Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.mft
File: 9lLDECU8Ea-N8dkL6BrOQ31ti_Q.mft (raw, json)
Hash identifier: onZnlcIpzdWDVuwo2Pt63uIzHRsoVUU5VJc+tLngyHo=
Subject key identifier: 16:1F:5C:36:00:65:EA:B4:67:10:79:A3:2F:38:38:D7:18:F4:32:9C
Authority key identifier: F6:52:C3:10:25:3C:11:AF:8D:F1:D9:0B:E8:1A:CE:43:7D:6D:8B:F4
Certificate issuer: /CN=f652c310253c11af8df1d90be81ace437d6d8bf4
Certificate serial: 019F8FEC58997CCD14AB502DAC9725A9616A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.mft
Manifest number: 0292
Signing time: Thu 23 Jul 2026 17:00:58 +0000
Manifest this update: Thu 23 Jul 2026 17:00:58 +0000
Manifest next update: Fri 24 Jul 2026 17:00:58 +0000
Files and hashes: 1: 9lLDECU8Ea-N8dkL6BrOQ31ti_Q.crl (hash: tjIpNJmnMFaESX5qVWDZhai83M5bE4hdm6f9sF86GNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:58:99:7c:cd:14:ab:50:2d:ac:97:25:a9:61:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f652c310253c11af8df1d90be81ace437d6d8bf4
Validity
Not Before: Jul 23 17:00:58 2026 GMT
Not After : Jul 24 17:00:58 2026 GMT
Subject: CN=161f5c360065eab4671079a32f3838d718f4329c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:ae:d5:53:2a:cd:24:a2:23:95:b7:32:76:
e0:2a:f2:1c:43:9b:ec:cc:e3:2b:f2:2d:d6:ce:db:
ca:e3:98:82:9b:2b:52:1a:5d:9b:36:b7:11:56:7e:
13:81:f5:85:6e:11:63:6f:8e:75:0e:10:f1:14:3d:
95:b2:fe:4c:bc:37:94:26:ce:47:88:ca:4d:67:1b:
80:25:85:6f:cb:ca:56:e4:76:60:81:7f:66:a7:f6:
ca:71:26:85:8e:75:a9:b2:78:98:26:3e:a1:f4:60:
8f:68:dd:4d:04:a2:0c:0e:c7:20:ae:18:f2:10:70:
ec:4c:3b:d0:48:28:21:ac:59:4e:43:8a:a7:21:a9:
e7:7b:8c:bd:57:81:33:35:ba:84:5d:68:5c:80:4a:
6f:46:34:20:14:59:2d:56:19:f8:a2:c6:b6:12:0b:
7f:35:43:90:be:55:79:da:3e:c3:92:98:b2:50:30:
97:47:2c:e8:1c:15:43:34:2e:eb:75:4d:eb:56:8b:
61:f4:d1:a7:30:69:d9:3e:a4:a5:e7:8c:8a:11:d8:
ea:ad:d2:33:f6:bd:2a:2f:ee:66:f3:d6:3d:4f:38:
06:4b:08:c9:53:65:31:89:6b:31:03:a2:83:62:ec:
a7:e5:c1:8f:96:eb:6e:30:4a:d5:16:85:d9:dd:62:
7f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1F:5C:36:00:65:EA:B4:67:10:79:A3:2F:38:38:D7:18:F4:32:9C
X509v3 Authority Key Identifier:
keyid:F6:52:C3:10:25:3C:11:AF:8D:F1:D9:0B:E8:1A:CE:43:7D:6D:8B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:81:9e:e2:93:40:5c:5d:62:7e:a2:50:8f:7f:1f:f5:bc:8b:
f3:1f:aa:c0:d1:b2:79:d8:1f:0e:3a:3b:d4:b2:73:cd:0d:75:
44:16:50:89:f6:9d:a9:da:40:e8:80:3d:7a:07:42:5a:e8:57:
3e:6f:33:41:a3:cf:7c:02:4d:bc:03:ae:cc:55:40:ac:98:43:
ce:1e:39:65:f3:99:9c:e3:d4:00:9b:2f:f0:f6:55:2f:37:6d:
37:2d:c3:59:d5:6f:46:4d:ea:e7:64:21:f8:63:a8:34:05:14:
3b:9a:5c:bd:24:d6:ae:03:3b:e1:39:0b:97:88:ee:4c:bf:c1:
54:a4:ec:d5:43:14:c8:30:43:f5:2a:2d:8d:3f:19:56:9d:09:
e3:61:cc:85:59:cc:95:77:e7:e0:95:c0:5b:f1:83:f0:16:ad:
2c:00:79:08:d8:0e:99:1a:94:74:fc:f1:c6:b2:4d:bd:57:73:
45:6f:72:c4:49:0e:92:d3:47:c5:13:53:26:ef:0c:94:0d:ef:
45:e3:96:c0:eb:03:58:2c:ff:1b:87:78:70:f2:fb:18:9a:c5:
22:ee:71:fa:70:53:a9:d2:40:34:e5:53:59:d0:fa:e2:e9:e6:
d4:cc:7c:e4:e4:a2:af:e1:b0:94:d0:37:fc:ac:1a:e9:5f:6a:
c0:16:49:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:13:37 2026 by rpki-client