Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
File: 9XGHM6rUPvapm9jZUEog3YkCLo8.mft (raw, json)
Hash identifier: tyIPZaqux+DUgju+SUleYLGykAsm/8OsiQQ313DJx7M=
Subject key identifier: 97:E7:7A:8C:B0:3D:48:E2:4D:86:C0:7F:CF:E5:F4:C9:A3:E0:6E:74
Authority key identifier: F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
Certificate issuer: /CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Certificate serial: 019D984FE38713FC62421C25188773143B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
Manifest number: 15C0
Signing time: Thu 16 Apr 2026 22:01:05 +0000
Manifest this update: Thu 16 Apr 2026 22:01:05 +0000
Manifest next update: Fri 17 Apr 2026 22:01:05 +0000
Files and hashes: 1: 9XGHM6rUPvapm9jZUEog3YkCLo8.crl (hash: AVyINT2DwYY+SnyuhR5QsQedLYANmscObJevBOkB3es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:e3:87:13:fc:62:42:1c:25:18:87:73:14:3b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Validity
Not Before: Apr 16 22:01:05 2026 GMT
Not After : Apr 17 22:01:05 2026 GMT
Subject: CN=97e77a8cb03d48e24d86c07fcfe5f4c9a3e06e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:99:ba:8f:3e:68:27:bc:24:11:b4:c0:a5:
92:70:94:34:9a:5a:4c:71:cc:65:02:d7:e3:ae:9b:
6e:00:a7:9a:2d:d2:b3:18:3b:3c:8c:1a:34:bb:49:
ee:3b:56:fc:d7:3e:fb:de:61:c4:8f:b9:13:ca:c8:
88:a8:81:95:1f:fd:a9:2c:e6:57:29:b3:57:d7:a8:
1e:8a:3e:31:d7:2a:1e:b3:fc:d5:37:25:a0:e4:7e:
eb:b7:cd:34:4d:c1:23:1b:5d:f0:e7:5a:0f:be:96:
7a:41:3a:38:4f:8a:f7:a4:17:0f:43:13:f7:0d:3f:
3a:45:69:62:22:b0:fc:7c:8b:40:5d:7b:21:db:57:
4c:c0:45:d5:25:28:c1:cc:54:30:64:d8:f7:d5:e2:
a8:8f:c5:82:78:98:0e:11:e6:a1:04:71:40:5f:37:
fb:a7:75:3e:b9:a5:d2:fa:34:f2:1e:12:bb:4d:ac:
b9:c8:ee:63:5c:1a:31:11:48:a1:d1:be:cc:00:de:
d2:ba:d7:cd:5f:e4:15:f1:6a:a7:33:7b:b3:a3:d1:
6b:f7:4b:e1:aa:c7:93:6e:f9:57:cf:2c:b6:f2:17:
3f:0b:cd:02:10:88:b6:0e:08:04:f7:17:f3:90:c8:
5e:3d:fa:fa:77:56:68:59:22:4f:60:1f:a0:ef:fc:
ab:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E7:7A:8C:B0:3D:48:E2:4D:86:C0:7F:CF:E5:F4:C9:A3:E0:6E:74
X509v3 Authority Key Identifier:
keyid:F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:7e:0d:68:42:03:6a:4c:a6:09:29:c3:80:12:82:a6:02:86:
14:59:e2:8e:99:be:e6:17:40:fb:80:ed:f4:71:b5:7e:29:14:
63:70:87:dc:18:1b:63:03:fa:6c:b2:03:b9:30:f6:48:9b:64:
d2:3e:63:6a:d3:66:ac:ff:71:e3:de:5a:3f:8a:74:19:7f:40:
47:51:02:a0:a5:51:86:85:32:07:58:70:6c:0f:0d:2e:6a:1b:
75:07:c4:a9:8e:2d:65:4a:ac:c4:af:c4:d1:e2:72:db:25:ee:
d2:56:48:d6:b8:9c:6d:0e:16:07:d4:5f:1e:b6:2d:3e:94:e2:
b8:a8:e7:a1:8f:bd:56:b2:9f:ba:b7:df:c6:ef:a0:29:4b:51:
e2:5a:97:03:36:c5:66:c4:a4:35:7c:82:f0:32:34:36:f7:c5:
94:b9:63:f6:3b:51:20:fa:76:46:8b:b0:80:0e:76:fa:7e:ac:
78:80:dd:40:51:8f:3f:fe:c8:40:c1:94:9e:6c:30:88:3e:76:
76:3b:47:28:e3:03:b4:f9:3c:e3:d6:be:27:1a:95:91:88:e9:
60:21:cc:ef:f4:de:ff:46:83:da:3b:55:74:58:91:b1:df:0f:
52:53:b3:67:01:fa:e3:bd:60:0f:4a:f2:26:10:75:7d:7a:51:
d4:60:f3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:23 2026 by rpki-client