Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
File: 9kixVYLTS9UXCp3RO4EyW6uuXjo.mft (raw, json)
Hash identifier: 2aCAiS1j5r+GqTsTQZN+BBBV1qwiUQv/kdtsWX3B/kw=
Subject key identifier: EF:89:BC:61:C4:C4:75:18:72:C3:51:C6:E2:71:57:FD:B0:83:EB:38
Authority key identifier: F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
Certificate issuer: /CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Certificate serial: 019EBFC8E114C71200504CB4E2F1F8A8CF44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 07:01:13 +0000
Manifest this update: Sat 13 Jun 2026 07:01:13 +0000
Manifest next update: Sun 14 Jun 2026 07:01:13 +0000
Files and hashes: 1: 9kixVYLTS9UXCp3RO4EyW6uuXjo.crl (hash: REyeIZA71SyNWzJZhhe0PivI+45yL/r5zoRRmM8ye5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:e1:14:c7:12:00:50:4c:b4:e2:f1:f8:a8:cf:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Validity
Not Before: Jun 13 07:01:13 2026 GMT
Not After : Jun 14 07:01:13 2026 GMT
Subject: CN=ef89bc61c4c4751872c351c6e27157fdb083eb38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:71:6d:66:b8:0b:7d:e9:d7:b4:12:14:79:ea:
f8:18:b5:aa:08:da:af:21:a5:80:9e:1a:ab:a5:08:
49:ee:66:56:83:e7:75:e2:e9:47:80:6e:92:35:27:
8b:ff:e1:64:84:05:11:11:1f:0f:f9:81:23:2f:d6:
e3:0d:4f:db:97:a7:3c:c2:45:9b:bd:de:32:36:38:
69:20:db:64:2d:e3:31:43:1e:b3:5e:8a:0c:18:09:
5f:bf:26:4e:fa:d6:61:6b:43:16:8e:6f:72:a2:0c:
ad:0d:8f:a4:9a:d9:9e:79:a1:69:d6:66:b9:33:93:
ff:33:d8:c8:5f:6b:2b:1d:ff:14:90:9d:7d:fd:7b:
7a:dc:9a:da:ae:07:d0:3b:4b:c6:86:24:91:ad:4b:
50:1d:06:af:e4:11:33:d0:94:d2:04:33:31:d0:d1:
8e:da:79:55:74:3e:40:83:cc:cb:10:c5:27:6c:65:
8c:35:bd:63:45:9e:62:3c:b3:49:ac:67:b9:2f:e0:
ae:ec:a1:bc:e7:88:1c:99:d3:c9:7f:75:0f:d8:6c:
87:4a:75:36:be:96:a9:78:3e:5e:ac:7b:ac:fe:fe:
a3:be:d6:a6:a5:5f:07:46:ff:65:4b:e2:4c:d3:ab:
35:29:40:99:d3:2c:ff:f1:a2:31:3c:83:f8:74:9a:
4f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:89:BC:61:C4:C4:75:18:72:C3:51:C6:E2:71:57:FD:B0:83:EB:38
X509v3 Authority Key Identifier:
keyid:F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:63:cf:32:8c:a3:d3:a3:29:1d:87:cd:fe:b4:30:38:22:18:
3d:05:42:5e:ab:9e:ac:ec:a0:fc:47:f3:e2:1f:e4:e7:64:36:
98:a2:dc:e7:b4:52:80:e1:76:c7:1b:a4:1d:10:36:5f:c6:52:
bc:09:d9:28:d0:d5:38:5c:6f:bd:05:43:49:61:8e:e5:ab:aa:
d9:da:d0:26:40:2f:81:f1:c1:be:f4:c4:fd:50:e9:ab:42:cd:
72:77:77:3d:d3:8d:c1:ab:15:69:50:25:a2:4a:0a:83:e7:67:
a9:2b:27:ba:a5:9f:25:08:dc:8f:ab:d6:1f:22:f1:e4:fa:11:
f7:0f:7d:d9:6f:02:42:5f:19:c8:79:da:22:5f:88:92:a8:3d:
ad:34:d8:0c:7b:98:b4:25:24:c5:29:34:91:b5:6b:0d:40:33:
0e:e6:7a:96:b6:7a:68:73:01:d5:a0:52:3f:1e:4f:b9:3d:c1:
80:fa:76:cd:9a:e9:4f:89:22:be:3d:4f:c0:77:0a:40:0d:34:
52:20:80:3e:d4:f6:8f:fc:31:f8:3b:36:b5:c8:d5:a6:c2:28:
67:96:f9:d2:40:38:fc:9c:b7:93:4c:81:1e:7a:da:91:ca:67:
54:51:7a:4a:b7:08:25:8b:f1:0d:a1:1a:05:b3:c4:c0:f1:64:
98:81:23:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:18:55 2026 by rpki-client