Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
File: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft (raw, json)
Hash identifier: NmoZcJo5QUGfY3tcSqmPFJ4cU3EKyfQJ+mPvU4nAbgE=
Subject key identifier: B7:95:61:EA:6A:A0:AF:5B:FD:F2:85:8D:6F:FD:5E:71:70:3B:7C:9F
Authority key identifier: F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
Certificate issuer: /CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Certificate serial: 019D25F19E9DE2A3BDD1BF28407052E24584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
Manifest number: 1457
Signing time: Wed 25 Mar 2026 17:01:24 +0000
Manifest this update: Wed 25 Mar 2026 17:01:24 +0000
Manifest next update: Thu 26 Mar 2026 17:01:24 +0000
Files and hashes: 1: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl (hash: eC03PeYe1MWpGm9JxUjVTswiFPZ0cdOSNrLnF6NM/bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:9e:9d:e2:a3:bd:d1:bf:28:40:70:52:e2:45:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Validity
Not Before: Mar 25 17:01:24 2026 GMT
Not After : Mar 26 17:01:24 2026 GMT
Subject: CN=b79561ea6aa0af5bfdf2858d6ffd5e71703b7c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:ae:a4:9a:0c:5a:82:ba:9b:bf:73:68:fc:
7e:07:2f:63:e1:22:78:14:b0:d6:1b:b2:c4:a4:2e:
ac:8b:33:dc:6e:05:21:49:ee:0a:f2:00:6a:17:c0:
f2:4f:0f:e9:ff:d3:39:ce:41:2f:9a:88:ff:16:50:
ed:f1:b8:f7:bc:c2:c6:3b:92:55:64:ff:55:6c:f9:
8e:bd:56:df:d3:7a:67:56:c7:6b:72:b0:6b:89:4d:
85:3d:1e:4d:7b:01:3b:d6:bb:02:85:05:37:5a:6e:
7f:04:1a:53:43:68:b7:ba:b4:54:cf:0e:e1:eb:ad:
23:d4:db:95:23:54:d3:4b:09:c2:54:bf:88:d7:85:
23:6a:6f:bf:4a:26:9c:29:d8:f1:0f:e7:99:7a:97:
0f:49:f9:74:c9:c2:84:f8:8f:09:19:2d:2b:05:f7:
0d:40:e2:9f:63:2b:cc:05:12:27:0e:28:2e:9a:3e:
38:27:b1:3e:48:ed:d0:92:a0:14:11:b8:41:d3:8b:
ef:43:24:a5:5e:18:1e:6e:8d:05:5c:e9:b9:b0:d1:
6a:6d:2d:49:04:d5:87:64:0a:94:9b:db:07:87:44:
f6:2b:f4:08:9b:c1:6a:9e:c4:21:56:92:da:40:b1:
18:12:ec:06:24:75:0e:e1:74:1b:b2:50:5a:8a:04:
12:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:95:61:EA:6A:A0:AF:5B:FD:F2:85:8D:6F:FD:5E:71:70:3B:7C:9F
X509v3 Authority Key Identifier:
keyid:F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b3:01:a6:11:b3:e5:7f:ad:c7:08:02:e3:67:e0:23:56:24:
d3:f3:9b:a7:4d:46:97:22:16:bb:26:e9:af:c2:9c:4d:28:4d:
7c:d3:ba:6a:4a:2b:d1:61:2b:f9:df:17:8a:cb:87:ce:96:e4:
72:22:2e:6c:81:2e:fc:0e:aa:e2:18:1a:b8:a0:5e:05:d9:b1:
3c:ab:8b:05:a8:2b:9c:fc:a8:0d:c8:32:2c:9b:a4:d0:f1:ae:
74:64:ec:d2:eb:e7:df:c9:54:2f:b8:76:45:7c:59:da:7f:72:
e2:bb:4b:50:8a:c1:5d:06:69:8f:3a:dd:f0:9a:22:d2:54:0e:
d9:1b:f5:f6:07:22:ca:90:6c:f3:9d:c7:5a:4f:7c:67:f4:c1:
c3:f2:26:59:cf:80:55:b2:c4:0c:ac:33:ab:2a:9f:21:81:3f:
93:98:b6:66:e1:3a:a6:71:d4:3e:c6:89:40:2a:e5:02:d5:2b:
23:71:62:6e:1a:78:0a:32:5e:c2:38:9e:e8:55:56:c2:f0:35:
5f:48:af:71:12:d6:fd:db:a3:30:36:72:e8:c7:6a:13:01:26:
84:66:12:02:ab:25:a5:1c:42:35:c4:5b:4d:45:1a:b8:b9:a9:
38:12:fb:77:e2:55:81:0e:8d:de:5f:25:08:6c:d9:46:10:1f:
1a:c1:13:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8Z6d4qO90b8oQHBS4kWEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1N2U0YjFjOTU4NzcyNzEzM2M3ZWUwMGJiYmE4ZWM1NmVh
ZTY0MWQwHhcNMjYwMzI1MTcwMTI0WhcNMjYwMzI2MTcwMTI0WjAzMTEwLwYDVQQD
EyhiNzk1NjFlYTZhYTBhZjViZmRmMjg1OGQ2ZmZkNWU3MTcwM2I3YzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPGupJoMWoK6m79zaPx+By9j4SJ4
FLDWG7LEpC6sizPcbgUhSe4K8gBqF8DyTw/p/9M5zkEvmoj/FlDt8bj3vMLGO5JV
ZP9VbPmOvVbf03pnVsdrcrBriU2FPR5NewE71rsChQU3Wm5/BBpTQ2i3urRUzw7h
660j1NuVI1TTSwnCVL+I14Ujam+/SiacKdjxD+eZepcPSfl0ycKE+I8JGS0rBfcN
QOKfYyvMBRInDigumj44J7E+SO3QkqAUEbhB04vvQySlXhgebo0FXOm5sNFqbS1J
BNWHZAqUm9sHh0T2K/QIm8FqnsQhVpLaQLEYEuwGJHUO4XQbslBaigQSbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLeVYepqoK9b/fKFjW/9XnFwO3yfMB8GA1UdIwQY
MBaAFPV+SxyVh3JxM8fuALu6jsVurmQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVg1TEhKV0hjbkV6eC00QXU3cU94VzZ1WkIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85ZTkxMTktZTVlNi00MDRhLWI1OGEt
MTg4YjkxYTllOTkwLzEvOVg1TEhKV0hjbkV6eC00QXU3cU94VzZ1WkIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85ZTkxMTktZTVlNi00MDRhLWI1OGEtMTg4YjkxYTllOTkw
LzEvOVg1TEhKV0hjbkV6eC00QXU3cU94VzZ1WkIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALMBphGz
5X+txwgC42fgI1Yk0/Obp01GlyIWuybpr8KcTShNfNO6akor0WEr+d8XisuHzpbk
ciIubIEu/A6q4hgauKBeBdmxPKuLBagrnPyoDcgyLJuk0PGudGTs0uvn38lUL7h2
RXxZ2n9y4rtLUIrBXQZpjzrd8Joi0lQO2Rv19gciypBs853HWk98Z/TBw/ImWc+A
VbLEDKwzqyqfIYE/k5i2ZuE6pnHUPsaJQCrlAtUrI3Fibhp4CjJewjie6FVWwvA1
X0ivcRLW/dujMDZy6MdqEwEmhGYSAqslpRxCNcRbTUUauLmpOBL7d+JVgQ6N3l8l
CGzZRhAfGsETLQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:42:53 2026 by rpki-client