Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
File: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft (raw, json)
Hash identifier: Tavk7L7bMQbLcVHl8q9J/JUosfKCHAHTp9y4ICghU1w=
Subject key identifier: 1C:FC:50:9C:AC:37:50:AB:49:41:06:E3:C4:F2:14:81:17:63:C8:B4
Authority key identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
Certificate issuer: /CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Certificate serial: 01A0D2DE6C90F75DF1DD5A1198C5AE42BE7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
Manifest number: 1A69
Signing time: Thu 24 Sep 2026 10:03:07 +0000
Manifest this update: Thu 24 Sep 2026 10:03:07 +0000
Manifest next update: Fri 25 Sep 2026 10:03:07 +0000
Files and hashes: 1: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl (hash: u921vSFbrlRdtBiheYvpeGN9IhZsQNI/HcfA+8aGxO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:6c:90:f7:5d:f1:dd:5a:11:98:c5:ae:42:be:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Validity
Not Before: Sep 24 10:03:07 2026 GMT
Not After : Sep 25 10:03:07 2026 GMT
Subject: CN=1cfc509cac3750ab494106e3c4f214811763c8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:72:99:30:9e:0f:1c:b7:00:92:14:e4:27:ce:
71:c1:41:1e:2f:6a:3f:68:7f:4d:8c:8e:e8:fa:cd:
6b:70:0c:89:89:ee:64:66:da:3d:83:1b:c5:51:22:
0e:47:21:59:5b:8f:1a:f2:46:dc:0b:14:c8:2b:e6:
49:31:74:18:28:71:d2:c7:4d:d7:e8:31:4c:21:70:
2f:0a:c4:9e:40:c3:0a:d5:26:a8:dd:fd:d0:ee:b8:
70:f9:24:ad:78:75:ab:9a:a0:d0:e1:a2:e0:4d:81:
ab:f0:4b:ba:79:d5:c8:6e:a5:35:cf:3c:fc:ca:ea:
41:6c:4b:54:83:89:71:63:98:a2:e1:1e:67:9d:9a:
1e:2c:fc:39:e1:5f:ba:87:41:b6:e9:52:15:93:95:
f5:9e:61:94:1e:42:81:a0:fc:a1:5b:8c:bd:91:b5:
48:62:5a:2a:29:f3:bd:13:3f:d1:ad:2c:da:f5:a8:
51:2b:27:f6:57:e3:83:e2:da:78:3e:30:6d:ae:7c:
27:a8:63:61:3a:b5:b0:e8:27:76:35:73:1f:1f:20:
d9:b6:f1:b0:71:f1:5e:86:fe:8e:1d:30:ad:f1:29:
c0:b6:56:ea:2b:6a:4b:52:c5:a4:cf:76:83:c4:43:
13:17:06:d7:96:9f:8a:80:69:0d:ca:1a:11:dd:34:
66:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FC:50:9C:AC:37:50:AB:49:41:06:E3:C4:F2:14:81:17:63:C8:B4
X509v3 Authority Key Identifier:
keyid:F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:79:19:c0:de:b0:de:29:2f:20:73:1e:af:51:06:47:58:7b:
84:bc:2c:a1:c6:9d:c1:49:02:3a:4b:f2:31:8f:ce:6b:e2:c3:
2a:04:35:3a:3a:75:3f:9e:f5:48:20:ea:d9:fa:a5:5a:ff:b5:
12:ae:c5:2e:41:35:ee:52:11:e0:35:c0:89:aa:84:e6:ac:9f:
4c:b3:e4:44:2c:7a:5e:0f:e1:4e:08:d4:e9:0b:f9:cb:40:df:
fb:6f:f5:e2:9c:6f:aa:b3:a0:5e:7d:60:40:f3:8d:80:01:8f:
bc:98:cb:b0:54:91:1c:7b:e5:b1:5b:13:90:ef:38:4e:55:04:
2e:dd:1b:16:77:ed:9b:95:c3:d7:0f:b2:b4:a6:3e:a2:2f:1e:
b7:1d:29:53:fa:80:8e:17:71:0d:fb:08:eb:fb:d4:ae:fb:00:
7f:ba:e2:21:01:a9:ea:05:7f:73:51:3a:0f:e2:25:f6:a1:e5:
8c:05:73:2d:10:8f:42:fc:e7:7b:fe:c6:30:05:07:4d:86:0e:
d7:4d:71:d7:01:31:b4:2c:8a:26:bc:c7:ff:b8:7f:83:72:cc:
b5:63:87:8a:0f:2b:48:ac:c1:69:ab:00:fb:94:dc:e9:f2:cf:
2f:dc:3e:8c:b8:ea:0a:8c:86:96:82:ed:de:18:30:d6:32:de:
34:b1:c0:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDS3myQ913x3VoRmMWuQr57MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NWM2ZGNkOWZkYmQyNGMxNmU1MGFlMTU1MWVlOGY0M2Fj
OGJmZDQwHhcNMjYwOTI0MTAwMzA3WhcNMjYwOTI1MTAwMzA3WjAzMTEwLwYDVQQD
EygxY2ZjNTA5Y2FjMzc1MGFiNDk0MTA2ZTNjNGYyMTQ4MTE3NjNjOGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3KZMJ4PHLcAkhTkJ85xwUEeL2o/
aH9NjI7o+s1rcAyJie5kZto9gxvFUSIORyFZW48a8kbcCxTIK+ZJMXQYKHHSx03X
6DFMIXAvCsSeQMMK1Sao3f3Q7rhw+SSteHWrmqDQ4aLgTYGr8Eu6edXIbqU1zzz8
yupBbEtUg4lxY5ii4R5nnZoeLPw54V+6h0G26VIVk5X1nmGUHkKBoPyhW4y9kbVI
YloqKfO9Ez/RrSza9ahRKyf2V+OD4tp4PjBtrnwnqGNhOrWw6Cd2NXMfHyDZtvGw
cfFehv6OHTCt8SnAtlbqK2pLUsWkz3aDxEMTFwbXlp+KgGkNyhoR3TRmswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBz8UJysN1CrSUEG48TyFIEXY8i0MB8GA1UdIwQY
MBaAFPZcbc2f29JMFuUK4VUe6PQ6yL/UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWx4dHpaX2Iwa3dXNVFyaFZSN285RHJJdjlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NWE5M2UtMzNlZi00NzYwLWJkNGUt
MTk3MzYzNTE2N2IyLzEvOWx4dHpaX2Iwa3dXNVFyaFZSN285RHJJdjlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NWE5M2UtMzNlZi00NzYwLWJkNGUtMTk3MzYzNTE2N2Iy
LzEvOWx4dHpaX2Iwa3dXNVFyaFZSN285RHJJdjlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqXkZwN6w
3ikvIHMer1EGR1h7hLwsocadwUkCOkvyMY/Oa+LDKgQ1Ojp1P571SCDq2fqlWv+1
Eq7FLkE17lIR4DXAiaqE5qyfTLPkRCx6Xg/hTgjU6Qv5y0Df+2/14pxvqrOgXn1g
QPONgAGPvJjLsFSRHHvlsVsTkO84TlUELt0bFnftm5XD1w+ytKY+oi8etx0pU/qA
jhdxDfsI6/vUrvsAf7riIQGp6gV/c1E6D+Il9qHljAVzLRCPQvzne/7GMAUHTYYO
101x1wExtCyKJrzH/7h/g3LMtWOHig8rSKzBaasA+5Tc6fLPL9w+jLjqCoyGloLt
3hgw1jLeNLHAMQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 19:23:42 2026 by rpki-client