Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
File: 9XGHM6rUPvapm9jZUEog3YkCLo8.mft (raw, json)
Hash identifier: mKzzDhYjCkfaooCbJCa7CPhfNDr9CkHw0OrmQRLuhtw=
Subject key identifier: 67:36:D3:76:EF:8E:15:DF:75:EF:D6:84:3A:7E:8D:AC:E9:F2:28:03
Authority key identifier: F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
Certificate issuer: /CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Certificate serial: 019FA975CB363880D51A2FF351972A18F969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
Manifest number: 16D2
Signing time: Tue 28 Jul 2026 16:01:36 +0000
Manifest this update: Tue 28 Jul 2026 16:01:36 +0000
Manifest next update: Wed 29 Jul 2026 16:01:36 +0000
Files and hashes: 1: 9XGHM6rUPvapm9jZUEog3YkCLo8.crl (hash: 6RZJizFiQBaR9MlQDWXQcgtXiI559XR5J57M0+PQyak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:cb:36:38:80:d5:1a:2f:f3:51:97:2a:18:f9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Validity
Not Before: Jul 28 16:01:36 2026 GMT
Not After : Jul 29 16:01:36 2026 GMT
Subject: CN=6736d376ef8e15df75efd6843a7e8dace9f22803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4a:32:7a:72:f6:e8:a2:f4:d5:cd:2b:4f:1e:
d3:5b:00:3f:55:e3:4e:8b:f8:b5:c6:ec:d6:7e:6f:
97:4e:bb:8e:25:dd:f8:27:24:53:e6:c0:57:1a:45:
5f:88:e3:c0:be:62:48:eb:cd:93:c6:39:ed:52:84:
b8:63:b0:24:3f:38:86:b8:85:e5:7e:08:bb:cf:aa:
e2:3c:97:17:33:56:fe:9e:18:bc:c1:75:e4:9a:0c:
d6:38:8d:ad:1d:10:dd:3d:23:9c:3f:29:af:65:c8:
ca:28:96:6a:ed:c6:7a:e1:0c:49:3b:df:8e:ef:05:
52:cb:3e:db:48:2d:26:44:cb:95:51:24:63:a9:93:
d1:ca:49:24:9f:09:d9:05:a4:43:a3:7e:67:c2:c1:
ad:2b:60:e1:02:b4:94:29:3a:6b:ac:ef:3f:51:40:
e4:c4:6f:e9:7c:9c:81:42:66:06:01:bc:2f:84:3a:
02:57:bc:20:8f:8d:25:7e:5a:72:64:65:68:77:e8:
94:58:af:f8:30:db:58:03:99:c7:02:27:00:99:ce:
e6:4c:34:4d:1c:2a:4c:d0:28:45:99:49:24:95:2b:
67:2b:4e:09:52:24:5c:81:c7:c2:26:04:4e:26:a6:
6f:a3:6e:d1:d6:0d:4a:b7:f4:9a:00:83:d5:d7:e0:
c9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:36:D3:76:EF:8E:15:DF:75:EF:D6:84:3A:7E:8D:AC:E9:F2:28:03
X509v3 Authority Key Identifier:
keyid:F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c4:71:72:bf:dd:71:19:13:0a:99:f9:75:98:6e:2e:eb:86:
d1:5a:21:b6:c1:88:bb:18:c8:d5:13:e6:f8:d7:ef:e3:65:0c:
4e:41:48:b4:b1:4d:8f:4c:db:76:36:eb:3c:d2:54:23:bf:b1:
54:89:3d:8b:3d:41:aa:40:6b:bf:d7:21:93:9f:6d:33:1d:5c:
63:1c:27:e1:d4:f7:29:20:5f:de:54:e5:ea:96:dc:29:23:20:
8e:6e:3e:e6:00:32:a5:02:c8:d9:91:e6:69:86:2f:bb:b4:da:
08:73:72:5c:7a:7f:d2:20:9b:c6:51:a0:a0:50:6f:8a:4b:c4:
84:6c:67:9f:78:48:68:ec:9c:b7:b7:de:0f:95:1b:27:75:86:
ea:3d:c6:2d:76:4b:ee:af:bc:92:6a:35:b1:a7:4c:7f:71:ab:
b1:16:4b:96:11:d7:72:1b:da:64:b3:df:c7:3d:09:95:1b:93:
72:c9:c3:93:bc:19:68:c6:d7:da:87:11:46:85:60:78:53:e9:
54:bf:8e:6c:e8:07:bc:68:b7:1d:7d:81:38:59:e2:47:8c:bb:
a1:b0:49:d7:79:64:db:c9:32:0d:04:6b:49:92:8a:0a:e0:65:
05:00:e3:da:33:4c:d4:59:78:b3:1e:04:3c:89:32:14:1e:af:
33:f6:bf:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:53 2026 by rpki-client