Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
File: 9rES1L7bpvNYUoqDcUG3SwkphZM.mft (raw, json)
Hash identifier: 9mKqkidiiJ+oK8h6k5HzJqHI7814Wj9kbzgBH+b5yww=
Subject key identifier: 04:C8:E2:DB:60:7F:74:88:8C:7C:7B:13:B1:73:87:C1:C6:94:1E:16
Authority key identifier: F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
Certificate issuer: /CN=f6b112d4bedba6f358528a837141b74b09298593
Certificate serial: 01A0C369594AC97FFC48F66F6C482A1FFD5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
Manifest number: 19B4
Signing time: Mon 21 Sep 2026 10:00:56 +0000
Manifest this update: Mon 21 Sep 2026 10:00:56 +0000
Manifest next update: Tue 22 Sep 2026 10:00:56 +0000
Files and hashes: 1: 9rES1L7bpvNYUoqDcUG3SwkphZM.crl (hash: ve0tLLSJENVNGn/mHwacELOiwh5UBi3oStOmuddKO3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:59:4a:c9:7f:fc:48:f6:6f:6c:48:2a:1f:fd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b112d4bedba6f358528a837141b74b09298593
Validity
Not Before: Sep 21 10:00:56 2026 GMT
Not After : Sep 22 10:00:56 2026 GMT
Subject: CN=04c8e2db607f74888c7c7b13b17387c1c6941e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:e4:88:7d:61:d4:67:0d:cf:f2:fd:75:4f:
d9:78:9e:f2:41:73:ff:c7:30:cb:2e:77:32:31:e3:
e7:49:94:da:fe:f3:39:9b:0a:79:0c:d9:8b:fe:ee:
43:78:e3:f5:7e:cc:cc:67:fb:68:8a:a6:c4:a7:c5:
72:fc:7f:30:be:c4:4e:a3:42:db:30:51:d9:a4:6d:
62:1d:cf:e1:66:86:79:f6:e5:51:fe:77:c3:ee:8b:
e8:46:68:7c:bb:2b:37:d2:0e:e4:a9:88:ee:51:35:
47:00:60:c5:54:e2:fa:54:83:34:63:55:8f:3f:3f:
ad:88:21:fb:e4:1d:87:06:ce:13:88:79:17:10:6f:
40:5e:59:74:aa:e8:07:5f:60:7c:1d:06:78:6e:ad:
ea:b9:da:64:fb:a7:bf:a2:68:de:df:94:bf:19:8a:
c1:9a:83:10:cc:de:ae:57:e5:f6:c8:33:c4:4b:75:
53:b7:95:ec:63:33:bb:95:bd:26:f2:c1:ec:c4:84:
ae:ff:15:fe:b7:d1:b0:94:a7:38:ad:a9:a4:9f:25:
54:b0:64:0a:c0:6f:cc:f2:65:42:48:fd:f0:75:1a:
8e:50:da:87:71:55:19:1b:ad:bb:0b:58:ef:33:a0:
63:ee:31:d9:24:27:9f:e0:78:3b:f1:7b:06:4a:b8:
e6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C8:E2:DB:60:7F:74:88:8C:7C:7B:13:B1:73:87:C1:C6:94:1E:16
X509v3 Authority Key Identifier:
keyid:F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:1c:54:f3:c0:4a:e3:e9:30:b6:e8:1f:7b:ed:fb:68:23:75:
b4:95:0e:dd:b4:83:fa:e6:2a:73:53:ce:e1:3f:06:52:5f:c9:
81:a1:dd:5b:09:fb:3e:91:02:38:d1:3e:94:aa:52:7d:fb:e6:
6f:d9:0d:da:bf:22:be:d2:07:b1:ae:0f:42:e6:e8:f4:5f:df:
70:86:ae:2a:67:6b:ed:93:50:fa:6c:11:9b:c1:9d:fb:e2:c6:
d8:64:59:bb:8c:82:f2:fa:f8:a3:09:96:c6:ad:6e:9f:d1:d7:
96:69:f8:47:3c:ec:df:09:8b:6b:47:23:cb:64:af:32:9b:b0:
e6:d5:9f:a3:48:70:45:14:ec:67:a4:9f:ea:cf:f0:04:a8:23:
21:93:0a:70:90:5b:07:07:52:fe:ee:0a:0e:47:08:e7:16:44:
d7:8d:81:8b:6a:d2:8c:3d:a8:1f:e0:5e:05:cd:24:35:77:86:
0d:f8:49:c0:ec:f1:af:fc:03:a6:89:b7:c2:6a:e1:15:26:3b:
bf:b4:56:f3:06:75:47:07:d7:05:15:a7:5d:15:e8:3b:bb:f2:
d8:33:49:64:70:08:c9:a5:93:91:84:21:6f:74:db:a1:01:c1:
1e:b1:1a:8e:05:8d:2a:b2:df:f1:a3:fd:45:d8:71:9c:24:43:
c3:4e:4c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:28:14 2026 by rpki-client