Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
File: 9yR1sGTeionxUD6u_H1yrczzihY.mft (raw, json)
Hash identifier: yPOTw7IMcLYXEdug+RNTVSxCzsgKAMl4AsjobqoLmPo=
Subject key identifier: 45:6E:CD:6B:BC:3E:BF:8E:74:D0:64:83:0F:8C:52:FC:6C:A7:C7:DB
Authority key identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
Certificate issuer: /CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Certificate serial: 01A0CEFF56A335924158A5F0071ABB102884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
Manifest number: 1A66
Signing time: Wed 23 Sep 2026 16:00:35 +0000
Manifest this update: Wed 23 Sep 2026 16:00:35 +0000
Manifest next update: Thu 24 Sep 2026 16:00:35 +0000
Files and hashes: 1: 9yR1sGTeionxUD6u_H1yrczzihY.crl (hash: nqVvCmhykShPNwKLx+xJReSxs1f5klu45J7pGGAf08o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:56:a3:35:92:41:58:a5:f0:07:1a:bb:10:28:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Validity
Not Before: Sep 23 16:00:35 2026 GMT
Not After : Sep 24 16:00:35 2026 GMT
Subject: CN=456ecd6bbc3ebf8e74d064830f8c52fc6ca7c7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:37:13:8a:20:d0:bb:56:a9:1d:8b:be:e3:
be:37:00:99:5c:02:69:89:1b:27:a3:ca:d8:80:be:
6f:b8:c8:03:ab:80:03:e1:de:34:0f:d7:da:50:c7:
37:ca:7f:e5:1c:db:ad:02:73:a9:86:87:5c:1b:46:
78:89:0d:ef:bf:51:8f:3f:bc:d5:5b:dd:65:b1:c3:
bb:24:05:8b:5e:ea:d0:91:f9:3c:b7:44:28:f8:04:
b7:cb:5f:d2:7b:16:00:d3:fc:01:5e:40:0c:f8:d3:
0b:fb:56:dd:79:6c:f5:0b:01:cd:79:7c:e1:02:fc:
05:48:2b:a6:f7:3e:bf:05:c7:20:d7:6d:b4:0a:4c:
fd:97:b6:b6:e5:ba:90:0e:81:36:10:72:99:2a:b8:
5b:e9:07:01:46:1b:86:f7:9d:05:45:4d:aa:31:85:
9b:f7:ef:9d:b2:33:ef:c1:a6:1c:e4:b2:35:a4:a7:
6f:13:a9:e2:9b:a3:1c:4b:a0:c2:cc:e1:68:f4:0c:
28:ba:4a:10:91:6f:c9:ad:bc:df:2d:4d:97:43:c2:
5f:e9:52:17:61:3b:fc:74:ef:b0:e4:d7:70:4b:ab:
ee:9d:d4:ef:01:62:0a:0c:a6:31:92:1a:fa:78:31:
98:51:c6:bd:15:9d:77:13:ad:5b:c2:05:98:94:05:
e0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6E:CD:6B:BC:3E:BF:8E:74:D0:64:83:0F:8C:52:FC:6C:A7:C7:DB
X509v3 Authority Key Identifier:
keyid:F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:44:d3:c5:9a:eb:6e:5c:f8:48:03:ff:79:8b:d0:ab:bc:74:
8f:1b:03:31:3e:62:4b:4a:0e:16:fa:52:d3:5d:9e:58:89:11:
c0:4f:a5:6e:a6:2e:97:15:21:db:00:e5:4b:aa:3a:a6:8f:7d:
22:90:27:7a:17:ae:35:01:38:4c:43:17:67:ed:5b:dc:1f:a2:
3c:6f:e3:06:fd:8e:37:8b:cb:8b:65:0b:8e:12:73:ca:94:cd:
48:75:1b:f9:77:52:75:fb:26:ba:91:85:e1:88:3f:66:5a:b4:
02:20:cb:1c:1b:5f:9b:38:40:37:f6:51:79:33:5e:2c:c7:79:
4f:f9:0f:e1:5f:b1:83:74:ff:81:c5:33:a6:68:9f:fa:b9:eb:
d4:e7:d3:66:52:57:ff:d5:54:b7:79:49:93:1b:50:7e:6d:a2:
5d:6e:25:15:59:b0:be:33:e3:f6:91:7c:79:ae:32:9a:40:99:
40:c2:69:c5:38:a8:c9:ec:1b:ad:c5:d9:f6:2e:66:f5:0c:e9:
5b:ef:83:62:d0:95:d8:e0:a6:7d:cf:bc:00:3e:05:ba:f0:3f:
61:5b:46:07:d9:62:fb:66:e1:92:6b:55:0a:3b:07:e9:58:a0:
d9:c7:32:89:02:5a:20:f5:b9:11:f2:04:62:98:f6:07:1a:c2:
5d:f9:ea:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:09:19 2026 by rpki-client