Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
File: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft (raw, json)
Hash identifier: kjuElGTfe3ovrCPssY5Cj9sOYN+8cn667BLhovy0bTk=
Subject key identifier: 23:B8:09:85:F1:E5:AD:F3:43:11:69:0D:9E:97:E2:39:3D:4A:B5:9C
Authority key identifier: F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
Certificate issuer: /CN=f57766f0726cff8618af968258f5bb229e937c6e
Certificate serial: 01A0BF8C1C454A23627F802190F30B7DCF7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
Manifest number: 1190
Signing time: Sun 20 Sep 2026 16:00:25 +0000
Manifest this update: Sun 20 Sep 2026 16:00:25 +0000
Manifest next update: Mon 21 Sep 2026 16:00:25 +0000
Files and hashes: 1: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl (hash: o46HOOzUaneephh+tBcdWk4tJK8VqMODmlpgyyCK6BM=)
2: ylsyREe54U569Cbya5kHu3je-G4.asa (hash: 6/SDvz7I7Rk9Q9eges7LMoyhQg8zkiVuxvYbU53cDDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:8c:1c:45:4a:23:62:7f:80:21:90:f3:0b:7d:cf:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57766f0726cff8618af968258f5bb229e937c6e
Validity
Not Before: Sep 20 16:00:25 2026 GMT
Not After : Sep 21 16:00:25 2026 GMT
Subject: CN=23b80985f1e5adf34311690d9e97e2393d4ab59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b5:8d:44:2b:e9:e7:bc:ae:ee:da:b3:97:f7:
78:35:fc:7e:1e:5a:77:88:7c:82:4d:45:10:0d:16:
0b:90:18:1b:57:ff:9c:08:94:07:bb:b0:8a:a8:08:
19:f5:47:60:cd:01:6f:61:99:d9:a8:98:d6:e7:25:
af:d2:87:cc:84:22:1c:19:87:31:dd:55:25:f7:2d:
17:ce:84:de:76:06:5e:4f:c7:7d:29:03:b2:93:ae:
07:90:43:e8:fd:f5:1f:42:21:88:62:14:93:d9:ff:
a6:51:a7:4a:89:de:e6:6a:9e:38:cf:23:15:2e:36:
3e:f6:f8:69:32:23:aa:42:98:b1:98:65:fe:37:90:
25:da:ee:e4:ef:6f:ed:26:c3:c5:be:c9:ab:e2:b8:
e7:91:b6:58:7f:05:1e:97:65:6e:6e:73:9f:0a:55:
70:02:d1:19:17:34:d8:65:5d:67:71:ce:ad:d4:49:
70:ee:59:13:84:5e:16:5b:07:37:4a:be:49:93:b0:
43:81:d9:94:8f:64:3a:9c:31:19:35:92:8f:c5:49:
d1:92:38:4f:6f:de:48:b6:24:eb:e6:08:f6:b6:41:
54:1a:79:c1:ee:ae:d4:51:db:58:4d:60:d2:c3:bc:
a1:ee:bc:8e:b1:d2:9e:25:f1:c9:3f:48:19:0a:c5:
e4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B8:09:85:F1:E5:AD:F3:43:11:69:0D:9E:97:E2:39:3D:4A:B5:9C
X509v3 Authority Key Identifier:
keyid:F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6f:c5:f0:92:b7:c7:61:bc:db:02:76:28:96:26:ea:6b:d9:
de:8e:46:30:9b:07:7e:c9:52:08:3b:84:17:b0:87:c8:ad:bf:
2a:06:c0:38:79:58:36:65:07:a1:68:ce:6d:d9:6d:8c:42:d8:
54:20:e2:3a:9f:5d:08:be:66:ca:49:c9:0e:59:15:79:e6:54:
27:4d:4d:a8:c0:f3:41:0d:b9:7e:a6:94:f9:c9:8f:fb:27:3f:
72:07:6b:f1:f1:b2:67:97:7a:1b:77:4e:c1:c3:3d:af:2b:39:
a1:65:37:2a:fd:76:ef:73:3e:6d:11:cf:5f:49:ff:32:10:74:
1c:6e:40:06:62:99:f1:b7:3b:96:69:d0:4e:83:5d:3e:95:78:
67:51:fc:d3:89:6e:eb:45:c3:71:74:0e:78:f7:a3:ff:e3:62:
40:e7:98:b4:b5:ae:7c:f8:fe:ed:fc:2f:b2:de:8b:92:4e:31:
46:b1:f3:22:77:21:bc:ac:a9:6a:6f:46:b4:7f:e3:60:e2:92:
65:9b:23:1f:13:42:5e:43:b9:cc:67:36:fe:64:f2:87:db:21:
43:40:32:8a:81:df:82:08:b6:3b:34:f4:5f:38:9c:83:83:b3:
7c:7f:10:5b:fc:3f:ce:62:a7:ab:81:08:a0:77:92:5e:4d:3e:
5a:37:b1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:35:58 2026 by rpki-client