Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
File: AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft (raw, json)
Hash identifier: qKTuc/UYgd8RaaQuiNddmVsZpU3PJ6YssAYa5knLzhc=
Subject key identifier: 24:B6:F3:70:5D:E3:AB:70:9C:B4:B3:6D:5D:55:3E:B1:5A:1D:27:3B
Authority key identifier: 01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04
Certificate issuer: /CN=013f6db0fd57d19f9ee15242a2e4167efb522d04
Certificate serial: 01A1DE0279F5F7E8164A861CCFD1B57A9415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
Manifest number: 0FCD
Signing time: Sun 15 Nov 2026 07:01:06 +0000
Manifest this update: Sun 15 Nov 2026 07:01:06 +0000
Manifest next update: Mon 16 Nov 2026 07:01:06 +0000
Files and hashes: 1: AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl (hash: y9oSKfPQORNKyhQjzlDnA3zZqjfD3PPugzDSAC9sjaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:79:f5:f7:e8:16:4a:86:1c:cf:d1:b5:7a:94:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=013f6db0fd57d19f9ee15242a2e4167efb522d04
Validity
Not Before: Nov 15 07:01:06 2026 GMT
Not After : Nov 16 07:01:06 2026 GMT
Subject: CN=24b6f3705de3ab709cb4b36d5d553eb15a1d273b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:f1:8d:0b:31:0e:31:14:d6:23:d1:f9:3f:
ed:e9:01:08:be:a2:02:bf:d7:77:dd:7d:05:c5:b5:
f1:c1:05:00:df:1b:5c:35:52:e0:a6:20:80:7a:29:
ae:bf:62:c6:00:f3:53:fc:f9:47:99:16:be:2d:03:
55:82:50:69:cf:cc:ae:67:40:a6:2d:ce:b0:87:c4:
79:56:7a:0a:41:5d:cc:27:70:fa:fa:e9:83:07:d9:
b1:7a:b8:e8:34:2e:5a:c2:ce:d0:36:1d:e0:72:39:
0c:2b:7c:2c:ab:10:0b:b6:54:1a:cf:6e:9e:0a:5b:
13:56:a6:ac:34:5c:58:48:be:73:6c:b3:31:3c:18:
74:b2:83:a1:f7:10:9a:16:58:d5:05:ad:4a:3b:64:
0d:ed:17:8e:7c:5b:e5:47:da:73:06:cb:99:82:2f:
eb:39:91:9e:6b:c9:bf:3f:ba:ea:6a:ba:b9:97:0f:
72:fb:7d:2f:ac:5f:a3:88:25:22:5f:82:f4:c1:90:
0f:74:dc:9b:3e:f8:5a:6d:a5:0d:4e:a9:71:13:95:
c2:64:d7:07:09:06:8e:33:ad:a5:9c:15:89:83:ca:
fe:56:e4:2c:e4:2f:f1:b2:70:29:2f:3f:31:1f:b1:
ea:ec:b6:7a:ae:83:ad:c8:36:e2:4f:f0:29:b3:30:
8a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B6:F3:70:5D:E3:AB:70:9C:B4:B3:6D:5D:55:3E:B1:5A:1D:27:3B
X509v3 Authority Key Identifier:
keyid:01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d1:21:9c:6a:1d:5f:13:70:51:c7:96:5e:9a:3a:5b:42:91:
78:c8:a3:ea:ce:77:7b:8e:03:31:5b:bd:02:d5:3f:99:e5:65:
74:87:63:47:4a:fa:32:2b:98:08:d4:d6:ac:1e:80:ab:32:e5:
18:fd:c3:23:73:6a:cc:44:4d:b0:df:4f:de:0c:fb:40:d6:f0:
9d:2f:38:f2:f6:9a:bf:6c:bc:1d:2b:ca:38:b2:5f:2d:0f:96:
c3:0d:af:89:2b:5f:f6:47:3f:d7:7f:da:c1:de:b5:a7:76:c4:
f7:37:92:f0:d3:f9:5e:89:8c:05:e1:38:67:a9:32:56:65:a1:
24:72:fb:16:90:fa:6d:eb:af:7e:a5:e6:50:26:4c:09:e5:b7:
fc:bd:d6:0d:18:64:ed:9b:40:d6:4f:aa:84:5b:24:19:5e:80:
18:39:fb:48:71:0d:99:5e:81:33:ae:6e:a7:f0:cd:25:d4:15:
09:d1:d4:63:e7:1b:a3:ac:36:51:7f:e3:16:13:bd:37:47:7c:
f6:1d:8f:29:c8:6d:f3:5b:b3:d3:5c:98:3a:77:84:54:de:73:
40:0a:a8:40:03:d6:82:a1:57:cf:27:38:19:07:f3:4b:a1:b9:
cf:5f:44:81:78:0c:1b:f5:64:77:16:a3:16:69:82:c2:87:92:
20:ca:26:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:52:46 2026 by rpki-client