Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
File: 9XGHM6rUPvapm9jZUEog3YkCLo8.mft (raw, json)
Hash identifier: U9BY6x61tJeDzZdFHxtrwmYCXanDaxgB65+gRqr/fTk=
Subject key identifier: 8C:3F:E1:12:EF:82:91:E3:22:6D:06:30:F6:79:B7:C9:9F:50:85:5F
Authority key identifier: F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
Certificate issuer: /CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Certificate serial: 019E1D90AC3FD90D784BF5419525E3D3520D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
Manifest number: 1605
Signing time: Tue 12 May 2026 19:01:20 +0000
Manifest this update: Tue 12 May 2026 19:01:20 +0000
Manifest next update: Wed 13 May 2026 19:01:20 +0000
Files and hashes: 1: 9XGHM6rUPvapm9jZUEog3YkCLo8.crl (hash: +XnN0N1IIZ1o9aeZir4Wl+9+bSzwPLXK6Z62k54GXFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:ac:3f:d9:0d:78:4b:f5:41:95:25:e3:d3:52:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Validity
Not Before: May 12 19:01:20 2026 GMT
Not After : May 13 19:01:20 2026 GMT
Subject: CN=8c3fe112ef8291e3226d0630f679b7c99f50855f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cf:06:60:ca:78:e6:ee:5b:11:97:7e:1d:fe:
9d:87:f8:b0:cf:fd:9a:2a:02:7c:aa:4d:04:ff:6c:
6a:f0:98:13:ce:89:40:23:fb:34:47:d0:6f:04:6e:
34:87:9e:70:01:89:9a:89:7a:f8:c1:2c:2b:39:f7:
99:4d:80:b8:ff:b0:ba:0e:8d:ba:11:13:74:44:e8:
ee:ea:73:b2:80:ec:af:49:a2:33:57:ec:24:75:6d:
7c:e7:6c:3a:ec:cc:fa:01:b1:31:f1:c7:35:70:03:
ab:a6:bb:cd:2f:8e:14:f5:25:1b:23:5b:de:7f:b3:
7b:ed:b3:3e:01:13:0d:97:b5:2b:cd:26:83:fc:4f:
62:2d:7d:56:19:9e:61:c4:b3:31:29:d3:43:1b:b1:
f8:cf:96:cb:89:fc:ce:8f:3d:67:68:d9:f7:ed:3e:
36:e7:08:9e:f8:9a:1e:bf:19:cf:78:fc:f4:d0:7d:
d8:38:25:5c:a6:32:2c:5f:cd:54:d5:21:0d:62:03:
c0:36:d1:c5:dd:e2:a0:5a:8b:5d:d2:3d:11:be:78:
7a:56:c1:c1:83:6b:e7:a5:1a:75:1a:d9:71:27:dc:
2e:7b:54:b6:c6:05:f2:31:d0:84:ec:c3:09:85:df:
7a:56:3c:be:64:55:37:d7:09:fa:b3:ff:f7:02:64:
a2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3F:E1:12:EF:82:91:E3:22:6D:06:30:F6:79:B7:C9:9F:50:85:5F
X509v3 Authority Key Identifier:
keyid:F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:20:d8:90:0c:62:d3:f1:0a:57:72:7a:68:b3:63:fd:11:19:
83:0b:30:33:31:df:4e:70:e8:c5:db:45:3d:9d:1a:fe:73:0d:
98:16:70:6e:ab:d6:45:53:84:01:2a:16:d9:e2:e6:53:98:07:
ff:22:60:32:09:c5:74:3d:51:02:10:47:fb:34:d9:3a:18:9f:
2e:17:a3:f1:08:7c:1f:88:fc:2a:35:65:c6:c1:8c:47:e9:ef:
a0:43:f1:c7:13:88:ee:c3:98:54:e0:ad:d3:87:ca:ac:77:6a:
2a:9c:e9:4b:02:8e:44:21:f3:0b:71:d7:7c:2e:1d:e4:66:50:
7e:74:6b:84:6e:33:6a:f7:59:37:c0:49:83:35:54:12:c8:5a:
a8:3f:9c:b9:d6:62:b8:5d:bc:a6:55:af:1e:e8:d8:d0:6f:85:
1f:da:fd:ae:f0:c2:16:30:81:15:69:e1:be:d7:4a:16:c4:1c:
20:35:27:e2:82:16:23:c4:53:0b:dd:b4:83:3b:3f:c9:d0:fb:
a9:f7:39:1b:67:6e:17:a3:96:e6:e8:b8:d5:61:fb:1d:9f:77:
51:cb:d3:ba:c6:77:ea:8e:da:9d:86:5b:19:7c:d6:da:86:bb:
9e:4c:d1:9f:22:c3:ed:06:62:8d:a8:fc:a8:3d:8d:b6:2e:6d:
f3:d2:7a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:34 2026 by rpki-client