Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
File: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft (raw, json)
Hash identifier: ozwpgvobkuMkMN3mxfGpnvpu0gndt/RB3F+SblCi8EA=
Subject key identifier: CE:A4:09:E3:80:E2:4F:EA:5B:36:1E:AF:08:54:6D:B1:E6:72:DA:0A
Authority key identifier: F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
Certificate issuer: /CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Certificate serial: 01A0DD977062E80DBDA507717559D117AC26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
Manifest number: 1152
Signing time: Sat 26 Sep 2026 12:01:24 +0000
Manifest this update: Sat 26 Sep 2026 12:01:24 +0000
Manifest next update: Sun 27 Sep 2026 12:01:24 +0000
Files and hashes: 1: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl (hash: zVhMWd6LQ+i+/4bIsGvoMEQQFsaXYo8LZRpOBiR3SPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:70:62:e8:0d:bd:a5:07:71:75:59:d1:17:ac:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Validity
Not Before: Sep 26 12:01:24 2026 GMT
Not After : Sep 27 12:01:24 2026 GMT
Subject: CN=cea409e380e24fea5b361eaf08546db1e672da0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:63:68:0b:e2:4e:21:06:d4:3d:aa:fb:e5:48:
ab:62:85:6a:50:f6:a3:a6:c6:5a:1f:42:6c:ba:a5:
cb:6e:84:04:0b:b7:02:3c:ff:4e:ef:80:5a:5b:9c:
7c:dc:c8:de:c2:0c:a8:2d:e5:e5:92:88:ba:0c:e8:
d8:b0:ed:76:65:56:da:5f:4b:7a:f7:7d:03:ad:fd:
0c:84:20:9f:b0:01:55:e2:7a:a2:18:36:00:e1:84:
7c:9e:2e:9d:41:52:a5:b9:6b:05:d1:00:f7:83:fe:
30:3b:46:36:de:99:ed:1f:c3:17:87:9b:0a:59:76:
8a:97:3a:97:44:48:1f:3b:2f:d3:41:5e:5d:bb:1a:
37:be:44:d5:1d:d2:8f:11:67:33:d8:a0:14:68:d0:
31:b4:54:8b:9b:a8:70:5b:a3:ff:21:70:d1:a8:42:
8f:36:43:5a:96:73:42:e9:e7:8f:5b:cf:c0:89:81:
b8:5f:da:18:a0:a6:6a:da:86:82:b1:95:1e:dc:5b:
40:12:0a:7c:55:cd:de:9b:aa:60:4c:ef:97:31:0e:
60:69:a7:1c:d1:2b:de:26:8f:f9:ab:44:f5:5f:52:
1c:94:b4:59:9f:46:19:1d:d3:27:a4:97:03:47:75:
77:d3:31:9e:43:18:f6:c1:90:f1:e2:22:47:2d:32:
30:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A4:09:E3:80:E2:4F:EA:5B:36:1E:AF:08:54:6D:B1:E6:72:DA:0A
X509v3 Authority Key Identifier:
keyid:F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8f:5c:b7:62:d9:db:cd:37:e0:1c:67:65:b3:7a:b9:2f:ea:
ba:93:11:3c:91:80:73:c1:21:da:9b:06:98:8d:86:ea:20:d7:
bb:40:40:a9:60:cc:9a:56:ae:b6:6d:99:c4:10:69:89:43:c2:
50:4e:b1:a8:f5:2e:51:05:f5:3f:d5:30:32:89:18:61:95:05:
6a:5e:ac:6c:28:bb:a5:ce:2c:58:50:96:67:32:4b:f8:f9:d8:
9e:16:72:65:4f:b4:a5:c5:86:7c:40:79:c5:70:23:04:fa:61:
4e:aa:14:ea:9f:f1:48:c7:c6:78:15:e1:df:6f:d6:46:de:57:
73:94:cc:c3:17:57:13:1c:d4:cf:f8:7d:cf:ad:82:c9:62:ef:
a0:74:db:dd:f2:7b:9d:66:a7:56:a7:48:64:01:c2:80:db:72:
e8:14:36:e5:51:f6:e9:f4:48:32:df:4f:66:88:4f:32:c1:72:
da:cf:dc:36:e2:dc:d8:78:78:54:0b:9d:25:1b:5f:e1:62:6d:
37:5c:2f:a7:b4:15:2a:54:04:b9:a1:85:68:b6:28:15:d3:e4:
36:58:16:a4:43:59:f1:13:72:7f:06:55:76:44:e8:cb:fd:04:
83:65:8a:ff:e9:d0:be:2a:44:6d:2e:08:e1:3f:5c:c6:f9:35:
fe:5d:2e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:03:16 2026 by rpki-client