Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
File: 9yR1sGTeionxUD6u_H1yrczzihY.mft (raw, json)
Hash identifier: 8Mdb9dmE9IqY6ua5VWwI7aNyqDtUMOb7mJlrvvh8og4=
Subject key identifier: B5:D1:C1:D5:05:38:1F:EF:45:36:45:D1:35:E2:14:86:93:5A:8C:C5
Authority key identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
Certificate issuer: /CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Certificate serial: 01A13D13BDA5A97818885362722C8296ABA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
Manifest number: 1A9F
Signing time: Thu 15 Oct 2026 01:01:06 +0000
Manifest this update: Thu 15 Oct 2026 01:01:06 +0000
Manifest next update: Fri 16 Oct 2026 01:01:06 +0000
Files and hashes: 1: 9yR1sGTeionxUD6u_H1yrczzihY.crl (hash: UhAEed1mqusVrfYFdQp+1Dtt0sWb4aFe1/Ex16GtWbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:bd:a5:a9:78:18:88:53:62:72:2c:82:96:ab:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Validity
Not Before: Oct 15 01:01:06 2026 GMT
Not After : Oct 16 01:01:06 2026 GMT
Subject: CN=b5d1c1d505381fef453645d135e21486935a8cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c6:a3:f5:58:d7:8d:86:f5:e2:a9:e9:38:e1:
29:24:eb:e5:e7:9c:0b:87:97:65:e7:15:30:08:b4:
24:c9:0b:a3:e7:b5:2c:85:6f:14:eb:9b:f5:10:ca:
e3:c3:e5:83:39:df:1f:20:28:c3:0b:76:9d:5f:3f:
e4:2c:82:8a:59:c6:96:e4:c3:de:ab:3e:57:68:3f:
8c:7c:3c:6a:2e:a5:cc:14:83:36:0b:78:73:cb:9b:
95:f5:d0:11:bb:be:88:ff:08:e3:d8:a1:74:e6:40:
3e:25:c7:c3:b0:c7:2d:e8:a9:4a:7b:6f:b4:a7:b5:
3b:be:74:c5:4f:ac:bd:1a:a3:0d:13:b8:03:59:b7:
e3:e1:e9:f2:c4:a6:22:d6:39:0c:6a:a5:96:a2:89:
06:2a:07:62:05:07:b4:7f:2e:b5:a9:17:ea:12:d1:
25:d9:93:0b:83:bd:a5:35:49:10:af:11:f9:6a:9e:
8c:1c:e1:6f:7c:37:77:8d:90:8e:e2:32:e0:7f:74:
bd:72:1f:81:1f:37:ac:e6:c6:f0:46:a2:a2:5c:fa:
10:b3:63:8e:36:f1:95:a8:0f:b6:80:c7:6a:1b:0e:
57:db:e8:cb:2a:11:de:b5:bb:ad:5a:c2:ba:b3:9d:
9d:e3:c6:51:11:48:13:68:e1:62:9a:38:4c:87:f7:
83:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D1:C1:D5:05:38:1F:EF:45:36:45:D1:35:E2:14:86:93:5A:8C:C5
X509v3 Authority Key Identifier:
keyid:F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:af:cd:24:93:85:49:9c:5e:5e:ef:5c:e4:2e:c4:b6:c9:a6:
6e:2f:25:ef:ae:04:76:3a:00:36:d8:59:9a:eb:f5:cc:18:ae:
78:ed:f2:4c:52:f2:c2:d5:17:1f:f0:69:5e:cd:a1:58:53:5c:
ef:11:fb:6e:ab:57:81:2b:80:96:af:6a:2a:1f:10:63:69:6c:
c9:f4:70:dc:f9:a9:5d:22:42:d9:41:4e:6c:79:ec:36:f8:74:
87:45:cb:bd:d8:e8:cf:b7:71:92:cf:eb:33:4e:99:33:26:92:
69:c3:9b:a2:ac:21:49:41:e3:a5:01:b1:a4:da:01:3d:99:1f:
0d:5c:d1:13:2a:03:8c:61:b6:30:07:1e:14:d9:ff:4e:7f:a6:
16:f9:ac:bf:03:0e:6a:ff:49:ea:b0:24:56:32:2d:ec:94:29:
34:09:25:db:fc:62:68:cf:c8:83:4c:8d:7e:90:1a:39:ab:98:
03:32:e6:94:91:e6:67:89:75:72:3b:a9:ae:24:aa:df:c0:3d:
57:e9:83:5d:98:60:19:78:84:20:25:5a:c6:79:82:b6:c2:45:
78:cd:34:57:be:3a:2e:d3:a6:c1:3a:2a:52:a0:28:f7:e1:e2:
c0:8d:c9:24:c0:88:b6:d8:b4:13:7f:d1:14:ed:e4:17:3e:44:
50:d2:76:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9E72lqXgYiFNiciyClqupMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MjQ3NWIwNjRkZThhODlmMTUwM2VhZWZjN2Q3MmFkY2Nm
MzhhMTYwHhcNMjYxMDE1MDEwMTA2WhcNMjYxMDE2MDEwMTA2WjAzMTEwLwYDVQQD
EyhiNWQxYzFkNTA1MzgxZmVmNDUzNjQ1ZDEzNWUyMTQ4NjkzNWE4Y2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8aj9VjXjYb14qnpOOEpJOvl55wL
h5dl5xUwCLQkyQuj57UshW8U65v1EMrjw+WDOd8fICjDC3adXz/kLIKKWcaW5MPe
qz5XaD+MfDxqLqXMFIM2C3hzy5uV9dARu76I/wjj2KF05kA+JcfDsMct6KlKe2+0
p7U7vnTFT6y9GqMNE7gDWbfj4enyxKYi1jkMaqWWookGKgdiBQe0fy61qRfqEtEl
2ZMLg72lNUkQrxH5ap6MHOFvfDd3jZCO4jLgf3S9ch+BHzes5sbwRqKiXPoQs2OO
NvGVqA+2gMdqGw5X2+jLKhHetbutWsK6s52d48ZREUgTaOFimjhMh/eDTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXRwdUFOB/vRTZF0TXiFIaTWozFMB8GA1UdIwQY
MBaAFPckdbBk3oqJ8VA+rvx9cq3M84oWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85MGYzNmUtZDM4Zi00ZWU5LWFjZWIt
MjgzMjBhNWMwNzdiLzEvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy85MGYzNmUtZDM4Zi00ZWU5LWFjZWItMjgzMjBhNWMwNzdi
LzEvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwa/NJJOF
SZxeXu9c5C7Etsmmbi8l764EdjoANthZmuv1zBiueO3yTFLywtUXH/BpXs2hWFNc
7xH7bqtXgSuAlq9qKh8QY2lsyfRw3PmpXSJC2UFObHnsNvh0h0XLvdjoz7dxks/r
M06ZMyaSacOboqwhSUHjpQGxpNoBPZkfDVzREyoDjGG2MAceFNn/Tn+mFvmsvwMO
av9J6rAkVjIt7JQpNAkl2/xiaM/Ig0yNfpAaOauYAzLmlJHmZ4l1cjupriSq38A9
V+mDXZhgGXiEICVaxnmCtsJFeM00V746LtOmwToqUqAo9+HiwI3JJMCItti0E3/R
FO3kFz5EUNJ2nQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:53 2026 by rpki-client