Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
File: 9URgWW1tUyQB3jE9-JA2blN21gI.mft (raw, json)
Hash identifier: X7g+GbcTX9Ui7481nCLa+UqBaV5BjtNmC++yuoEXTd4=
Subject key identifier: 0C:9F:24:4E:0E:73:38:13:E7:65:58:DF:E4:C0:F7:C6:4C:D0:60:76
Authority key identifier: F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
Certificate issuer: /CN=f54460596d6d532401de313df890366e5376d602
Certificate serial: 019F17C280F525EAE9EF6EE3F4CC567EFDCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
Manifest number: 0959
Signing time: Tue 30 Jun 2026 09:00:50 +0000
Manifest this update: Tue 30 Jun 2026 09:00:50 +0000
Manifest next update: Wed 01 Jul 2026 09:00:50 +0000
Files and hashes: 1: 9URgWW1tUyQB3jE9-JA2blN21gI.crl (hash: c4gzD9AVs9cfYUtqg+iQEapsAg2dKzvtUMLznIHRphE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:80:f5:25:ea:e9:ef:6e:e3:f4:cc:56:7e:fd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f54460596d6d532401de313df890366e5376d602
Validity
Not Before: Jun 30 09:00:50 2026 GMT
Not After : Jul 1 09:00:50 2026 GMT
Subject: CN=0c9f244e0e733813e76558dfe4c0f7c64cd06076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:7d:ef:f7:bb:20:2e:1b:b4:2c:55:da:91:
57:6a:61:10:e7:ba:2b:60:8f:6c:c8:b7:ec:d9:cf:
03:1b:39:b0:ab:77:17:0a:7c:97:ea:5c:c7:ea:73:
fb:7a:40:e9:5e:a4:38:8a:a4:b9:2e:72:bd:94:17:
b1:28:46:25:fd:ab:7f:9e:4f:11:01:29:7f:a0:75:
6f:d7:fa:82:83:b2:58:d5:80:2d:99:aa:2d:50:4e:
5f:2f:8d:da:86:f3:7f:18:60:5d:f1:c0:36:05:10:
59:04:74:71:76:85:d1:fa:57:7c:ea:a8:71:fb:79:
6e:17:34:73:8d:85:d5:e1:79:5c:7d:bb:32:91:db:
67:c1:46:69:ef:a9:52:3d:c0:36:92:b0:c7:07:e4:
84:da:d3:6b:1e:f1:a0:1c:a4:b8:02:6e:cd:02:38:
90:d6:5e:2b:cd:77:b6:ac:13:ff:81:06:97:78:d7:
19:2e:71:7c:af:3f:59:da:2f:b7:6a:fa:11:77:7e:
0d:86:85:f1:8a:60:1f:e7:26:05:2b:fe:32:e4:14:
43:e2:68:83:ad:17:94:f5:bf:02:fc:a8:72:f1:9e:
4a:a6:23:29:25:92:b4:76:df:78:f4:07:3c:5a:35:
17:01:0a:02:bf:39:58:5a:7f:7b:58:05:11:08:60:
bb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9F:24:4E:0E:73:38:13:E7:65:58:DF:E4:C0:F7:C6:4C:D0:60:76
X509v3 Authority Key Identifier:
keyid:F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f9:10:20:eb:5e:ec:5a:ec:93:2d:e5:74:d6:33:07:27:fa:
33:88:70:18:76:3f:ab:36:f7:38:7e:71:a9:5c:ce:34:27:75:
b1:bc:b9:96:f3:a8:cb:57:9f:34:d4:4e:22:4a:7f:ad:63:78:
3f:5e:84:24:20:f2:6e:d5:3f:bb:58:00:d1:a0:f3:eb:f5:32:
f4:71:a6:5b:96:b1:0d:2f:e3:00:98:71:93:8e:8a:82:f7:f9:
5f:a5:cd:15:7d:68:5e:8a:e2:8a:df:2f:a0:58:d4:65:b6:cd:
4c:a5:ff:2a:2e:9a:33:25:7b:67:3e:50:b5:75:18:a9:0c:c5:
1e:bf:6a:2e:59:9d:b7:0d:87:dd:73:ae:bb:75:53:93:dc:27:
be:30:93:34:f3:5b:bc:1b:bb:ac:29:01:26:ab:e5:a2:2d:47:
6e:d7:6d:83:bd:76:5e:6b:04:ca:0e:5c:0e:78:2c:00:ce:2e:
91:18:0e:84:32:90:29:94:3b:9e:97:36:dd:e4:38:88:f3:09:
7c:68:c0:ca:f9:b1:01:03:db:c1:13:77:3d:9f:d4:0b:59:a7:
5e:86:c1:04:76:38:14:fe:6d:f3:37:fe:73:8d:93:6f:62:d9:
85:0d:bf:52:f1:58:22:00:35:1a:13:fb:cc:3c:11:f1:a9:1e:
15:4a:4d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:35 2026 by rpki-client