Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
File: 9kixVYLTS9UXCp3RO4EyW6uuXjo.mft (raw, json)
Hash identifier: tGH/JoKYkn64jcgJQA1KOm+8a+LES/IzKhsdFmVa7/A=
Subject key identifier: 27:93:83:C4:1F:33:71:B0:8F:79:D1:0A:B8:9C:2D:A7:CC:FF:0A:77
Authority key identifier: F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
Certificate issuer: /CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Certificate serial: 01A0C55760AE73D0BBD2AFEBC50BCDD88182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 19:00:32 +0000
Manifest this update: Mon 21 Sep 2026 19:00:32 +0000
Manifest next update: Tue 22 Sep 2026 19:00:32 +0000
Files and hashes: 1: 9kixVYLTS9UXCp3RO4EyW6uuXjo.crl (hash: UUYMrexmP+rdrLCe617q15GMe9VnE/R1TIPMzrrEOhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:60:ae:73:d0:bb:d2:af:eb:c5:0b:cd:d8:81:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Validity
Not Before: Sep 21 19:00:32 2026 GMT
Not After : Sep 22 19:00:32 2026 GMT
Subject: CN=279383c41f3371b08f79d10ab89c2da7ccff0a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c2:3f:1f:ac:05:eb:2f:d3:5e:ed:e2:67:05:
e6:04:91:fd:3c:0c:47:b0:c6:fc:8c:b6:49:66:67:
fb:7c:7c:80:62:da:eb:8e:3a:6c:6a:91:99:7c:52:
e0:24:69:84:d6:81:f1:2d:a9:c1:f4:f1:ae:e4:75:
2c:f6:c0:0c:dc:e0:87:5c:2e:52:f9:08:a0:f3:3b:
15:92:bf:04:04:7d:ae:4f:05:81:12:04:0b:a6:18:
fe:09:88:92:e4:7c:44:43:3d:44:8a:93:d8:c1:66:
f0:2e:20:a0:6d:28:c2:99:9c:69:db:87:d8:0d:77:
8f:2c:fb:53:13:6e:0f:33:60:ab:36:e8:ad:ca:73:
ba:d7:f6:4d:35:24:0c:af:8e:c7:7c:ff:8e:de:37:
53:fd:c7:2b:d2:2f:99:70:4a:2c:c5:cf:a5:cf:88:
e5:e8:35:bf:10:d2:50:07:96:89:5d:eb:32:05:6e:
3f:ea:87:35:e4:90:51:23:d7:df:2c:f1:ff:4b:76:
5a:1c:e8:6d:a9:5e:a8:d1:c2:ce:61:b5:44:fa:4b:
23:23:68:f6:2e:82:a1:1f:ae:46:db:91:c1:b7:5e:
01:bd:25:e6:39:9c:c7:65:38:2a:17:9b:77:82:19:
5d:37:3b:12:25:71:7d:6d:b3:f4:c1:f7:84:6f:07:
df:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:93:83:C4:1F:33:71:B0:8F:79:D1:0A:B8:9C:2D:A7:CC:FF:0A:77
X509v3 Authority Key Identifier:
keyid:F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a5:9b:24:d5:41:05:39:27:59:2f:46:bf:7d:4d:d9:bc:03:
4f:84:56:56:a9:48:12:54:e8:3e:80:1b:bf:c9:13:52:11:0b:
a7:4e:63:09:85:aa:b2:c4:26:dd:42:70:39:aa:47:4c:bf:f4:
8b:a0:1f:78:7f:1b:7e:24:cd:10:65:5e:e5:c2:a5:6f:59:2f:
62:0e:e2:d7:c7:fb:79:91:b2:7c:52:d5:62:93:48:57:6b:07:
86:ef:ab:6c:78:79:6e:51:a3:bd:fc:25:52:22:e5:ac:af:ab:
d6:56:c7:1e:93:66:f5:ee:38:81:a7:37:7a:f2:c5:37:be:23:
41:c2:e5:94:51:ed:fd:47:5e:7a:36:e9:43:12:71:3a:f7:ce:
59:2d:a3:b0:a4:fa:7e:48:87:67:b9:18:c2:64:54:80:62:23:
43:2e:de:60:0d:11:de:56:9e:d6:e2:5d:93:25:91:c0:c4:f6:
41:7c:4e:8c:0f:8e:12:cc:57:ee:b2:00:4e:31:ec:a1:1f:58:
9b:89:a1:0d:e8:6f:0c:7d:a5:4c:c8:0c:fa:39:23:21:ee:e0:
15:31:c7:70:0b:16:6a:01:fd:ee:20:59:fa:60:01:d7:e2:26:
6b:c9:b0:4e:98:8d:f2:2b:e2:a5:64:8a:a0:db:36:79:5c:ca:
d0:05:76:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:42:06 2026 by rpki-client