Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.mft
File: 9lLDECU8Ea-N8dkL6BrOQ31ti_Q.mft (raw, json)
Hash identifier: CCnDPMDKea0rewfzCAKYff5LhpgYAOBz01pdhPI7BvA=
Subject key identifier: E7:22:DD:2B:D4:3A:89:3C:7F:F0:D6:C4:A5:A1:1D:F8:C8:AE:01:70
Authority key identifier: F6:52:C3:10:25:3C:11:AF:8D:F1:D9:0B:E8:1A:CE:43:7D:6D:8B:F4
Certificate issuer: /CN=f652c310253c11af8df1d90be81ace437d6d8bf4
Certificate serial: 01A0CCA30AA520DDDFB57FF9E525FEDB4E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.mft
Manifest number: 0336
Signing time: Wed 23 Sep 2026 05:00:32 +0000
Manifest this update: Wed 23 Sep 2026 05:00:32 +0000
Manifest next update: Thu 24 Sep 2026 05:00:32 +0000
Files and hashes: 1: 9lLDECU8Ea-N8dkL6BrOQ31ti_Q.crl (hash: 0izjmIx2Lks1fLAzRYjdMBLNBdk7tUiA/o5iq8Sq/Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:0a:a5:20:dd:df:b5:7f:f9:e5:25:fe:db:4e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f652c310253c11af8df1d90be81ace437d6d8bf4
Validity
Not Before: Sep 23 05:00:32 2026 GMT
Not After : Sep 24 05:00:32 2026 GMT
Subject: CN=e722dd2bd43a893c7ff0d6c4a5a11df8c8ae0170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:06:93:12:d8:9e:09:ce:18:05:a0:f7:9a:
88:91:76:8c:5a:c4:9f:f0:df:41:72:32:a3:6e:1d:
97:99:ec:be:18:02:16:fb:59:d5:9d:28:4f:53:6b:
af:36:d5:d3:3c:e3:49:da:0e:4d:76:03:39:d5:82:
dd:e1:94:f8:4e:57:8c:5d:b8:8f:46:90:2b:f9:06:
10:53:15:d4:f3:f8:3a:f1:3b:e4:50:99:bb:07:42:
a3:0b:7f:f8:74:ca:75:01:bf:20:3d:5b:39:6a:27:
9d:a6:28:7a:7f:60:60:ea:10:05:2f:c3:ef:04:dc:
13:3c:08:93:d4:4a:ab:32:f4:63:68:23:95:e7:c8:
53:cc:07:1b:2d:1e:71:48:bc:e7:1a:48:0c:c4:f5:
50:d9:06:db:ef:2e:c9:18:8d:42:f1:53:d9:80:4c:
23:d5:ee:d6:e5:41:8c:15:04:4d:bf:7c:48:a6:98:
0c:bc:79:5d:bc:ae:73:9d:2a:79:30:bc:c8:9b:9d:
e4:e4:20:aa:d3:cb:d9:2f:e8:b4:c5:83:6a:b0:78:
ab:2c:1b:50:28:f4:87:50:ac:c0:d2:8e:3f:20:5d:
52:f1:c7:ea:98:86:4f:0b:9d:ea:15:21:47:ae:60:
a9:d0:1d:9f:85:80:0e:22:c1:37:d1:2d:1c:9c:a1:
9d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:22:DD:2B:D4:3A:89:3C:7F:F0:D6:C4:A5:A1:1D:F8:C8:AE:01:70
X509v3 Authority Key Identifier:
keyid:F6:52:C3:10:25:3C:11:AF:8D:F1:D9:0B:E8:1A:CE:43:7D:6D:8B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:94:45:a7:fd:cd:6c:c4:ff:24:bf:c9:cb:3b:75:56:a8:1a:
e5:74:57:73:8f:6c:83:d3:bd:d3:87:ee:ae:a4:70:a2:34:2c:
01:d6:7a:84:93:d3:22:6a:1b:6c:23:da:48:41:99:e8:87:85:
49:f8:cd:4a:87:a5:39:03:6a:83:26:23:77:79:60:c6:5e:3a:
48:10:f0:b6:48:40:bd:e4:d6:fc:6f:29:d9:cf:6e:db:24:98:
15:7b:69:99:9a:4a:0a:19:2f:89:8b:90:d7:94:3c:43:3c:b6:
a4:7b:f4:6d:50:15:0e:f0:66:10:0c:2e:ab:e6:f4:3b:6e:47:
49:13:48:6f:e6:45:29:da:e8:a2:78:49:50:9d:d8:12:d7:a7:
f4:e0:99:85:02:e7:59:17:de:8f:a3:f0:8f:67:11:18:f6:09:
5c:05:63:58:37:25:b7:b1:8c:29:dc:94:7a:80:21:7a:05:7c:
df:67:40:58:60:c8:b9:5c:99:ce:cc:f5:c2:a1:ac:6f:74:b0:
ba:c8:68:b4:bb:04:56:13:cb:ec:06:c9:84:64:e3:e5:bd:63:
67:c4:23:24:0c:1d:4f:8b:32:aa:c1:4b:6f:7f:73:bd:fe:78:
80:b0:7c:1f:d8:20:d5:ba:e1:7b:a8:f0:17:12:32:4e:04:33:
8d:d1:52:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:38:25 2026 by rpki-client