Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
File: 9rES1L7bpvNYUoqDcUG3SwkphZM.mft (raw, json)
Hash identifier: PGwzxf/cVWT9Diu4kZgAN0LBKF4haGjfeZaHK7R6ttA=
Subject key identifier: 61:B2:76:B2:08:0B:8D:63:20:A1:5B:04:32:22:78:55:F0:79:F2:E4
Authority key identifier: F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
Certificate issuer: /CN=f6b112d4bedba6f358528a837141b74b09298593
Certificate serial: 01A0024B2D596639A26415412CE5B3071CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
Manifest number: 1950
Signing time: Fri 14 Aug 2026 22:01:16 +0000
Manifest this update: Fri 14 Aug 2026 22:01:16 +0000
Manifest next update: Sat 15 Aug 2026 22:01:16 +0000
Files and hashes: 1: 9rES1L7bpvNYUoqDcUG3SwkphZM.crl (hash: 4nWBIkqA8uxjERRHixgzpfQ3C/FDzIvjx/HDaeHvd6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:2d:59:66:39:a2:64:15:41:2c:e5:b3:07:1c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b112d4bedba6f358528a837141b74b09298593
Validity
Not Before: Aug 14 22:01:16 2026 GMT
Not After : Aug 15 22:01:16 2026 GMT
Subject: CN=61b276b2080b8d6320a15b0432227855f079f2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ea:ff:a0:4f:86:bc:3d:f6:1c:28:6c:58:da:
e6:d1:fc:3a:7d:86:79:d1:d5:64:2f:40:b8:5e:40:
64:12:26:e8:48:de:52:ca:8f:e7:9d:81:1f:49:0f:
aa:d1:e9:06:22:ad:d0:60:23:18:23:cb:52:e9:40:
11:c5:f7:f9:d8:cc:6a:51:7a:aa:ae:1a:2e:4c:a9:
d3:ca:fd:b5:8b:5f:b0:8f:d6:21:98:18:b9:74:1b:
09:a0:10:7a:b9:f6:e2:1a:1d:ab:3d:f0:05:83:08:
fa:f9:2c:54:34:ef:54:e0:e5:68:a1:ef:05:50:39:
a6:22:b3:92:99:0f:72:1e:01:54:06:97:cf:9c:40:
38:d3:80:98:7f:68:6c:3c:e8:c1:e8:40:86:4d:ba:
6a:02:89:dc:aa:b5:7a:b1:96:c6:e0:90:a9:81:1a:
45:0a:22:fc:37:e4:a1:95:bb:3a:c0:cb:66:cc:c2:
49:fd:9a:0c:93:b6:d2:eb:90:b5:31:68:bd:da:04:
e1:06:0c:90:71:7b:ce:9e:e9:fd:da:b0:c6:be:79:
23:c9:e4:72:11:37:6b:e7:74:0e:3e:c5:d8:32:b5:
e2:49:b3:3a:72:d3:6b:d9:b9:19:92:67:5e:6e:48:
e0:1a:1c:1a:4c:20:24:79:6e:93:96:c0:65:16:50:
16:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B2:76:B2:08:0B:8D:63:20:A1:5B:04:32:22:78:55:F0:79:F2:E4
X509v3 Authority Key Identifier:
keyid:F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:08:54:ff:fc:33:ce:0e:85:df:5d:bf:25:34:d9:4e:5b:46:
c5:e8:21:5c:46:4c:c9:37:fc:53:b4:fa:45:ce:1a:be:6e:fa:
3f:27:9a:16:dc:c1:11:9a:f6:82:25:bf:88:e9:60:cf:77:0b:
25:d6:8f:6f:45:cf:83:fc:c7:65:cc:97:59:3b:07:ca:c9:7c:
73:a4:af:8b:f1:65:66:c2:1a:1f:11:bf:44:50:a5:77:c9:32:
4b:d3:25:92:d7:16:2d:fd:41:6d:2b:e1:0a:8d:c7:53:93:09:
b3:29:b2:ec:f6:7f:a5:c6:3a:45:79:f0:d3:fd:db:09:68:5b:
d5:b2:f2:20:ef:34:c2:75:94:e2:3a:84:bd:d9:e9:11:d6:bb:
be:e4:53:5e:ac:af:b7:06:b6:5f:cb:9f:07:da:bd:a7:ac:33:
99:b4:6c:1d:8f:cf:d5:3f:f4:67:53:60:8c:4c:c6:1b:16:d0:
35:dd:ec:fa:2d:78:da:1d:72:2c:6b:40:da:5b:3a:13:fb:95:
33:52:ea:b2:c0:44:92:e0:11:64:4d:b4:93:d5:57:3c:6b:5a:
2c:9b:3a:59:4e:fa:22:f7:c7:4d:02:01:90:4b:03:2c:e5:2c:
91:9a:14:da:de:c1:40:80:7c:4b:55:43:54:86:25:eb:f6:40:
ae:06:19:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:09 2026 by rpki-client