Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
File: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft (raw, json)
Hash identifier: GqvAzCidzuWfVmqDVWhxzVt7ZxiKs8YOtzd40ZL71hA=
Subject key identifier: 65:09:4E:49:CD:D6:13:D7:8B:F9:7E:63:2B:57:6A:E5:63:63:31:AF
Authority key identifier: F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
Certificate issuer: /CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Certificate serial: 019EC14885498EFD5DA3182DEA662860DC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
Manifest number: 152C
Signing time: Sat 13 Jun 2026 14:00:15 +0000
Manifest this update: Sat 13 Jun 2026 14:00:15 +0000
Manifest next update: Sun 14 Jun 2026 14:00:15 +0000
Files and hashes: 1: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl (hash: cBBK4L6qp9nbftoOvMQ7HB9mGc/GBhH0y89j8kqIUXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:85:49:8e:fd:5d:a3:18:2d:ea:66:28:60:dc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Validity
Not Before: Jun 13 14:00:15 2026 GMT
Not After : Jun 14 14:00:15 2026 GMT
Subject: CN=65094e49cdd613d78bf97e632b576ae5636331af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:76:ec:2a:cc:c6:5f:b4:b4:6b:97:39:72:57:
38:a8:d3:9e:d4:12:4e:dd:6b:cd:c5:c3:0b:55:fe:
51:52:a1:6a:70:62:6e:d4:45:3b:80:82:cc:cc:a2:
eb:9a:9d:e8:21:b4:e8:12:5a:dd:0b:79:bb:ca:22:
89:8a:35:ba:df:84:58:94:79:b0:4e:c4:96:ff:57:
df:8c:98:eb:44:c9:e8:82:1f:e2:13:ba:54:33:f7:
99:51:60:ca:1d:81:bd:fe:26:4c:a7:70:f5:66:da:
2d:9e:92:2b:8c:fc:18:68:4a:a5:fe:e4:e7:6b:4c:
06:fc:03:44:b5:27:e7:22:3a:8a:77:8e:0f:7c:72:
5d:7f:db:9a:d9:f5:90:4a:e7:8e:c4:b0:46:28:01:
17:b3:b5:09:81:46:96:86:38:79:f0:02:e5:7a:40:
01:30:3a:97:f8:d6:d5:82:a9:bf:d1:c1:62:14:64:
10:30:63:5a:59:8d:39:2d:19:f0:3c:cc:0f:aa:fb:
49:4f:7b:d9:97:a2:39:02:f1:70:79:5b:cf:9a:f1:
18:40:5a:86:24:2d:f5:19:c6:b4:bc:e2:18:2a:f5:
96:86:5a:80:89:5c:dc:b8:8a:88:bc:f5:c3:21:38:
c6:12:5a:27:e1:52:34:1e:d3:c4:3c:88:45:d8:c3:
66:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:09:4E:49:CD:D6:13:D7:8B:F9:7E:63:2B:57:6A:E5:63:63:31:AF
X509v3 Authority Key Identifier:
keyid:F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:5e:90:55:18:1e:25:eb:44:81:33:75:b6:63:93:c9:69:1b:
eb:3d:11:dc:c4:68:f0:29:5f:6f:79:8c:2c:98:4b:57:a8:70:
f1:43:85:d0:bc:74:70:ee:3b:5e:d7:3b:8d:2c:aa:d3:06:27:
1c:a7:99:a4:34:c4:da:0d:d2:83:ed:3e:ce:ec:9e:e6:04:42:
cb:f9:31:c0:25:30:94:cb:a7:0c:4f:7a:28:82:12:a4:46:c3:
72:a6:fd:52:b7:3b:b1:b9:0c:03:fb:ad:60:a1:70:5d:ac:db:
dc:11:7f:fb:08:25:c8:00:e7:6e:df:6f:86:69:b5:27:52:41:
2f:9f:80:95:c6:62:3f:f2:44:81:55:42:dc:c4:1a:6a:2b:90:
f9:de:ad:c6:3e:cc:fa:bf:31:88:66:ac:e0:ce:7e:a2:23:9a:
75:25:36:e2:f0:6c:a3:43:aa:04:94:a1:25:6f:b9:ab:78:94:
0a:ad:c3:35:d0:e4:b1:89:f7:dc:1b:8f:29:3b:45:1b:24:7d:
28:38:35:1c:68:3a:f8:70:18:43:42:65:09:e1:f1:25:3b:fb:
ef:16:b9:8f:6c:20:ef:b9:64:1d:32:fe:71:2a:ee:b8:6a:1b:
a4:f7:de:21:cb:f8:a7:6a:fe:b7:90:0d:dc:82:66:52:e9:e8:
0b:8e:a7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:03:09 2026 by rpki-client