Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
File: 9XGHM6rUPvapm9jZUEog3YkCLo8.mft (raw, json)
Hash identifier: +U+dLFGJVJdakM2s571uuIoU61/Kj68O8aQgy72V4j4=
Subject key identifier: 05:A5:9C:73:59:91:70:12:F5:91:D7:DF:17:36:B6:39:48:27:19:B0
Authority key identifier: F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
Certificate issuer: /CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Certificate serial: 01A0C3694399A38D6DB9754894FBEFC37183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
Manifest number: 1764
Signing time: Mon 21 Sep 2026 10:00:50 +0000
Manifest this update: Mon 21 Sep 2026 10:00:50 +0000
Manifest next update: Tue 22 Sep 2026 10:00:50 +0000
Files and hashes: 1: 9XGHM6rUPvapm9jZUEog3YkCLo8.crl (hash: Y37z+J1Q5m9PLwmde0YWlisazUceAGNKi8Me4B1FK88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:43:99:a3:8d:6d:b9:75:48:94:fb:ef:c3:71:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Validity
Not Before: Sep 21 10:00:50 2026 GMT
Not After : Sep 22 10:00:50 2026 GMT
Subject: CN=05a59c7359917012f591d7df1736b639482719b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d8:a6:c1:7a:ce:86:1c:17:75:44:13:4f:43:
59:6b:45:54:4d:25:c1:95:af:55:b0:59:2b:91:9c:
86:a7:ac:8a:af:f9:13:41:03:ce:31:d9:4f:9b:5d:
91:8a:af:f6:ac:8d:cf:15:b5:c1:94:6d:47:28:9d:
5e:5e:ff:b7:0b:33:35:a5:ab:08:af:de:da:c1:3d:
90:06:f7:9c:20:39:e2:af:54:15:3b:24:62:53:2a:
c4:c3:2f:4a:78:f9:43:e0:44:8b:06:ff:76:89:5f:
db:86:55:7c:f6:15:9f:93:e5:c7:ea:04:61:ec:ab:
63:42:ca:4d:a6:4b:1a:f2:a8:a9:a1:42:bf:26:c8:
e0:e9:6b:17:b6:06:d2:75:56:4c:da:c1:70:06:03:
55:09:6c:26:10:9a:25:d8:56:e8:63:cb:e7:31:6f:
6d:3e:74:e2:10:7a:7f:8c:22:d1:7f:9e:93:7d:58:
8a:78:54:34:8c:49:a2:41:b7:32:5f:2b:be:2b:f2:
f5:74:a9:90:fa:d5:de:49:99:c0:9a:0d:2e:1b:cb:
9a:c4:a9:9e:14:8c:5f:cd:34:6e:e0:4e:10:b4:c2:
6d:bc:a7:3d:20:80:b6:8b:95:07:6e:6b:ad:2c:2e:
85:27:40:8f:14:92:f4:93:c2:31:59:89:94:5a:08:
e2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A5:9C:73:59:91:70:12:F5:91:D7:DF:17:36:B6:39:48:27:19:B0
X509v3 Authority Key Identifier:
keyid:F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:82:0d:75:05:48:16:10:d7:a9:9f:56:bb:5f:84:e8:cf:0c:
d6:e8:2f:ce:3f:72:60:16:0e:a2:a0:ed:54:33:66:69:b5:e2:
fa:d9:3c:49:97:49:17:25:0b:e1:10:13:7f:41:7c:f4:65:1d:
68:84:15:c1:0d:b0:05:27:fd:aa:7c:68:51:e2:e6:c8:e3:00:
6a:83:fe:a8:86:58:4f:3f:86:61:d5:55:be:33:81:77:26:fc:
b1:27:da:4e:a8:a3:2a:d0:20:bd:c5:18:49:03:0d:92:91:cf:
4f:af:2f:f6:79:48:96:20:4d:9d:ad:e5:89:12:96:72:4e:3e:
1d:ac:db:47:4c:ca:86:e3:f4:f3:40:ee:e2:df:f1:99:b3:1c:
7e:70:7e:18:4d:70:30:88:b0:4d:16:57:ad:ae:14:d2:c7:27:
ff:d5:4e:2f:6d:c4:69:52:91:fe:13:00:34:35:05:62:ad:14:
76:68:e7:1e:61:63:64:1b:17:ec:79:f6:4b:27:a1:42:f4:3b:
9c:90:ac:cf:42:aa:54:82:c5:0a:2c:d0:1b:98:ab:94:b5:85:
6a:df:6d:0d:60:25:08:cd:96:8b:9e:0c:2a:b1:ea:97:07:d0:
e9:d6:82:c5:93:a2:f9:93:4e:e3:31:23:b3:94:f3:f2:4e:a2:
75:e8:2d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:09:35 2026 by rpki-client