Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
File: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft (raw, json)
Hash identifier: +ftDIKyQoKysGm85FiJuzML1wxYON333/VpCiZhuu0g=
Subject key identifier: C3:5A:61:E2:A6:2E:FB:33:70:D8:24:5D:93:EA:E5:8C:4F:51:AE:D5
Authority key identifier: F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
Certificate issuer: /CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Certificate serial: 01A0CB22307364ACFD1258852F3F76E17903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
Manifest number: 069D
Signing time: Tue 22 Sep 2026 22:00:10 +0000
Manifest this update: Tue 22 Sep 2026 22:00:10 +0000
Manifest next update: Wed 23 Sep 2026 22:00:10 +0000
Files and hashes: 1: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl (hash: kId6dd/7SQby79/VlKF9OwsJEwQKL7jqFa4u6YDEY3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:30:73:64:ac:fd:12:58:85:2f:3f:76:e1:79:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Validity
Not Before: Sep 22 22:00:10 2026 GMT
Not After : Sep 23 22:00:10 2026 GMT
Subject: CN=c35a61e2a62efb3370d8245d93eae58c4f51aed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3a:53:2d:8e:bd:ca:6a:61:61:38:39:ae:5e:
33:38:ba:d5:8e:bd:50:68:c9:7c:ba:30:3b:fe:6b:
fb:36:cf:48:48:80:42:ae:b7:75:f5:3b:88:79:5c:
7c:24:b8:6e:48:32:7e:bd:bb:02:f0:eb:66:63:a7:
09:d5:ea:4e:cc:a0:21:da:51:00:41:d3:fe:f9:fe:
40:78:5c:b3:ac:89:a8:ac:6b:ce:4d:86:c7:fe:53:
1f:2b:c6:dd:fd:34:ca:6b:09:82:6c:18:17:e1:ec:
64:59:e1:ad:90:13:46:e1:0f:34:07:eb:fd:23:01:
28:f5:30:f6:b6:2f:b2:8c:39:4a:76:78:66:79:a3:
fb:ba:ca:5e:08:99:1f:fd:8a:97:25:15:a8:98:51:
77:6f:9d:ad:5f:a0:c7:cb:4d:ff:c7:21:6b:c5:be:
ed:fc:00:c6:2f:6b:00:a6:5e:41:4e:34:c7:ec:10:
1a:b2:8f:11:69:c0:89:22:86:18:08:2e:bb:cc:4a:
d0:37:37:18:9a:0c:52:ea:12:d6:1f:ac:e1:44:3b:
5d:34:2a:77:a1:07:59:72:27:54:64:9d:da:8d:e4:
2f:62:63:73:ea:ee:32:52:fd:b8:54:f4:d8:96:0d:
6b:c1:dc:4e:bc:e2:16:fe:07:1e:85:8f:07:45:60:
a8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5A:61:E2:A6:2E:FB:33:70:D8:24:5D:93:EA:E5:8C:4F:51:AE:D5
X509v3 Authority Key Identifier:
keyid:F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e9:8d:b8:1e:78:df:ab:31:4a:c7:e5:bc:6e:f1:61:09:26:
c8:5d:8f:48:c0:f3:a7:eb:a5:66:d5:21:78:54:fb:dc:3b:33:
9b:b1:77:a3:df:20:a5:17:8b:e9:a7:20:a4:aa:09:62:4d:c3:
03:53:a8:8b:f2:d7:8f:50:8e:fe:aa:3f:c9:aa:d1:5d:de:4c:
be:37:36:49:6c:17:84:52:e6:05:ce:d4:9f:98:c3:4d:da:b5:
05:bc:e5:c1:0f:3a:72:f5:74:06:25:88:0a:d0:94:1e:dd:28:
ca:51:e3:36:a4:57:fb:c8:e7:46:64:f4:5f:87:a6:f4:9f:bc:
f0:6b:be:e8:aa:35:63:47:60:71:2a:6e:b9:25:9f:b4:98:df:
1c:07:76:83:b4:a6:c4:03:87:d2:0f:82:03:39:75:0b:86:a9:
b8:7d:ee:75:02:99:9d:5e:42:70:d7:32:75:78:1e:39:be:1e:
31:53:e1:77:66:f3:f2:20:6d:04:3b:e8:40:70:b9:c5:c7:a8:
a4:63:0a:46:e0:72:11:66:1a:d0:64:9a:4a:4e:ee:93:5e:c9:
d0:64:38:25:5a:41:36:7e:8a:27:8b:c3:c9:a3:72:f7:fd:91:
5f:a5:05:16:4d:7e:8c:f8:0c:e5:a1:31:b1:72:69:bd:5f:1f:
ea:34:cd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:21:00 2026 by rpki-client