Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
File: 9kixVYLTS9UXCp3RO4EyW6uuXjo.mft (raw, json)
Hash identifier: Fj8WhEBYP8S9oTqW2eweL0VqXngNti17dvYSjiXOA8s=
Subject key identifier: BA:A9:A7:07:EE:8F:A3:0D:FE:C1:65:0B:6F:7F:3B:E8:DE:BB:A6:75
Authority key identifier: F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
Certificate issuer: /CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Certificate serial: 019D9850610B48840597CC43773990962FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 22:01:37 +0000
Manifest this update: Thu 16 Apr 2026 22:01:37 +0000
Manifest next update: Fri 17 Apr 2026 22:01:37 +0000
Files and hashes: 1: 9kixVYLTS9UXCp3RO4EyW6uuXjo.crl (hash: IP6gehh6jPB+I2HYfCJxePhR2/roNi+g1IKs7G+6SGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:61:0b:48:84:05:97:cc:43:77:39:90:96:2f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Validity
Not Before: Apr 16 22:01:37 2026 GMT
Not After : Apr 17 22:01:37 2026 GMT
Subject: CN=baa9a707ee8fa30dfec1650b6f7f3be8debba675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:95:e6:2d:76:05:a7:c5:41:e3:4d:6f:58:
55:d9:39:33:0e:a9:ec:a7:b2:8a:43:1e:76:95:7c:
72:f8:f8:c3:05:5b:34:49:ab:ba:c7:74:57:d6:6e:
c1:8e:7d:99:ce:b8:ff:ff:3f:02:6c:5b:b6:4b:1a:
f2:7d:1d:db:c5:53:8a:29:df:0c:c4:e6:44:be:4c:
39:59:54:76:31:a6:6b:84:0f:37:f0:af:5f:e1:97:
d1:81:be:3b:17:f5:76:b8:2a:00:18:66:77:6f:30:
d8:a3:18:88:87:40:39:7d:d1:a1:ce:f2:b5:66:55:
12:5e:a5:24:c3:fa:99:62:ca:17:d1:35:41:1b:51:
e5:fd:08:70:34:40:7e:e1:05:20:e5:2f:ee:fa:53:
90:e6:53:f4:fa:16:63:df:2b:0c:4c:b6:90:e5:94:
4f:82:10:8a:28:5d:49:4d:72:d0:67:be:71:d0:f2:
b6:d2:1c:f3:18:af:07:c4:63:ce:b5:48:f5:6e:8c:
15:b0:85:13:cd:85:a1:e6:04:76:34:7a:5a:13:77:
79:0d:08:32:c6:57:e0:7f:c9:a0:a4:04:36:44:b6:
8f:ca:a5:f9:2a:ab:8d:9d:92:ac:65:3e:e5:a7:2a:
a9:29:d4:61:88:d0:e5:95:76:3b:30:b6:7d:60:35:
9f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A9:A7:07:EE:8F:A3:0D:FE:C1:65:0B:6F:7F:3B:E8:DE:BB:A6:75
X509v3 Authority Key Identifier:
keyid:F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3b:29:ee:15:fa:60:5d:4c:36:ee:7b:6a:b2:92:d2:ce:34:
b2:f7:a8:8e:d6:f6:a8:90:75:f9:72:7a:6a:71:eb:49:97:9a:
bb:be:32:52:2e:8b:a7:b9:95:c2:43:f9:29:47:34:8c:da:f0:
4e:ba:ab:57:89:66:5b:f4:0f:bd:8c:61:3d:d8:d6:e2:2d:6b:
70:e3:50:1f:2e:66:39:f8:01:9d:09:fb:87:c0:32:a0:65:cf:
c4:3c:25:cc:eb:25:9f:d7:91:54:19:e9:c8:d8:e4:37:64:ec:
c3:c6:ca:96:5c:e7:92:41:3c:b0:90:6e:d7:95:d5:de:7f:51:
fb:e6:14:cc:1a:5c:02:43:b7:e9:f7:fb:97:a5:37:5e:3f:dc:
5f:f7:4f:60:78:32:bd:d4:d1:ca:d7:58:6c:9f:cd:a1:b2:21:
1a:5b:2f:34:ed:dd:b9:aa:18:50:fd:24:38:78:43:16:c2:c6:
d7:64:c1:91:19:40:51:c4:eb:ca:df:35:e3:6a:e9:7c:86:30:
9a:8b:cc:ee:8b:91:a7:4d:41:11:3a:51:39:9b:40:8a:ff:42:
da:8a:9e:05:7b:c5:bf:50:48:1b:7c:a8:a4:60:44:1b:3c:9a:
88:cf:28:f2:35:6a:82:b9:a3:e3:12:f8:72:2c:4d:d1:03:83:
1b:bc:8d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:40:36 2026 by rpki-client