:8a:e3:e1:e4:e1:9c:fa:57:
6a:00:e7:10:2c:e6:73:73:7b:33:4b:08:e7:a3:f3:
bc:f8:41:88:d3:9f:d9:68:08:7b:74:b4:9c:15:ac:
b3:6e:5d:17:0c:75:dd:da:9d:c7:e8:3c:fc:55:df:
63:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:94:E6:CF:01:08:6E:22:85:0A:B5:F0:45:53:9C:F8:3B:FC:8B:DA
X509v3 Authority Key Identifier:
keyid:F5:A2:AB:11:C9:35:08:1F:5E:49:A6:85:C8:39:78:F6:F7:3D:4D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKrEck1CB9eSaaFyDl49vc9TaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1f:b2:9a:bb:75:50:6a:74:ea:e2:69:6a:ee:0e:1b:b6:90:
96:79:5b:75:23:c2:40:87:11:b8:03:a3:35:3c:84:80:ad:c1:
46:c0:25:cd:71:6c:99:84:95:a0:f8:ab:f8:ae:7b:4b:38:b7:
e2:24:5a:73:80:be:e2:d0:d7:3d:2e:62:65:26:d2:90:23:40:
26:f6:6a:62:b5:ff:f0:bd:34:af:55:87:99:cf:93:b1:fe:0d:
02:76:58:1e:d5:4d:77:7c:8b:e4:ea:fb:bb:db:ea:ba:57:95:
08:36:94:c3:16:88:23:90:ad:23:60:33:4c:52:7b:9c:2e:c5:
a6:1b:e9:38:3d:d0:b1:55:02:ff:aa:b5:11:5b:f0:e0:f3:a2:
83:d6:4d:ad:6b:5f:49:1a:01:60:84:5f:58:38:50:99:19:25:
40:65:56:fd:40:18:7e:09:82:d4:6a:d9:8f:22:e2:44:26:42:
19:a4:4b:94:49:d6:4b:3a:a2:ec:80:63:32:4b:bd:b4:e6:07:
5a:9e:b2:87:f3:bf:d2:77:d8:7f:a5:6c:8d:20:7e:7d:b7:f8:
0b:bb:58:6f:5a:be:9d:85:13:4a:6d:95:73:e1:17:fa:85:75:
10:c7:76:9a:21:47:06:c5:f0:ee:ad:36:89:de:d6:0a:12:86:
8c:db:0d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:18:37 2026 by rpki-client