Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
File: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft (raw, json)
Hash identifier: 3h227mqqVTL3+SJuU3UdW+mIDai8vALYmx9F0WV+NXo=
Subject key identifier: CF:1B:54:F2:29:2B:8C:0F:65:C5:FD:87:A2:94:1C:E1:A3:12:87:63
Authority key identifier: F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
Certificate issuer: /CN=f57766f0726cff8618af968258f5bb229e937c6e
Certificate serial: 01A13F02E4D22D28BEE994BC44AF5D6C74CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
Manifest number: 11D2
Signing time: Thu 15 Oct 2026 10:01:56 +0000
Manifest this update: Thu 15 Oct 2026 10:01:56 +0000
Manifest next update: Fri 16 Oct 2026 10:01:56 +0000
Files and hashes: 1: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl (hash: Aeidm/wmqrSWJKvQvHxS6r7RFtInqIrDKrTZ7tnXTro=)
2: ylsyREe54U569Cbya5kHu3je-G4.asa (hash: 6/SDvz7I7Rk9Q9eges7LMoyhQg8zkiVuxvYbU53cDDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:e4:d2:2d:28:be:e9:94:bc:44:af:5d:6c:74:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57766f0726cff8618af968258f5bb229e937c6e
Validity
Not Before: Oct 15 10:01:56 2026 GMT
Not After : Oct 16 10:01:56 2026 GMT
Subject: CN=cf1b54f2292b8c0f65c5fd87a2941ce1a3128763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:7c:6f:f0:2a:9a:40:d6:11:42:4d:b4:f9:
f4:25:e5:25:3d:11:ae:ff:51:a6:5d:86:36:3a:ae:
46:df:7e:50:c1:de:ef:08:c0:7d:2b:c5:b9:a5:6c:
88:ea:21:e3:3f:57:81:9c:f4:ce:aa:8a:3b:5f:b1:
9f:32:07:23:68:79:3a:26:d0:14:85:0d:ee:b8:a7:
cf:e8:a0:33:94:b1:69:e2:b2:b6:5d:21:43:3d:36:
98:ed:9e:47:8a:fd:78:ef:66:f5:83:86:68:67:a9:
49:a9:fd:d5:db:33:89:ac:c6:29:db:3d:cf:ee:88:
21:5d:cb:31:1e:8e:0d:97:44:1d:20:a4:e8:5e:9b:
24:20:e8:ed:78:be:c5:d5:5a:5d:aa:42:84:1c:28:
ba:d9:be:de:b3:f5:b0:f4:32:25:a5:05:90:17:7e:
ad:8c:98:fc:63:7a:85:4c:64:ed:a7:3e:ae:3e:05:
72:60:d1:0a:24:0f:2b:73:13:aa:cc:41:5e:0a:97:
5c:be:44:d1:5e:de:18:5a:59:2f:dd:82:04:c8:ae:
fe:37:ed:73:42:89:2f:f2:43:d1:27:8f:e6:88:3a:
c1:a9:66:0b:65:73:f6:f7:aa:d5:09:55:b3:ac:85:
06:bd:52:2b:bb:e5:63:9d:e1:0e:d5:ed:f2:8a:c0:
de:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1B:54:F2:29:2B:8C:0F:65:C5:FD:87:A2:94:1C:E1:A3:12:87:63
X509v3 Authority Key Identifier:
keyid:F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b5:69:da:2a:49:3c:01:53:ba:f7:eb:70:56:b5:34:59:97:
e4:5e:80:a4:cb:8a:97:a4:1a:45:1e:b9:fa:b7:79:74:a7:80:
9e:24:15:7c:a3:df:01:02:bb:1e:0f:1a:5d:ee:7d:19:7b:ad:
83:0b:09:96:55:d8:76:96:93:28:21:d3:6f:b5:25:f0:9f:bb:
4a:b6:73:26:67:b3:33:84:50:b5:92:ec:60:45:ed:b3:d8:e8:
70:21:38:b3:5d:9e:15:59:34:d5:64:0c:1f:9e:07:6f:84:c8:
7f:95:94:59:c5:ab:3a:3d:f0:8e:b5:40:3a:b3:99:3d:f0:71:
c9:57:f9:b9:e1:7c:34:49:b9:86:20:98:08:1a:35:a4:1c:f2:
3c:31:cb:a7:f6:bc:e8:32:cc:6e:24:f7:d6:31:1f:a3:c8:ff:
d6:43:59:7d:08:ef:dd:8c:6c:93:86:ca:f5:31:39:10:81:52:
2d:07:9e:21:a4:fb:f6:e0:b1:72:96:99:bf:8f:53:2d:0f:8b:
1f:b1:5e:b0:c0:c1:4b:48:54:64:fb:8b:67:a1:69:ae:10:3d:
16:72:d4:57:62:5c:c4:42:d4:36:6c:0f:56:8b:49:a3:d5:32:
7e:40:99:b5:85:24:6d:33:55:31:f8:31:b3:f2:e2:17:8c:86:
bc:c6:85:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:18:52 2026 by rpki-client