Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
File: AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft (raw, json)
Hash identifier: 9oygYIR6ny11bv6PeVAO67b6SZ4rkNg/pqGx3N+6DcM=
Subject key identifier: 92:EF:88:C0:4A:33:C9:94:A2:46:F4:38:A7:87:4D:E6:1F:33:21:F5
Authority key identifier: 01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04
Certificate issuer: /CN=013f6db0fd57d19f9ee15242a2e4167efb522d04
Certificate serial: 019F90FE7E4B7B525E4FB212E88807565992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
Manifest number: 0E9C
Signing time: Thu 23 Jul 2026 22:00:25 +0000
Manifest this update: Thu 23 Jul 2026 22:00:25 +0000
Manifest next update: Fri 24 Jul 2026 22:00:25 +0000
Files and hashes: 1: AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl (hash: U5cnbakR72EPQbykRmHNzSjwFs4QzE8ZzagbFWdiQOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:7e:4b:7b:52:5e:4f:b2:12:e8:88:07:56:59:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=013f6db0fd57d19f9ee15242a2e4167efb522d04
Validity
Not Before: Jul 23 22:00:25 2026 GMT
Not After : Jul 24 22:00:25 2026 GMT
Subject: CN=92ef88c04a33c994a246f438a7874de61f3321f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2e:7c:a6:7b:9b:80:e1:07:27:d1:66:4d:3c:
80:9c:67:93:23:93:94:5d:a0:74:a6:42:ba:75:78:
05:36:29:48:b0:63:78:93:d0:12:d4:4d:9c:db:63:
38:c4:b6:a2:4b:f7:8e:9f:6c:8b:c2:e0:4f:04:f5:
92:63:f3:b5:62:a9:36:50:bc:d0:5f:88:83:f0:b0:
89:0c:66:78:46:81:9c:8c:1a:ea:8a:84:e7:80:aa:
84:8f:43:22:df:7c:f4:a1:8b:9f:9c:ec:05:ea:43:
bb:cd:65:28:cb:ed:29:25:b0:33:b4:ac:e6:da:19:
2a:7a:ef:5b:5a:ba:39:43:b5:a6:68:4f:1e:fc:70:
05:4f:8f:4e:38:a2:d8:39:cb:63:48:28:ef:d7:36:
7f:e1:46:b7:3c:d2:4d:55:32:0f:3c:28:9b:cf:cb:
ef:83:7d:ea:3d:b7:8c:12:6a:e2:97:e7:f7:34:e9:
cd:75:39:43:70:28:b4:85:8e:97:06:af:02:e5:e6:
8e:08:8d:52:60:7a:e0:0d:67:ec:63:56:54:17:44:
cf:5f:f6:e4:31:4c:b1:ad:1f:6c:72:15:34:b9:b8:
7e:0c:02:54:46:09:37:74:97:1c:4c:e3:c2:d0:38:
55:73:6f:41:2d:c2:db:c8:14:a0:2e:95:bb:24:bd:
17:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EF:88:C0:4A:33:C9:94:A2:46:F4:38:A7:87:4D:E6:1F:33:21:F5
X509v3 Authority Key Identifier:
keyid:01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:23:56:27:06:3c:73:a9:3a:d2:ea:96:fb:ac:a7:6d:b8:1c:
76:2e:1f:23:8a:fd:f0:62:4c:91:87:6f:41:6e:53:e3:ca:e7:
6e:a7:bf:03:f4:68:7f:60:de:02:a9:27:b0:d0:00:33:32:8c:
23:dd:77:1a:3c:63:a7:c2:8d:85:f0:21:f6:8f:95:ad:fb:66:
c8:2b:0c:49:b1:07:2e:55:b0:5b:9d:b2:d9:e8:bd:ee:e9:93:
03:68:1b:56:d5:d2:77:16:21:2e:a4:11:cc:6d:50:12:82:a4:
ba:db:51:45:48:03:c4:33:e3:65:8c:2d:7d:2c:d3:cb:b7:7e:
43:57:fa:a3:d4:07:eb:e6:3a:48:1a:bb:e9:45:53:54:0e:40:
99:58:0a:a1:e5:96:b8:db:a5:19:1f:df:08:38:19:36:0b:57:
46:d7:8f:80:5d:ac:75:fe:54:6c:e4:e2:35:47:f5:c7:3f:a7:
39:98:fe:88:c4:2c:d2:2d:e6:1c:98:f3:c4:48:5b:19:27:eb:
23:56:e1:0b:57:47:65:96:0e:99:ac:54:a3:4f:c6:a5:c4:ed:
bb:f9:13:11:51:bd:71:5a:29:e2:b8:3c:1e:dd:d5:fa:4f:03:
f0:bc:67:09:75:ab:3b:0c:ac:19:d1:76:b1:0b:37:9f:b6:76:
9a:c7:96:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:18:02 2026 by rpki-client