Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
File: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft (raw, json)
Hash identifier: MY9WJPv26Ke5Aka7RnHQQwsWv9m+fxtWs77VQM89/3A=
Subject key identifier: A1:94:6B:A1:E9:80:AE:EB:B7:D9:A6:D3:25:CA:C7:96:65:33:E6:62
Authority key identifier: F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
Certificate issuer: /CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Certificate serial: 01A000258E987EADB1412C0BEDE5E640AFC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
Manifest number: 0981
Signing time: Fri 14 Aug 2026 12:00:56 +0000
Manifest this update: Fri 14 Aug 2026 12:00:56 +0000
Manifest next update: Sat 15 Aug 2026 12:00:56 +0000
Files and hashes: 1: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl (hash: YjIh2Mmn47Xr68/7g6QSa2CN6vT3HxjAHT0KXIz2tz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:8e:98:7e:ad:b1:41:2c:0b:ed:e5:e6:40:af:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Validity
Not Before: Aug 14 12:00:56 2026 GMT
Not After : Aug 15 12:00:56 2026 GMT
Subject: CN=a1946ba1e980aeebb7d9a6d325cac7966533e662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:de:e5:72:21:60:a5:49:84:bb:a2:51:fe:
af:ac:c5:9b:3f:68:ce:c4:f5:9b:6f:d5:a7:fa:cf:
99:8c:65:6e:2a:bb:96:04:09:65:24:b3:6f:8e:c1:
e9:ca:df:9a:9b:3e:a5:85:e0:db:d6:35:45:b4:d1:
82:42:cc:1c:89:4c:00:3d:1b:c6:96:0a:ef:be:32:
44:4b:d3:05:7c:5c:21:24:39:df:2f:c6:2c:8e:c2:
a1:59:66:ad:a4:93:43:b7:6b:65:03:91:32:f4:06:
4a:f6:99:2f:13:8c:f7:42:bf:f2:12:8a:4f:13:c3:
6c:d2:3d:c0:4d:89:e4:09:7e:45:c2:a6:47:2c:55:
b6:96:44:db:34:52:c2:1b:a6:3d:5f:c0:5b:a2:4d:
47:16:cb:84:05:2f:5c:e4:48:72:ac:b5:75:18:7c:
67:e3:c6:3d:b1:82:b7:94:f3:9f:99:3c:1b:b2:92:
f4:47:ca:9d:29:9c:4b:3d:b5:24:12:e4:f2:ce:22:
92:f3:de:64:23:74:58:09:fa:50:8f:9d:c9:a6:a8:
6a:36:de:a6:e8:7e:27:ea:c0:c2:e0:e9:e2:57:69:
5d:68:ac:aa:9e:88:a7:67:63:74:c7:bb:13:d8:e8:
d2:28:94:20:8f:58:4c:b9:7b:48:02:80:7d:57:3c:
e9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:94:6B:A1:E9:80:AE:EB:B7:D9:A6:D3:25:CA:C7:96:65:33:E6:62
X509v3 Authority Key Identifier:
keyid:F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:32:ed:14:f7:1d:de:0f:6b:7d:b2:82:f0:31:a3:05:05:32:
73:9e:a2:39:2f:ff:9b:ff:90:72:c9:2a:40:d7:1f:8a:75:29:
35:25:d8:9f:30:06:0c:57:50:81:b3:23:0c:7a:79:6d:88:65:
19:00:1f:7d:3c:df:60:e6:1e:bc:1d:e9:53:e3:6d:2a:34:fa:
aa:91:a7:d3:d8:9a:ee:c0:d9:f7:7d:de:30:bc:aa:51:a7:d6:
a3:b9:b9:a6:50:56:03:bd:bb:0c:b7:54:a6:22:c3:62:39:74:
0d:23:84:a7:00:87:0d:55:c1:ac:c9:f7:b6:bf:11:cc:9d:59:
53:3b:ad:e7:cf:73:54:62:ff:0e:12:3d:38:9d:4d:82:63:4e:
15:f3:fd:f4:08:46:af:95:cb:a1:ab:58:57:04:31:4a:31:03:
b7:3a:0a:96:86:4b:6c:f1:73:b4:9d:b3:55:7e:e5:9b:73:d1:
1a:6b:e0:b7:b5:9c:89:49:93:1c:10:0d:31:d8:41:ca:1f:9f:
75:61:da:97:3e:dd:04:65:d4:3a:38:87:ac:8f:51:5f:4a:d7:
6f:9e:cd:68:3c:0b:1e:c8:13:bb:91:e7:9f:40:0d:77:14:d3:
c8:ad:7a:28:4b:e1:fc:5b:62:93:54:75:0c:cb:f7:28:ef:a3:
46:6d:a0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:05 2026 by rpki-client