Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
File: 9XGHM6rUPvapm9jZUEog3YkCLo8.mft (raw, json)
Hash identifier: BLcR3/G5TBUkzejmcL1aoSqP1I6QAAiIGghrZx3hvb4=
Subject key identifier: A1:CE:A9:1B:EB:92:91:63:0F:B4:11:A3:C9:1F:E5:DA:48:C8:AF:2C
Authority key identifier: F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
Certificate issuer: /CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Certificate serial: 019D265FC3792FC9C00D89D7D85AD5755A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
Manifest number: 1585
Signing time: Wed 25 Mar 2026 19:01:43 +0000
Manifest this update: Wed 25 Mar 2026 19:01:43 +0000
Manifest next update: Thu 26 Mar 2026 19:01:43 +0000
Files and hashes: 1: 9XGHM6rUPvapm9jZUEog3YkCLo8.crl (hash: yn426xWnSgzqr0OuuaSCdEvrh7ImtPQQzfKMyxN4Qno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:c3:79:2f:c9:c0:0d:89:d7:d8:5a:d5:75:5a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Validity
Not Before: Mar 25 19:01:43 2026 GMT
Not After : Mar 26 19:01:43 2026 GMT
Subject: CN=a1cea91beb9291630fb411a3c91fe5da48c8af2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:53:05:3f:5a:30:c1:88:3a:22:05:85:3f:7a:
c4:c5:ab:b3:55:8a:95:91:c9:1d:39:b8:11:ac:f7:
6b:7d:0f:c8:2a:86:2d:ee:84:e4:61:4e:28:a7:20:
ac:2e:77:7f:05:86:d5:68:fd:b6:d7:9b:f0:30:a3:
21:80:15:03:22:1b:c5:1f:20:5e:5f:3d:58:09:31:
ea:f1:16:6d:51:3a:52:b7:c5:f2:20:b8:d9:16:4c:
e3:73:96:e3:4e:8a:d4:18:39:3a:62:ef:5d:49:b9:
86:c5:ad:c7:2e:09:4e:ab:27:7a:49:c4:da:25:15:
de:1e:91:19:6b:7f:2c:7f:b1:62:94:3c:cf:48:77:
c4:ce:af:41:9a:04:07:b1:bb:78:80:09:5b:b1:4c:
bd:aa:1a:69:96:4e:f7:15:92:37:bd:fe:25:1f:54:
89:a5:50:00:c3:ce:87:a0:c0:c3:33:09:43:08:aa:
dd:a2:ce:0c:15:59:fe:80:da:92:00:85:3a:f4:96:
76:fd:a2:1c:b0:67:0f:00:28:42:9c:dd:d7:50:97:
75:ce:32:9d:76:e9:f6:69:eb:1d:27:84:18:5a:47:
e9:11:e9:c0:81:bc:87:95:8d:b0:3f:8e:53:73:7e:
12:3f:44:81:31:36:03:e2:3e:af:49:29:f4:d6:b9:
c0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CE:A9:1B:EB:92:91:63:0F:B4:11:A3:C9:1F:E5:DA:48:C8:AF:2C
X509v3 Authority Key Identifier:
keyid:F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ef:78:64:42:ae:53:4f:d0:37:9d:6d:f2:1d:4e:b6:c5:89:
97:09:a5:ab:aa:30:ce:66:41:00:ad:37:84:5f:47:79:1c:e5:
f9:0d:2f:d2:a5:d1:69:c3:2d:b4:84:9b:b8:c6:cf:8e:26:cd:
60:6e:71:58:a8:65:b0:ef:88:46:5a:e2:72:5b:76:89:95:79:
a8:c8:08:3f:85:cb:e7:e6:5e:22:24:19:d7:fc:c8:6b:de:90:
08:5b:b3:4c:f6:22:72:d5:ed:27:28:d6:33:69:0d:29:a2:ef:
49:f6:c6:1d:1f:2c:dc:3f:05:50:49:db:34:a5:77:b5:17:98:
d0:9f:60:99:0c:11:55:bb:6f:5a:c6:5c:4a:eb:44:32:2e:43:
d2:cb:19:4f:f0:9d:4d:e5:9b:78:c2:80:06:c5:18:f0:a2:bc:
cf:dd:40:c6:5c:b6:23:9c:66:de:47:ab:79:f2:bd:8f:39:51:
8c:ac:a7:1d:02:be:ed:0b:ca:e7:b3:b6:64:10:0f:d8:13:55:
84:69:95:1e:95:9f:f4:b5:80:3b:2d:ae:cc:b3:04:a2:a9:c6:
bb:50:d7:3d:c9:f4:34:36:50:05:39:f9:86:1b:db:74:8a:89:
cc:40:86:eb:94:cb:5b:dd:0f:b9:2c:60:88:96:60:5e:3b:2e:
13:09:28:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:47 2026 by rpki-client