Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
File: 9kixVYLTS9UXCp3RO4EyW6uuXjo.mft (raw, json)
Hash identifier: 6YmVPENP5Bo2xLDDdGuN+DEGsEj4RE5Of9i2Z/Mt00g=
Subject key identifier: A3:27:62:A7:48:38:9B:7B:92:34:0F:46:3A:98:74:24:A8:75:EE:D5
Authority key identifier: F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
Certificate issuer: /CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Certificate serial: 019FA97526FF20335BA022EA84ACB65BF66B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 16:00:54 +0000
Manifest this update: Tue 28 Jul 2026 16:00:54 +0000
Manifest next update: Wed 29 Jul 2026 16:00:54 +0000
Files and hashes: 1: 9kixVYLTS9UXCp3RO4EyW6uuXjo.crl (hash: fNuxHenaWDimNmmdwD70X/qOLZCQm1pWeWd7qpf7ick=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:26:ff:20:33:5b:a0:22:ea:84:ac:b6:5b:f6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Validity
Not Before: Jul 28 16:00:54 2026 GMT
Not After : Jul 29 16:00:54 2026 GMT
Subject: CN=a32762a748389b7b92340f463a987424a875eed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:67:b9:4e:e7:31:e0:1e:20:15:5d:d3:df:
0e:af:1f:ee:f0:ab:b3:01:72:64:b5:cc:9e:9d:fb:
aa:34:36:44:14:ae:21:b6:95:da:f7:a0:63:ec:be:
c3:89:92:cc:17:4f:45:3b:3f:ba:b2:c0:00:f0:f6:
cf:e4:3b:fa:d5:52:bb:a4:3b:04:46:83:71:eb:ec:
d8:97:7f:aa:3f:72:7a:64:ab:bf:2d:ab:20:4e:e5:
1d:90:18:0e:69:82:5b:2d:07:00:20:1e:cb:dc:f4:
fd:e1:ce:eb:0e:8b:e5:2b:a7:31:87:4a:33:94:3c:
e1:10:0b:46:fb:01:a6:56:e8:7c:11:9a:ee:5e:94:
fa:e5:87:b1:ca:f4:dd:84:48:8d:2d:1f:5b:0b:73:
87:21:b1:f2:bc:3c:61:b8:cd:ff:07:1f:7d:1e:2d:
0e:39:8d:27:59:31:99:71:f2:e2:4e:32:1d:9a:64:
f8:a1:05:1b:7a:13:07:6e:42:8d:19:1d:8e:37:49:
6f:c4:b0:f2:66:3b:0f:8b:00:49:f5:0c:b6:64:75:
1e:7c:bd:2e:de:63:48:cc:12:cb:ed:4b:32:33:cf:
57:14:89:5f:a5:df:01:82:08:c2:f0:80:29:91:cb:
e5:f4:d5:a8:81:66:73:4d:21:9e:0e:f9:8d:c7:d9:
32:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:27:62:A7:48:38:9B:7B:92:34:0F:46:3A:98:74:24:A8:75:EE:D5
X509v3 Authority Key Identifier:
keyid:F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:00:d7:4a:fb:df:65:bc:5d:e5:a4:e6:13:0c:0a:3e:c2:04:
be:0b:ff:2d:33:02:b6:b1:1f:13:9b:92:68:27:6b:12:15:07:
01:6c:5b:e3:11:8f:b6:08:05:ef:c9:7a:dd:5d:cf:cb:4b:57:
be:3c:0f:94:c3:88:23:42:7b:e6:27:95:43:6c:cb:c0:5d:b7:
f0:19:8a:99:02:e7:4c:4c:ab:50:f7:68:56:ee:77:e9:6e:7a:
ca:3a:c7:74:ae:a8:f7:50:1d:d4:48:fd:5b:63:74:f4:c3:5c:
9a:53:57:1f:7d:cf:78:91:94:3e:e6:81:95:5a:32:e1:ca:e1:
49:44:af:4b:d7:64:60:cf:76:58:31:b6:7e:6c:ad:ed:e3:2c:
00:47:98:63:c4:1a:e0:8d:b4:2a:07:14:d6:90:25:bb:52:3b:
86:55:ae:da:f8:60:06:54:9f:72:01:29:53:e6:1d:33:53:50:
db:61:eb:18:ae:fe:68:9c:a9:36:45:3e:99:85:5e:6c:8f:70:
b0:eb:8f:84:72:68:48:76:c4:f3:11:ff:1c:93:c5:00:fb:35:
a4:60:ad:c4:7a:87:90:8e:88:a1:d7:bf:75:67:88:fa:07:21:
8d:91:89:8b:09:71:78:d1:59:5b:da:0b:59:94:de:72:62:21:
6e:e6:9e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:05 2026 by rpki-client