Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
File: 9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft (raw, json)
Hash identifier: sEecm4hy5GbP9S8Gk0JbiwXUJSWognjCvStrxo3YGlk=
Subject key identifier: F5:A1:67:F0:B8:37:F8:CD:8F:9D:35:A3:70:38:09:BD:AF:C5:62:B1
Authority key identifier: F4:ED:5E:5D:BB:A1:EA:B6:D3:95:8E:59:41:82:9C:9D:A1:B2:C6:7F
Certificate issuer: /CN=f4ed5e5dbba1eab6d3958e5941829c9da1b2c67f
Certificate serial: 019FAC081F8B84FEF2738C602673DD28EAAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
Manifest number: 0DE0
Signing time: Wed 29 Jul 2026 04:00:40 +0000
Manifest this update: Wed 29 Jul 2026 04:00:40 +0000
Manifest next update: Thu 30 Jul 2026 04:00:40 +0000
Files and hashes: 1: 9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl (hash: eBEfcDhFnHpqf/l5OWe+F2md+6EBNpnEI87bfeXMrjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:1f:8b:84:fe:f2:73:8c:60:26:73:dd:28:ea:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ed5e5dbba1eab6d3958e5941829c9da1b2c67f
Validity
Not Before: Jul 29 04:00:40 2026 GMT
Not After : Jul 30 04:00:40 2026 GMT
Subject: CN=f5a167f0b837f8cd8f9d35a3703809bdafc562b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:93:8c:96:aa:15:57:63:ab:1a:61:41:79:f8:
13:a6:fc:61:2c:bf:f7:ce:1d:08:af:df:b4:7a:43:
cf:28:16:59:28:3f:96:16:a9:a2:0e:34:79:23:39:
4a:49:05:b9:7a:5b:29:b7:b2:60:a6:14:cb:51:f1:
60:0f:bc:79:0c:85:73:eb:21:35:88:bb:07:0a:0a:
0b:f3:d0:fd:eb:51:e1:6e:46:ca:d6:4a:8b:d5:5c:
b6:54:2b:5b:82:3b:05:75:fa:16:16:58:c7:e8:68:
15:97:23:9b:98:81:72:38:2f:f7:4f:a4:87:88:a9:
ca:b4:f6:d7:f3:df:89:f9:f4:2a:b6:8d:b1:18:07:
a6:ef:16:eb:22:6f:f2:78:79:7e:86:47:ff:24:bb:
e7:17:d4:8c:42:03:c4:6d:89:a0:1c:c0:62:c8:6d:
37:ea:de:ff:ea:a4:d9:79:0b:97:78:ab:ec:a8:59:
e0:8e:03:1b:e9:b8:b4:d4:a2:98:a8:ba:6e:82:87:
d6:b0:6b:04:d3:6a:b3:1c:16:3b:c8:09:58:59:f3:
4d:1c:14:86:4b:9b:98:8b:a1:37:2c:66:85:ce:e4:
1b:10:67:f9:16:f5:ad:14:a4:a5:63:29:d3:37:f0:
99:4f:cc:5a:02:bd:cb:53:f2:b5:8f:27:98:6c:b1:
87:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A1:67:F0:B8:37:F8:CD:8F:9D:35:A3:70:38:09:BD:AF:C5:62:B1
X509v3 Authority Key Identifier:
keyid:F4:ED:5E:5D:BB:A1:EA:B6:D3:95:8E:59:41:82:9C:9D:A1:B2:C6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:81:8b:30:5f:ed:33:09:97:22:f0:ba:97:6e:7d:0d:3e:78:
9b:b7:2e:81:6d:89:80:7e:5b:de:c2:e7:b8:47:66:fa:02:09:
a1:71:93:85:ee:a2:a1:21:7c:a5:a9:fe:c1:43:96:c8:ae:80:
14:cb:5f:56:74:a9:f4:3c:0f:c1:d1:b7:93:3f:6b:87:13:c9:
7a:83:72:c8:e5:d1:db:69:20:ed:6c:21:45:91:08:67:67:87:
09:04:d1:59:cb:d3:7f:a4:0c:71:07:bd:f4:0a:1f:ec:ab:e8:
f7:6c:d1:71:cf:82:35:0b:e1:00:fe:94:94:ef:88:89:33:cf:
a5:da:e8:5a:f3:ab:36:ff:ac:fb:20:6a:0b:fa:53:7e:b8:ac:
79:73:72:b3:68:8c:3e:f4:f8:27:51:e4:7f:7a:87:05:3f:67:
26:ba:ae:39:20:8f:f0:42:3e:44:89:ef:6c:1e:5a:b5:05:78:
c4:62:17:dc:48:4c:bd:e7:91:a7:c5:6a:4b:96:c0:cc:0f:6a:
48:81:49:2e:d2:f2:69:07:d8:31:75:a8:9e:2d:e2:49:13:ff:
00:fe:02:3c:ab:9c:92:83:b4:18:d8:95:42:45:c0:31:c5:88:
65:40:da:ba:56:da:f4:ff:4f:25:f5:65:a2:ce:07:a2:a0:ac:
e3:07:9e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:28:25 2026 by rpki-client