Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
File: 249r9UNKqjLT5fETsAxbsUAvZ_Y.mft (raw, json)
Hash identifier: /6CxiLxjoGh07HP8KDupQdU1pvtnrVr4YCAQmcjBPM0=
Subject key identifier: 9D:18:17:9D:22:2D:17:B2:9B:F2:4A:D5:98:41:D4:8E:8B:C0:62:95
Authority key identifier: DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6
Certificate issuer: /CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6
Certificate serial: 01A0024B267EB57D9CBC7FE58C44A26FCAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
Manifest number: 0AF5
Signing time: Fri 14 Aug 2026 22:01:14 +0000
Manifest this update: Fri 14 Aug 2026 22:01:14 +0000
Manifest next update: Sat 15 Aug 2026 22:01:14 +0000
Files and hashes: 1: 249r9UNKqjLT5fETsAxbsUAvZ_Y.crl (hash: p+OEOrv4k38q0W8BYttB7UTedMtZMcqCEsDHAwe3q1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:26:7e:b5:7d:9c:bc:7f:e5:8c:44:a2:6f:ca:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6
Validity
Not Before: Aug 14 22:01:14 2026 GMT
Not After : Aug 15 22:01:14 2026 GMT
Subject: CN=9d18179d222d17b29bf24ad59841d48e8bc06295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:40:0f:af:7e:0c:86:dd:09:fc:20:c8:9a:
a8:c5:d8:5c:ef:82:50:cb:34:6d:05:fa:28:83:f4:
7a:e7:03:55:76:5e:9c:c0:88:eb:62:02:12:21:2e:
43:a5:a9:cd:f9:8b:be:e2:b3:8d:d4:38:d3:60:24:
0b:5e:78:a7:d9:0f:8c:24:63:77:a5:33:fc:a9:fd:
b1:90:15:f4:c1:53:c2:48:ee:f3:e8:21:22:70:9f:
4b:58:7f:22:97:2f:31:ea:2c:f2:e7:ab:89:a0:b0:
df:6e:19:75:b5:9b:b1:46:99:0a:cf:49:95:6f:b3:
f1:03:e9:9a:e9:74:f3:53:9a:ed:66:91:98:b8:40:
ca:e0:c1:a3:03:b8:04:cc:ce:b3:fd:42:b5:18:98:
43:4b:27:29:b9:6b:76:e0:ef:f8:01:eb:fd:f6:82:
71:22:bf:63:76:7f:ef:ba:72:98:5d:ab:6c:c1:9e:
34:59:00:eb:fb:a8:d2:c3:4a:40:61:32:16:d0:cd:
01:99:76:c1:3a:d0:a9:8a:58:70:6f:36:9f:8b:35:
e8:10:f6:fd:da:ed:e2:bc:07:ce:b0:58:92:cc:d0:
97:ae:80:eb:72:8e:4e:16:d4:8c:d8:e4:b2:c0:20:
70:1a:2e:8d:75:76:b6:d1:a1:b7:cd:0c:fd:95:02:
3d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:18:17:9D:22:2D:17:B2:9B:F2:4A:D5:98:41:D4:8E:8B:C0:62:95
X509v3 Authority Key Identifier:
keyid:DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:cd:04:4a:33:8a:48:e1:4d:d0:29:7e:e9:d3:aa:23:ff:70:
7b:78:13:75:bf:e3:de:a0:7b:5e:1d:9a:cf:3f:ed:f4:ec:82:
96:42:b8:e2:9f:1c:f7:89:61:79:8f:c4:b6:62:e8:e9:d6:57:
