Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
File: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft (raw, json)
Hash identifier: dlhxTS1ww34X5oBY5Xz2DNhDTdZUnR1lBoNXYKTc4bo=
Subject key identifier: 86:DD:B7:E8:84:79:34:54:36:59:B9:D9:EE:86:39:5B:61:75:61:FD
Authority key identifier: F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
Certificate issuer: /CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Certificate serial: 019FAA87DAD5A5F483AF00BB86B7E4BE7D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
Manifest number: 10B3
Signing time: Tue 28 Jul 2026 21:00:57 +0000
Manifest this update: Tue 28 Jul 2026 21:00:57 +0000
Manifest next update: Wed 29 Jul 2026 21:00:57 +0000
Files and hashes: 1: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl (hash: P1U2dAhbU5qASaXXMVkOrJ164vI5Spwm6lKYQyVtuRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:da:d5:a5:f4:83:af:00:bb:86:b7:e4:be:7d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Validity
Not Before: Jul 28 21:00:57 2026 GMT
Not After : Jul 29 21:00:57 2026 GMT
Subject: CN=86ddb7e8847934543659b9d9ee86395b617561fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:da:77:6a:52:ac:18:77:ad:36:6b:ea:b6:
ac:f2:d0:d1:9c:56:9d:53:30:5e:8e:3e:f9:d1:65:
d2:5a:03:ae:c5:65:3c:15:95:15:7a:dd:1d:1f:95:
48:1c:a5:3e:18:f9:16:55:74:de:e6:a6:e9:bb:a5:
a0:d1:c6:00:dc:c4:94:33:41:dd:58:32:68:23:10:
7a:7d:61:15:2b:60:79:8c:30:27:65:ad:00:a5:ec:
d0:08:f9:40:c5:90:a0:2b:6c:a7:f5:6a:5a:55:e5:
72:0c:a7:a4:16:7c:35:e5:be:03:27:ac:fe:fb:ea:
d6:70:de:ad:d9:b5:77:71:25:68:17:9b:ab:a2:e3:
67:fa:2e:77:ed:c6:7f:cf:28:9e:b9:21:ae:54:6c:
89:dd:06:58:0b:de:f7:8a:7d:bd:7f:aa:51:b2:da:
25:7d:d9:bc:8a:72:71:a3:c8:39:9a:f3:9e:f3:03:
99:85:83:65:e5:18:5e:1b:05:07:ca:5d:f1:2a:bf:
0f:18:af:b4:d3:b6:5e:7a:89:5d:ea:6b:3d:c3:5b:
62:45:32:16:de:16:1b:d0:e6:42:93:9a:a1:3d:7d:
75:7b:10:2c:a7:a6:ae:a9:26:32:c9:d6:a8:00:67:
ac:af:48:c6:63:38:81:88:20:4c:78:f7:b4:87:f8:
80:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DD:B7:E8:84:79:34:54:36:59:B9:D9:EE:86:39:5B:61:75:61:FD
X509v3 Authority Key Identifier:
keyid:F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ce:f6:4b:e0:68:06:49:77:ca:4e:2a:32:c2:69:7f:86:b8:
d1:51:f4:aa:20:76:69:76:87:84:ab:b9:17:9c:6e:05:bd:ec:
fb:1e:90:27:3e:bd:c5:88:c5:4c:00:aa:01:58:ee:e2:0f:d0:
3c:03:03:0e:fe:48:ff:6e:92:22:fc:ae:ab:40:40:47:3c:76:
9e:3c:8c:af:14:4a:e2:19:9b:66:46:90:23:20:16:c7:6c:99:
92:04:9a:37:af:2b:31:94:15:0c:38:08:82:9a:ce:ed:39:8f:
9d:c5:a9:8a:68:12:8b:22:62:4e:2c:66:97:27:9b:5d:f3:67:
bc:50:3d:be:c7:03:70:f5:58:b3:96:00:30:d3:16:a9:5d:91:
22:27:5a:b1:df:ab:9c:0a:a5:b9:63:3b:b2:38:0f:5b:85:42:
b3:e3:dd:06:4b:50:4f:e0:84:a7:d7:d7:9b:c0:78:0b:d6:12:
1d:4a:14:ba:14:74:1d:54:4a:73:82:43:80:f9:b8:d6:fa:3a:
ad:3b:47:b6:32:a6:81:a7:83:ef:7a:02:75:e9:a0:0a:dc:e5:
b7:e1:c3:41:51:74:b6:c0:82:53:70:0e:02:38:02:f6:74:20:
87:7f:58:78:65:50:dc:02:44:6d:2c:3f:b3:46:a6:e1:55:be:
84:37:0d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:56:34 2026 by rpki-client