Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
File: 9kixVYLTS9UXCp3RO4EyW6uuXjo.mft (raw, json)
Hash identifier: KrWotR5lENYcW5xh4jrMYyF6sileF8/Kq18mjXAqy8Q=
Subject key identifier: AC:84:F5:F8:46:DC:DE:CC:A6:3E:63:25:9E:FC:6A:A5:1E:A0:B3:AF
Authority key identifier: F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
Certificate issuer: /CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Certificate serial: 01A13D131ED2BEAFDA46DB0FA231245E6849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 01:00:25 +0000
Manifest this update: Thu 15 Oct 2026 01:00:25 +0000
Manifest next update: Fri 16 Oct 2026 01:00:25 +0000
Files and hashes: 1: 9kixVYLTS9UXCp3RO4EyW6uuXjo.crl (hash: yORDamiY4DIkSYmox62C515JARkibSW//baiwF7rZJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:1e:d2:be:af:da:46:db:0f:a2:31:24:5e:68:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Validity
Not Before: Oct 15 01:00:25 2026 GMT
Not After : Oct 16 01:00:25 2026 GMT
Subject: CN=ac84f5f846dcdecca63e63259efc6aa51ea0b3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:1b:b4:63:18:0d:99:4b:51:9e:87:78:69:
e8:3b:80:01:e3:f4:b3:b8:78:db:42:e3:c8:d2:8d:
16:fb:c4:d5:14:45:91:1a:7c:91:fd:2b:93:37:0f:
f2:99:50:86:ad:19:d0:45:e6:0c:25:5f:fe:b6:af:
bd:96:c2:b1:0a:e2:41:7f:1b:1a:d3:ad:45:06:7e:
79:b8:71:d7:24:a6:d2:09:5f:cd:02:f4:1f:95:4c:
d1:cf:5c:81:cf:44:a0:f7:60:2e:64:35:4a:d2:ed:
99:8c:fb:ea:7e:f7:19:bf:08:14:0c:a4:39:1a:1d:
ac:18:54:4a:3f:09:82:bf:45:1c:8b:f2:81:a5:19:
42:db:85:ec:df:a3:25:50:5d:ea:2d:9b:80:a0:44:
b4:d8:0a:f5:19:97:4a:f4:65:ff:fc:81:b9:aa:8a:
85:48:62:a3:c2:52:b8:b2:5b:12:2e:42:bd:23:43:
38:c3:f8:f9:ed:07:d8:30:d8:a3:fc:cc:b9:f2:45:
ad:4c:b4:19:7f:6b:ab:b3:12:8f:67:96:d1:21:a7:
51:55:cf:e5:26:f7:20:52:a7:43:bd:c0:1d:58:82:
c3:22:cd:da:ba:29:2a:9c:83:4f:2c:fb:2c:3c:ab:
36:4d:46:17:fa:23:40:d9:38:d1:d7:0b:d5:b9:3d:
0a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:84:F5:F8:46:DC:DE:CC:A6:3E:63:25:9E:FC:6A:A5:1E:A0:B3:AF
X509v3 Authority Key Identifier:
keyid:F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:63:7a:d2:38:9a:f0:c7:10:c4:7d:09:77:61:a0:62:f1:5a:
5d:49:52:8a:23:24:16:f8:73:0f:01:82:95:5a:15:d0:b3:89:
24:61:fd:e0:89:27:8b:f1:a1:73:85:fe:60:58:c4:1a:37:a7:
d7:26:4b:40:36:66:1b:88:48:aa:eb:3a:e5:e4:06:f8:ea:9d:
83:ae:70:10:68:48:01:f6:f7:e1:9c:aa:45:19:5e:51:dc:3d:
18:6c:f2:5e:46:80:7b:7f:1e:36:ac:8d:13:57:ce:4b:6c:f6:
91:9d:51:7a:6b:e6:53:42:4e:e5:e2:0d:4f:7b:90:95:70:0b:
c8:a4:18:59:19:72:57:66:7a:75:76:66:43:25:23:29:f7:95:
20:d2:f2:0d:22:6b:24:f2:a8:d8:af:b7:77:3c:32:93:be:bf:
7e:e2:44:47:20:12:99:ed:14:af:3a:12:d7:2c:f2:dd:63:38:
fe:ae:53:1e:25:02:23:1e:e7:06:06:96:a0:ad:23:ea:71:4e:
eb:ed:54:ec:de:9b:eb:e1:47:6a:da:ba:1c:e3:85:ab:53:b1:
5f:fe:fd:5a:3b:e3:ba:a1:32:69:a0:2a:8d:c5:28:80:0b:06:
a5:56:46:24:c2:59:0f:67:17:38:80:d0:80:4c:dd:2b:41:43:
82:17:3e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:30 2026 by rpki-client