Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
File: 9XGHM6rUPvapm9jZUEog3YkCLo8.mft (raw, json)
Hash identifier: kmEJcn36RKAbvYTjE6Dtu87O/JQgbADPIJziPZ9WDGk=
Subject key identifier: 3B:FD:81:46:44:18:70:C9:05:1B:DC:68:CE:82:81:52:32:9F:FC:1A
Authority key identifier: F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
Certificate issuer: /CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Certificate serial: 01A0D0EDF9DD1A69EF46B5D3AF263C610778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
Manifest number: 176B
Signing time: Thu 24 Sep 2026 01:00:51 +0000
Manifest this update: Thu 24 Sep 2026 01:00:51 +0000
Manifest next update: Fri 25 Sep 2026 01:00:51 +0000
Files and hashes: 1: 9XGHM6rUPvapm9jZUEog3YkCLo8.crl (hash: bHFuxvsQqNxEDYeEK/fWZNdTkrtWlK9Ui0RAvDTA08o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:f9:dd:1a:69:ef:46:b5:d3:af:26:3c:61:07:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Validity
Not Before: Sep 24 01:00:51 2026 GMT
Not After : Sep 25 01:00:51 2026 GMT
Subject: CN=3bfd8146441870c9051bdc68ce828152329ffc1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6d:48:36:06:a1:a7:3e:06:3e:08:bd:e4:c1:
53:f8:4f:cf:58:f7:3c:9f:e5:a1:77:1b:06:ec:47:
05:97:29:0d:5b:fe:25:5a:6e:8a:4d:31:0b:99:31:
25:fb:e7:a5:1d:67:a5:31:5c:25:b7:14:6c:6b:7f:
1f:ce:81:bc:a0:85:a1:be:14:c7:33:35:e7:a1:d3:
17:a3:8d:45:60:fc:58:fb:1f:aa:80:ea:15:fa:5d:
cb:1c:57:4a:6f:13:10:c0:19:85:f2:2f:45:95:32:
a4:2a:e3:ad:05:37:79:1f:4d:34:26:52:eb:62:89:
4a:a0:59:cb:21:3f:73:c7:77:5a:01:49:ff:27:84:
1d:83:4f:1d:b3:29:c1:ba:ae:df:4b:90:af:5b:2f:
a6:73:f5:0e:02:df:7b:38:c2:0b:85:3f:cf:5e:fe:
da:56:60:d2:10:45:95:a9:43:bd:52:8f:a7:1c:68:
b2:c0:4c:65:42:21:08:59:1e:ab:23:5e:43:3c:99:
54:f7:53:02:14:8c:2f:64:6d:b9:5f:6d:60:48:88:
ea:a6:32:bb:d0:dc:02:66:cf:2d:51:e4:6b:c3:e0:
29:41:8b:f7:b0:ab:cf:69:b9:77:aa:06:03:16:d7:
63:13:f7:a2:13:fc:b9:72:cb:9c:27:8c:65:4e:5c:
3f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FD:81:46:44:18:70:C9:05:1B:DC:68:CE:82:81:52:32:9F:FC:1A
X509v3 Authority Key Identifier:
keyid:F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a7:e8:a8:ce:bc:ff:33:63:92:56:7c:54:15:a5:e6:93:31:
fa:bc:e8:1b:69:02:15:55:14:98:b9:86:93:3e:ff:28:19:68:
d5:fe:4d:68:6f:c7:cb:49:f4:33:ce:a2:9c:b1:36:43:74:43:
f8:bc:b1:35:d4:22:b5:6b:c2:09:de:7b:ae:ad:31:57:67:40:
ba:48:04:cd:0d:55:6a:3e:2b:e9:75:0d:eb:47:4c:f1:e9:6f:
35:fc:89:cb:83:94:fc:5c:f1:0d:aa:d3:c2:d3:28:5f:51:82:
d1:44:22:80:1b:f9:75:9e:1a:f6:88:96:13:d3:3b:1d:c0:dd:
28:ef:7d:d9:87:1a:9c:fa:c3:de:e2:e0:e0:6a:8b:54:20:58:
04:20:c0:75:77:79:3f:c4:a1:35:45:ff:72:38:8c:e0:94:f4:
99:82:69:cf:48:0d:91:c0:73:eb:03:18:19:f8:b6:49:28:d1:
a2:d8:56:12:0a:21:8e:1c:09:aa:78:a8:18:c3:16:6a:f4:46:
cd:63:c9:56:d5:26:fe:1d:01:16:07:46:dd:c5:1a:40:b0:77:
19:10:d9:c7:06:60:16:a0:7c:2a:e1:03:e4:31:7c:eb:24:76:
a4:c1:1f:dc:ae:94:4c:c7:e0:8a:ed:3f:85:08:e8:cb:90:6b:
81:59:56:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:43:22 2026 by rpki-client