Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
File: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft (raw, json)
Hash identifier: B7BemvirmDwECREVQnZyilT7ozAC8/6c2yw8Pzchhxo=
Subject key identifier: 27:80:B7:C6:96:C8:5C:EA:57:5B:38:4F:D3:7C:8F:CC:CF:58:F8:40
Authority key identifier: F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
Certificate issuer: /CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Certificate serial: 01A0D07FC6A4F070497617857F489DC02102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
Manifest number: 163D
Signing time: Wed 23 Sep 2026 23:00:29 +0000
Manifest this update: Wed 23 Sep 2026 23:00:29 +0000
Manifest next update: Thu 24 Sep 2026 23:00:29 +0000
Files and hashes: 1: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl (hash: RpRmE6YNN54uOR3O1T9d+riYOwBHpYshERZzgo+rXCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:c6:a4:f0:70:49:76:17:85:7f:48:9d:c0:21:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Validity
Not Before: Sep 23 23:00:29 2026 GMT
Not After : Sep 24 23:00:29 2026 GMT
Subject: CN=2780b7c696c85cea575b384fd37c8fcccf58f840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c6:06:7d:f5:4d:13:11:e2:65:61:6e:e4:f5:
3c:20:0b:72:e8:5b:22:8a:ae:aa:fc:8a:e4:a5:6e:
09:e3:62:e4:59:f3:32:7b:c9:9e:06:d6:d2:56:f5:
49:92:06:6d:7b:c0:ce:06:8b:9e:db:5a:0e:ef:75:
ea:98:0d:c6:9e:79:7b:49:17:01:c9:1f:e0:f2:22:
c9:5a:cb:c6:4c:4e:9a:01:72:47:3c:3f:93:fd:bd:
25:bb:f7:27:fc:99:c3:e0:71:3a:07:39:0a:bc:72:
40:b8:57:7f:53:85:06:d3:42:b2:91:f5:5e:54:6f:
20:7e:fa:ed:7c:94:77:49:4d:59:aa:47:5b:df:f0:
ad:d8:79:ee:33:3b:69:45:e4:43:de:f2:07:f4:df:
f3:3e:ae:20:9e:55:2a:4d:82:a5:fe:a0:0b:0e:95:
82:b3:07:cd:c3:63:0f:3c:1f:c1:09:9a:49:67:0d:
04:f9:76:fc:b1:6d:53:fd:43:00:8d:d0:44:80:d1:
c8:ef:cc:fe:96:cf:7a:f4:de:4e:c7:de:ab:4f:e2:
d0:72:96:1b:1c:6e:b6:e6:d3:4d:a0:5b:dd:15:5a:
f3:e3:27:9c:57:bd:f5:bc:4a:52:01:fb:07:1f:e0:
98:a0:c5:fc:c2:a5:4c:6a:df:2e:b2:2f:65:ea:15:
1e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:80:B7:C6:96:C8:5C:EA:57:5B:38:4F:D3:7C:8F:CC:CF:58:F8:40
X509v3 Authority Key Identifier:
keyid:F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f5:98:35:f4:21:4e:14:d8:c7:e7:52:27:da:af:0f:fa:95:
f3:96:53:78:04:0d:9d:46:41:9a:bb:0b:59:f2:da:9d:27:7a:
10:00:46:79:f5:10:46:11:e3:a9:9f:db:8d:71:c5:6b:fd:fa:
b8:8a:66:e8:d1:91:78:88:36:90:58:e5:b1:13:48:ce:a5:4e:
9e:89:29:5c:bc:36:7d:2b:c1:7e:25:35:3d:19:14:ef:43:05:
6b:79:43:48:b6:68:c4:b0:ad:9b:b0:1b:9b:52:1a:f6:8a:3e:
96:c1:4b:7f:75:99:aa:57:87:f1:4d:62:19:0d:20:67:6b:85:
83:86:ac:96:06:ec:dc:78:8d:cb:80:2e:95:20:03:aa:59:b6:
09:0f:43:56:07:49:75:ad:85:92:bc:eb:33:03:70:10:5d:4b:
2e:26:33:f8:d2:40:45:0e:10:19:60:bd:5f:79:63:2f:05:40:
b1:79:e5:8b:9e:44:41:2a:9e:f0:85:0a:0f:67:5a:b1:2d:7e:
b2:2a:31:2d:95:ab:b1:79:03:8b:98:5e:52:94:d4:a1:ff:a7:
73:45:60:9f:05:5b:76:e6:b7:f6:2f:e5:0c:e9:a2:7e:c9:02:
0d:02:ec:cd:b7:0a:63:56:cc:8c:47:3e:dc:af:73:20:cb:a2:
37:ee:f7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:21:00 2026 by rpki-client