Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
File: AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft (raw, json)
Hash identifier: kgzuL3vOx+0KavyO3c91uIKfiyNwTlUgnbLbn4metho=
Subject key identifier: 4C:AA:54:C9:29:8A:EF:10:72:42:97:2F:F4:33:1E:0E:C1:4C:70:05
Authority key identifier: 01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04
Certificate issuer: /CN=013f6db0fd57d19f9ee15242a2e4167efb522d04
Certificate serial: 019E1C471CB46FA5DE49291373A37C6051DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
Manifest number: 0DDB
Signing time: Tue 12 May 2026 13:01:22 +0000
Manifest this update: Tue 12 May 2026 13:01:22 +0000
Manifest next update: Wed 13 May 2026 13:01:22 +0000
Files and hashes: 1: AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl (hash: d2obtTzAEonyKUrEA8ya+SEITsICChhuyIonYinDs5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:1c:b4:6f:a5:de:49:29:13:73:a3:7c:60:51:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=013f6db0fd57d19f9ee15242a2e4167efb522d04
Validity
Not Before: May 12 13:01:22 2026 GMT
Not After : May 13 13:01:22 2026 GMT
Subject: CN=4caa54c9298aef107242972ff4331e0ec14c7005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:00:fa:7c:59:61:70:75:c5:e0:ed:c2:be:7e:
f6:6b:52:92:db:84:08:d6:62:87:d5:c0:12:ef:bc:
81:bd:27:84:5a:8c:db:ce:40:40:31:8b:fb:81:88:
cb:ac:b4:20:ab:06:ca:8c:be:36:f2:bb:e8:1b:e7:
f5:28:c4:e0:a8:0c:15:02:59:27:44:fb:bc:84:63:
f9:9f:21:8a:ee:bb:6d:19:39:e1:55:17:c6:3b:49:
33:5d:cc:2c:75:3f:b5:e6:6a:11:fe:6f:69:63:ee:
24:40:94:a6:b0:06:6e:7e:f7:48:5c:37:d7:5e:23:
19:49:5f:3b:7c:1a:94:90:20:c1:90:07:5b:4d:ab:
b9:3d:b8:48:73:ac:91:0b:fc:42:eb:81:19:29:40:
24:cc:d0:62:34:47:7d:26:73:13:e0:03:de:62:8d:
2c:8b:28:f4:33:75:5d:b8:ad:c8:a8:ee:ab:0c:30:
c9:2c:c6:cc:8d:61:e0:5b:52:bf:8c:74:3c:d4:9b:
a8:b8:5c:2e:2f:7a:c5:a1:86:32:4c:d6:e5:81:99:
5a:55:c8:3a:a3:9a:6f:e4:fe:86:80:80:cc:a6:b8:
de:5b:05:93:e7:ba:6b:6e:31:3b:74:59:46:dc:67:
8f:33:7a:be:b2:12:df:e9:7f:ab:d9:ac:c3:02:0d:
34:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AA:54:C9:29:8A:EF:10:72:42:97:2F:F4:33:1E:0E:C1:4C:70:05
X509v3 Authority Key Identifier:
keyid:01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:38:c8:61:79:e7:1a:1e:a9:04:e4:6c:60:5a:66:02:17:7a:
10:47:ef:87:c7:7b:5a:1d:51:22:36:5f:ad:3c:55:5e:13:fe:
dc:af:76:eb:e7:58:9e:b9:86:bb:03:3c:86:67:35:81:4e:4d:
fa:f3:95:df:19:47:08:ca:cb:f4:cd:42:d4:b9:85:55:d8:28:
75:80:11:6b:96:47:66:15:5b:3d:2e:2a:ca:67:32:cd:4e:e0:
cc:c8:cc:59:fe:a0:69:0d:ae:c5:92:bf:09:e0:6f:c6:eb:c4:
aa:15:0a:f9:9e:cb:c3:0b:28:b3:f4:12:86:11:05:0f:c6:1d:
c2:1b:20:5a:3a:68:2e:fe:76:8e:36:4f:86:62:13:17:7c:89:
3b:71:19:ae:60:a8:34:25:c1:56:0e:b7:fb:23:a1:74:f4:f7:
72:3a:90:ee:fc:98:b2:ad:be:74:72:7d:d3:b2:fd:de:1f:33:
f7:09:d7:60:a0:ee:ab:a3:85:f7:d6:e9:78:af:92:fe:fb:5b:
ee:04:28:42:17:37:b2:a5:2d:54:b4:f8:2f:97:28:78:ee:7f:
4d:05:fb:45:e5:8e:f1:70:9e:ba:de:b8:fc:a7:61:0f:2c:71:
62:f9:b9:22:88:93:c2:ec:ba:2f:e0:f9:f7:64:c9:b9:20:0d:
ad:43:8b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:55 2026 by rpki-client