Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
File: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft (raw, json)
Hash identifier: JdrqSW/6mYvPyDRdPlzuJjHVXKEFHQOUBTGv869NGeM=
Subject key identifier: 74:93:F5:4D:06:42:F9:3A:CF:55:AB:DF:D7:9E:4F:6E:12:70:F4:F3
Authority key identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
Certificate issuer: /CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Certificate serial: 019E1D904DF28951C047C27904D0D3CCF37B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
Manifest number: 1902
Signing time: Tue 12 May 2026 19:00:56 +0000
Manifest this update: Tue 12 May 2026 19:00:56 +0000
Manifest next update: Wed 13 May 2026 19:00:56 +0000
Files and hashes: 1: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl (hash: KduWCN9sRx6sQnr3/LYaxee+2g0yabgUWNC79d8wP+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:4d:f2:89:51:c0:47:c2:79:04:d0:d3:cc:f3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Validity
Not Before: May 12 19:00:56 2026 GMT
Not After : May 13 19:00:56 2026 GMT
Subject: CN=7493f54d0642f93acf55abdfd79e4f6e1270f4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d5:fb:ff:86:88:03:77:52:46:c1:3c:75:ac:
dd:32:77:26:93:5b:99:01:42:da:56:aa:0a:ad:d0:
4a:f9:40:9d:07:8d:70:b5:e8:2c:45:81:8d:99:ab:
a3:5e:73:0a:01:d5:d8:51:da:4b:2f:3e:eb:4e:9a:
62:dc:67:2c:53:c1:b4:c0:b1:9b:14:38:8a:ad:1a:
05:a4:de:f0:8e:c9:e9:25:8c:78:a8:fc:3e:e4:23:
57:9e:58:d0:d8:32:35:d0:b5:64:cd:83:97:cb:90:
34:e2:7d:77:9f:dd:1b:e5:41:6b:ea:85:ca:ce:9e:
c9:0a:49:e8:dc:e5:07:ae:81:c7:65:a1:89:de:34:
ba:5c:20:4e:1c:4a:06:30:34:21:a6:f7:85:29:d3:
8d:16:de:41:78:f2:8a:2c:96:2a:40:06:35:d7:e6:
00:46:85:1c:93:6f:7f:98:41:86:80:cb:47:94:dd:
09:d2:9e:06:3b:0a:2a:64:93:f3:4c:75:3a:bd:29:
e0:6f:04:86:ff:19:d3:97:67:54:f2:47:61:bc:b7:
60:c7:ef:52:6f:39:49:dd:5f:22:c5:ae:3e:22:99:
d3:45:71:47:3a:33:e9:38:2e:1e:11:c6:11:c6:d2:
d3:3c:00:8b:70:fc:cc:5a:1a:bb:45:be:ac:64:f3:
3a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:93:F5:4D:06:42:F9:3A:CF:55:AB:DF:D7:9E:4F:6E:12:70:F4:F3
X509v3 Authority Key Identifier:
keyid:F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:bd:5b:b9:e3:13:18:86:a1:d2:2a:26:56:2f:81:23:77:1f:
7b:b1:e7:f0:ce:86:dc:ba:d6:6c:da:b2:1e:82:fa:ce:d2:82:
c4:9f:9c:a9:6b:ec:32:44:c7:08:dd:80:82:a8:a6:de:8d:aa:
e9:5d:c0:b7:c7:7c:ab:ba:96:9f:61:8c:03:cf:9f:6a:b5:46:
ab:b3:10:fa:2d:bb:bc:99:07:51:78:18:0e:6c:9c:dd:1e:65:
dd:94:8f:d0:77:71:e7:61:bd:54:14:18:3c:20:0f:6e:b9:6e:
b5:73:d2:3a:1b:ee:3f:fe:01:f7:34:13:57:c5:da:d2:3f:19:
60:e9:bb:a6:89:71:0c:ba:2a:3a:02:c9:b6:99:bb:fb:ae:20:
5a:4e:69:4a:6e:ba:bd:45:5b:60:66:45:f0:36:d3:ba:08:96:
83:56:75:fb:0d:be:d3:80:a9:12:6f:e8:a8:d2:2b:1a:08:fd:
50:b1:40:80:bf:76:ea:04:36:fd:16:4f:5a:7b:e5:35:92:d3:
93:41:81:75:f8:68:05:91:c1:67:58:20:95:de:a8:ca:75:8c:
38:64:e2:eb:48:c4:21:1f:b9:92:b8:0d:bd:56:53:62:0b:d7:
26:6d:60:0e:87:07:db:6e:1f:be:36:22:3f:c9:1d:4a:df:60:
7e:75:2f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:33:32 2026 by rpki-client