d8:5c:ef:87:6c:d3:fe:07:de:ca:99:bd:66:f7:e5:04:f8:e2:
6f:2a:37:6e:12:1f:06:95:c1:4c:7e:76:4c:81:f9:72:92:7c:
74:63:cc:bc:d7:87:fd:2a:7c:02:99:2f:5b:6d:6e:5b:21:96:
d5:59:3f:8c:08:6e:d4:b4:e2:9e:94:4d:a1:f8:da:9e:8a:3d:
56:f4:d4:6a:ef:3a:48:41:e2:36:ee:ce:b8:8f:b7:31:45:0a:
bd:2a:ec:a9:5b:93:a8:b2:89:75:93:54:41:8f:19:c2:56:70:
64:81:6c:f0:4d:d7:58:c5:ff:fa:2e:17:ef:c9:8c:c8:19:1b:
42:6f:61:8c:df:d3:50:69:66:f3:80:7f:9c:08:d4:ff:78:0d:
1f:0d:76:6e:4b:9d:ee:2b:06:9e:46:cd:94:93:6a:21:13:76:
5c:5c:2f:7a:9d:2f:d7:0f:5d:24:35:4c:9d:e5:84:68:1b:14:
83:28:a5:34:f4:e0:1b:4f:0c:c5:2b:24:d9:64:3f:2b:e7:52:
b3:e5:2e:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACSyZ+tX2cvH/ljESib8rwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOGY2YmY1NDM0YWFhMzJkM2U1ZjExM2IwMGM1YmIxNDAy
ZjY3ZjYwHhcNMjYwODE0MjIwMTE0WhcNMjYwODE1MjIwMTE0WjAzMTEwLwYDVQQD
Eyg5ZDE4MTc5ZDIyMmQxN2IyOWJmMjRhZDU5ODQxZDQ4ZThiYzA2Mjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEpAD69+DIbdCfwgyJqoxdhc74JQ
yzRtBfoog/R65wNVdl6cwIjrYgISIS5DpanN+Yu+4rON1DjTYCQLXnin2Q+MJGN3
pTP8qf2xkBX0wVPCSO7z6CEicJ9LWH8ily8x6izy56uJoLDfbhl1tZuxRpkKz0mV
b7PxA+ma6XTzU5rtZpGYuEDK4MGjA7gEzM6z/UK1GJhDSycpuWt24O/4Aev99oJx
Ir9jdn/vunKYXatswZ40WQDr+6jSw0pAYTIW0M0BmXbBOtCpilhwbzafizXoEPb9
2u3ivAfOsFiSzNCXroDrco5OFtSM2OSywCBwGi6NdXa20aG3zQz9lQI9VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0YF50iLReym/JK1ZhB1I6LwGKVMB8GA1UdIwQY
MBaAFNuPa/VDSqoy0+XxE7AMW7FAL2f2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjQ5cjlVTktxakxUNWZFVHNBeGJzVUF2Wl9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85ZjMzOTQtNmI3Yi00Y2EwLTllMjEt
ZDk3OTY3OTRjNjFjLzEvMjQ5cjlVTktxakxUNWZFVHNBeGJzVUF2Wl9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS85ZjMzOTQtNmI3Yi00Y2EwLTllMjEtZDk3OTY3OTRjNjFj
LzEvMjQ5cjlVTktxakxUNWZFVHNBeGJzVUF2Wl9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAps0ESjOK
SOFN0Cl+6dOqI/9we3gTdb/j3qB7Xh2azz/t9OyClkK44p8c94lheY/EtmLo6dZX
2Fzvh2zT/gfeypm9ZvflBPjibyo3bhIfBpXBTH52TIH5cpJ8dGPMvNeH/Sp8Apkv
W21uWyGW1Vk/jAhu1LTinpRNofjanoo9VvTUau86SEHiNu7OuI+3MUUKvSrsqVuT
qLKJdZNUQY8ZwlZwZIFs8E3XWMX/+i4X78mMyBkbQm9hjN/TUGlm84B/nAjU/3gN
Hw12bkud7isGnkbNlJNqIRN2XFwvep0v1w9dJDVMneWEaBsUgyilNPTgG08MxSsk
2WQ/K+dSs+UuMw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:21 2026 by rpki-client