Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
File: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft (raw, json)
Hash identifier: pleqGDaafCUv6PkwKRosse2/6xUiycKszko3tBEY+po=
Subject key identifier: 81:63:00:15:8A:28:6B:D7:9C:6B:F0:05:7B:07:13:4D:DF:53:C0:C6
Authority key identifier: F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
Certificate issuer: /CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Certificate serial: 019DA5668991DA2EC32AE7614BBB76C46A4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
Manifest number: 1499
Signing time: Sun 19 Apr 2026 11:00:53 +0000
Manifest this update: Sun 19 Apr 2026 11:00:53 +0000
Manifest next update: Mon 20 Apr 2026 11:00:53 +0000
Files and hashes: 1: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl (hash: Y4ObQBSGYAG/1nmkJv6AgYB0nDHcNGRd7A3oPhVRrdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:89:91:da:2e:c3:2a:e7:61:4b:bb:76:c4:6a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Validity
Not Before: Apr 19 11:00:53 2026 GMT
Not After : Apr 20 11:00:53 2026 GMT
Subject: CN=816300158a286bd79c6bf0057b07134ddf53c0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:87:ab:1a:51:75:78:62:8a:7f:b7:ea:f3:
15:01:54:a9:6d:93:7f:15:0b:8a:3a:4c:17:e7:44:
1c:71:01:a2:5a:d7:31:e8:fb:73:95:0f:fc:6a:25:
16:ab:25:2e:d6:b2:5a:a4:e9:b8:d5:63:77:7f:29:
c5:8c:a6:8d:f3:20:13:68:6a:b7:f8:91:89:53:32:
fe:cf:3f:a7:d4:f2:26:67:d1:b0:7d:b5:ff:5a:d3:
4d:a0:8d:66:c7:1c:79:f8:1a:86:b1:c2:60:ff:63:
9b:cc:99:79:f1:8d:34:dc:e4:0b:50:d0:e8:9f:2e:
9c:7f:96:73:91:b7:01:23:17:94:c9:18:c4:03:a7:
e8:10:1a:a6:a5:28:9f:ee:ff:c9:7a:5b:17:41:6d:
75:9f:7b:19:83:08:da:26:53:82:24:12:7d:13:3e:
85:88:85:13:2e:ca:13:d5:1f:f5:c9:00:85:e9:51:
ae:fa:b3:ea:d5:fb:37:30:56:a8:62:3e:47:76:5b:
9e:2e:5b:27:e8:54:2f:ca:3b:b3:94:6b:7e:c9:fa:
1a:94:df:87:53:10:ab:3c:8c:ee:92:63:59:1f:6a:
cd:b2:21:47:4c:b1:f6:10:bb:ce:c1:90:7e:10:da:
5e:5f:a3:f1:27:10:19:3e:67:00:a6:e3:4c:06:0f:
7f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:63:00:15:8A:28:6B:D7:9C:6B:F0:05:7B:07:13:4D:DF:53:C0:C6
X509v3 Authority Key Identifier:
keyid:F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:14:cf:d1:a9:72:95:00:5c:e2:53:6b:34:ab:00:46:e8:14:
17:3d:fd:29:3d:a9:ff:6a:f2:91:3d:c0:f8:b8:27:eb:ff:ff:
54:38:3a:73:74:44:69:cb:63:ff:02:1f:85:f4:2b:19:ac:2c:
15:b2:00:7b:02:98:4a:6c:3f:5a:3f:ce:da:64:3b:2d:48:a4:
d6:10:51:f3:37:db:9d:36:7e:10:84:fa:a8:5a:58:c0:86:9c:
27:60:14:4b:37:59:df:d8:7e:e3:28:f6:ad:d6:94:af:6b:c1:
0b:c2:f5:3f:83:9d:27:0d:7a:d2:88:17:53:05:23:d6:a9:8d:
52:db:87:be:e4:90:0f:af:51:8c:2f:de:a2:f1:c9:f9:97:15:
92:06:9b:25:69:24:d2:6b:a3:07:6f:6b:c4:3d:fe:71:a5:83:
3a:ae:6e:6d:b9:9e:00:67:59:af:94:38:61:8a:bb:1c:22:e2:
4a:35:80:01:48:d7:31:f0:80:fc:52:46:3f:2a:b7:73:65:36:
03:b5:52:c5:2c:11:d3:77:d4:3d:f0:fe:2f:82:44:6b:38:1a:
77:e3:c3:0e:b0:a3:8c:4d:61:9d:df:c4:2a:e4:d1:8f:e8:a2:
f6:a7:59:68:33:31:38:37:a4:b9:5b:37:2e:f9:a3:4c:9a:33:
e1:ca:d5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:02:34 2026 by rpki-client