Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
File: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft (raw, json)
Hash identifier: qW/ayZMV6dExo26gVUtwWNM+HoavKFlyGtajZYqnaAk=
Subject key identifier: A2:CB:74:EA:FA:A9:3A:03:A6:67:6B:F2:58:D6:4F:F4:8F:BD:22:F2
Authority key identifier: F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
Certificate issuer: /CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Certificate serial: 01A0C2FBCE5C54421FA98864C0BBFE1222ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
Manifest number: 1636
Signing time: Mon 21 Sep 2026 08:01:17 +0000
Manifest this update: Mon 21 Sep 2026 08:01:17 +0000
Manifest next update: Tue 22 Sep 2026 08:01:17 +0000
Files and hashes: 1: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl (hash: BH0oOpmKJ4NNNQDujcKLHro0y6VXfMQrsyBQ4lTE92k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:ce:5c:54:42:1f:a9:88:64:c0:bb:fe:12:22:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Validity
Not Before: Sep 21 08:01:17 2026 GMT
Not After : Sep 22 08:01:17 2026 GMT
Subject: CN=a2cb74eafaa93a03a6676bf258d64ff48fbd22f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:55:ce:d7:5a:76:b0:16:4a:19:04:83:79:
7f:ec:04:e8:89:5b:ff:1e:d7:38:7a:7a:4e:47:83:
45:be:03:45:91:32:14:06:fd:75:72:8c:50:c7:5d:
16:2a:c9:bb:2a:25:14:40:d1:50:c5:c5:02:23:a6:
6b:5b:0d:d6:0e:07:73:e3:3b:90:ee:7b:bf:a8:52:
c1:d6:89:61:86:bf:55:60:5f:0f:1d:b7:9e:55:99:
42:d7:cf:e4:0b:72:ee:35:69:3e:0a:6a:4f:2a:64:
9d:6b:8a:fd:3a:ba:27:84:cf:46:8d:77:21:f1:aa:
c5:b2:2e:c5:e0:04:4e:a2:70:09:a6:6d:b4:e9:52:
55:0f:35:78:86:cd:15:53:91:ab:1e:2f:61:3a:6e:
a3:0b:41:4a:8c:5f:7f:6a:2e:ef:21:74:6a:93:ee:
14:33:96:86:eb:6b:20:d9:f3:e6:99:05:16:e9:8c:
f4:cb:8c:fb:cc:68:80:ae:5c:48:27:05:3d:2f:ea:
58:f7:48:cf:87:db:8e:57:6b:fb:98:64:34:d1:61:
27:20:65:46:f8:86:13:26:13:17:d3:9a:3b:02:28:
7f:4b:39:0b:c8:a3:ec:ee:78:bd:43:47:0e:d8:ac:
15:11:80:14:64:18:7b:ea:2f:2c:78:00:4d:1a:16:
46:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CB:74:EA:FA:A9:3A:03:A6:67:6B:F2:58:D6:4F:F4:8F:BD:22:F2
X509v3 Authority Key Identifier:
keyid:F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:c1:6b:ea:bc:b3:db:0b:3e:1b:83:0e:0d:28:aa:bb:11:23:
3a:e1:93:08:4a:5e:7f:ed:40:c0:8d:65:2b:d5:61:7c:87:23:
11:0e:f1:fe:1c:f1:4d:3b:36:aa:2c:7f:55:36:16:23:84:43:
11:9b:56:a0:ea:f7:39:7b:ee:86:98:62:ef:a5:12:4d:b6:a5:
bc:a8:eb:b1:bf:eb:49:48:35:2e:af:b1:5f:c9:18:84:da:aa:
a1:c4:de:c5:b0:a3:b0:e9:7d:cc:f5:a9:91:84:05:38:e3:e9:
6a:68:a7:71:f5:7f:f0:69:52:ee:c0:d8:14:b2:41:87:e2:98:
0d:9e:ac:7f:e1:e6:99:65:34:e2:5f:d5:0c:83:ae:22:96:58:
f2:2f:a4:3d:4b:c9:63:01:fa:02:d1:1e:b8:39:cd:e1:59:c1:
52:16:a1:dd:84:d5:3c:ca:77:db:96:75:98:1e:3c:c1:ed:e9:
0a:2b:f1:53:c3:f3:4a:0f:53:d9:cf:f8:9d:e8:2d:45:c8:99:
10:cd:9b:2f:a3:df:57:88:31:66:e7:64:ea:4f:99:65:8e:0c:
9c:76:14:92:36:e7:db:ee:21:f5:b5:64:69:32:28:7f:ea:9a:
c1:90:15:f9:5e:27:89:ca:4f:16:04:40:f1:3d:0d:0b:f7:ad:
c8:7d:0b:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDC+85cVEIfqYhkwLv+EiLtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1N2U0YjFjOTU4NzcyNzEzM2M3ZWUwMGJiYmE4ZWM1NmVh
ZTY0MWQwHhcNMjYwOTIxMDgwMTE3WhcNMjYwOTIyMDgwMTE3WjAzMTEwLwYDVQQD
EyhhMmNiNzRlYWZhYTkzYTAzYTY2NzZiZjI1OGQ2NGZmNDhmYmQyMmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZhVztdadrAWShkEg3l/7AToiVv/
Htc4enpOR4NFvgNFkTIUBv11coxQx10WKsm7KiUUQNFQxcUCI6ZrWw3WDgdz4zuQ
7nu/qFLB1olhhr9VYF8PHbeeVZlC18/kC3LuNWk+CmpPKmSda4r9OronhM9GjXch
8arFsi7F4AROonAJpm206VJVDzV4hs0VU5GrHi9hOm6jC0FKjF9/ai7vIXRqk+4U
M5aG62sg2fPmmQUW6Yz0y4z7zGiArlxIJwU9L+pY90jPh9uOV2v7mGQ00WEnIGVG
+IYTJhMX05o7Aih/SzkLyKPs7ni9Q0cO2KwVEYAUZBh76i8seABNGhZG6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLLdOr6qToDpmdr8ljWT/SPvSLyMB8GA1UdIwQY
MBaAFPV+SxyVh3JxM8fuALu6jsVurmQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVg1TEhKV0hjbkV6eC00QXU3cU94VzZ1WkIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85ZTkxMTktZTVlNi00MDRhLWI1OGEt
MTg4YjkxYTllOTkwLzEvOVg1TEhKV0hjbkV6eC00QXU3cU94VzZ1WkIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85ZTkxMTktZTVlNi00MDRhLWI1OGEtMTg4YjkxYTllOTkw
LzEvOVg1TEhKV0hjbkV6eC00QXU3cU94VzZ1WkIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAysFr6ryz
2ws+G4MODSiquxEjOuGTCEpef+1AwI1lK9VhfIcjEQ7x/hzxTTs2qix/VTYWI4RD
EZtWoOr3OXvuhphi76USTbalvKjrsb/rSUg1Lq+xX8kYhNqqocTexbCjsOl9zPWp
kYQFOOPpamincfV/8GlS7sDYFLJBh+KYDZ6sf+HmmWU04l/VDIOuIpZY8i+kPUvJ
YwH6AtEeuDnN4VnBUhah3YTVPMp325Z1mB48we3pCivxU8PzSg9T2c/4negtRciZ
EM2bL6PfV4gxZudk6k+ZZY4MnHYUkjbn2+4h9bVkaTIof+qawZAV+V4nicpPFgRA
8T0NC/etyH0LXQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:20:31 2026 by rpki-client