Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
File: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft (raw, json)
Hash identifier: 2ZXkNEQVO6XzBnI0kjyWQ6h9498qWR/6QtO8n0Zu2GI=
Subject key identifier: 31:87:6D:2C:D0:90:0B:B8:3B:0C:42:B2:64:A7:1A:F5:14:70:63:1E
Authority key identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
Certificate issuer: /CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Certificate serial: 019D9A3E8B49BDDDA407712D607A0A162FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 07:01:23 +0000
Manifest this update: Fri 17 Apr 2026 07:01:23 +0000
Manifest next update: Sat 18 Apr 2026 07:01:23 +0000
Files and hashes: 1: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl (hash: nKUiV8NiU+Qi882sme2R0XxzWufRb0mMEjHkL5JTqvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:8b:49:bd:dd:a4:07:71:2d:60:7a:0a:16:2f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Validity
Not Before: Apr 17 07:01:23 2026 GMT
Not After : Apr 18 07:01:23 2026 GMT
Subject: CN=31876d2cd0900bb83b0c42b264a71af51470631e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:d9:68:27:65:05:af:5d:cc:7b:70:03:4f:
63:7a:1a:f8:d5:23:27:49:f9:e8:d8:0b:1f:ee:85:
30:4a:7a:91:03:a5:85:e9:7e:d2:73:db:3b:cd:41:
e2:03:0b:95:bd:cb:71:6f:13:d1:8a:52:4a:04:f6:
9d:1c:79:c1:52:2f:5b:62:1d:80:50:38:c5:69:e6:
1c:0e:0b:04:00:92:4a:11:a8:95:54:00:43:f9:ac:
1f:c4:ef:84:ce:ea:02:3b:a1:43:31:7d:77:d7:dd:
28:22:e8:c3:c8:26:9d:26:15:a3:b4:92:98:d7:dd:
71:8f:a0:e4:11:21:ca:92:ad:fa:75:d3:e0:8e:a3:
13:c5:10:2f:64:3a:63:ec:6f:e5:dc:2c:2c:4d:02:
a0:ef:22:46:ec:f1:d3:12:6a:b9:d6:9b:87:90:50:
47:c6:e3:d9:74:53:25:6b:c3:9d:d1:c0:6a:b7:49:
1f:13:c8:b7:03:81:d1:ab:61:5e:63:a9:fa:f7:dc:
4e:61:44:b0:f9:ed:0a:3d:a3:09:36:1e:74:1a:50:
99:81:49:48:df:03:dd:e8:d8:f7:f0:60:3f:bd:a6:
be:e1:89:40:1a:dd:b2:a3:64:e8:d6:7d:1b:be:71:
e0:2d:28:cf:eb:ae:f7:7e:0a:1c:8e:43:5b:21:bb:
a8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:87:6D:2C:D0:90:0B:B8:3B:0C:42:B2:64:A7:1A:F5:14:70:63:1E
X509v3 Authority Key Identifier:
keyid:F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:96:b0:64:c3:47:e3:64:0f:5f:1e:92:02:cf:0c:78:a1:f1:
ce:05:71:d1:db:3d:77:0e:1b:58:f2:a6:49:b8:e4:b2:d4:c2:
60:b6:d9:bf:82:a9:1b:68:51:83:e2:04:00:6d:38:f4:f9:7e:
b8:e5:89:8c:4f:51:0d:d8:0b:6c:d7:e3:ec:02:ee:0e:ab:26:
2d:27:2c:0b:16:14:0b:86:de:b7:b2:d2:70:5c:34:42:f6:52:
5b:c6:7f:4b:a1:03:5e:0b:dc:41:89:f9:a0:38:eb:ed:da:3e:
bd:ec:90:92:30:f9:04:08:54:d4:e5:ac:72:28:d9:cf:0d:87:
46:98:00:63:19:50:58:7e:63:0b:ef:c3:8e:48:2c:87:80:74:
b5:3d:8c:7d:e2:69:ba:7f:19:ff:b1:f3:58:96:e6:ba:80:a0:
d6:a7:14:16:fe:ee:88:53:96:be:c9:6d:d4:53:8d:19:76:e0:
24:d3:ff:cd:e9:04:f4:e0:69:5c:3d:d6:26:45:66:07:51:78:
9d:39:da:77:39:9b:98:1b:f8:c0:2b:8b:66:19:54:2f:0b:ed:
44:e0:fd:d3:36:b5:99:a3:d9:7e:58:77:c5:12:1a:4b:71:63:
f1:5b:75:ec:26:66:69:de:f2:52:81:74:04:e8:83:85:99:73:
f9:58:8f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:37 2026 by rpki-client