Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
File: 9kixVYLTS9UXCp3RO4EyW6uuXjo.mft (raw, json)
Hash identifier: E/RpCpZEbJ/PEEfYNd7L98vZadoKYuP27xPfkRUvHmA=
Subject key identifier: 33:75:37:58:8C:49:52:13:7B:69:39:B7:C7:EF:C3:5B:35:A0:5E:45
Authority key identifier: F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
Certificate issuer: /CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Certificate serial: 01A0005C7ED10EE649E515487CDE57D9AE32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 13:00:56 +0000
Manifest this update: Fri 14 Aug 2026 13:00:56 +0000
Manifest next update: Sat 15 Aug 2026 13:00:56 +0000
Files and hashes: 1: 9kixVYLTS9UXCp3RO4EyW6uuXjo.crl (hash: dgQyKpi9+5dYzcN++76nqxOelGVE/FYECpuArhLQuN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:7e:d1:0e:e6:49:e5:15:48:7c:de:57:d9:ae:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Validity
Not Before: Aug 14 13:00:56 2026 GMT
Not After : Aug 15 13:00:56 2026 GMT
Subject: CN=337537588c4952137b6939b7c7efc35b35a05e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e5:3e:b8:b7:09:d5:07:a7:66:4b:1e:c7:a9:
15:a9:4a:ff:d0:c3:2b:51:67:a0:16:fb:38:c2:bb:
6c:00:9d:f0:74:8e:b4:5e:4b:0d:9f:0f:3a:01:dc:
33:65:bd:26:ff:32:e4:9a:a1:4a:b0:41:bb:28:65:
43:f0:cc:67:96:cf:d3:03:55:e4:8d:4f:ca:00:94:
d4:04:03:74:9c:c8:61:56:b5:a1:9c:b3:a3:aa:42:
33:f8:32:18:1f:2d:8e:88:a0:28:ae:46:b0:b2:28:
62:a3:34:15:db:3e:28:cb:2d:5a:bf:5e:6e:52:1b:
74:41:78:2b:3a:0f:75:e1:f1:de:87:49:11:2d:55:
91:99:35:bb:e3:5a:8d:27:b7:6f:07:f2:b6:cf:e7:
9e:3b:53:42:f6:92:cc:7e:de:fc:ce:3e:b8:78:6f:
5c:54:7d:32:f3:3c:f7:5b:46:80:5c:43:a8:3f:66:
48:b1:c0:53:a5:86:1e:a0:ba:bb:88:10:31:e2:44:
3f:50:dc:92:68:3d:86:02:ef:d0:16:9b:d0:93:63:
ca:c5:4f:04:a7:23:cd:8f:35:bf:73:b1:65:99:f9:
1c:f4:df:f2:3d:ad:a5:67:96:4a:3e:e5:b6:3d:8c:
56:17:26:5b:93:89:73:37:7f:1a:5e:56:93:17:f1:
72:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:75:37:58:8C:49:52:13:7B:69:39:B7:C7:EF:C3:5B:35:A0:5E:45
X509v3 Authority Key Identifier:
keyid:F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:99:4a:85:61:34:70:f3:f8:88:59:df:b1:0e:bd:3a:b5:1e:
df:53:23:3a:ef:c1:43:1f:0d:5a:1d:58:43:fa:84:89:be:dc:
77:cb:1f:c5:9e:64:29:1c:48:ab:1a:54:86:18:0d:86:e0:01:
3b:9f:a4:96:e4:ce:e0:d9:cb:a2:1f:0b:2f:2a:35:04:8d:73:
7e:99:83:f8:76:e5:3d:e0:ec:76:0c:ed:cb:ea:1a:b3:0c:5f:
72:e4:e1:75:ab:72:19:ce:73:b3:b2:3e:1f:eb:06:ed:1f:c7:
53:eb:82:59:2d:c2:0c:26:70:ac:95:17:9c:4c:55:9f:19:5b:
26:ae:00:a1:0e:f7:de:28:09:d3:ff:e0:92:c0:f2:b7:60:78:
a8:61:b2:48:ba:1b:60:a1:19:0d:0c:ac:a6:b8:0e:44:fd:a4:
ae:b1:48:cc:0c:bf:4e:90:d0:47:a1:e7:5d:96:33:8a:08:0e:
3d:0f:c9:1d:a5:4c:85:74:78:32:13:16:33:f4:9f:b1:2d:9d:
fc:e9:3c:94:a9:0f:9c:9d:e3:7b:ba:eb:7f:a8:44:71:44:84:
a6:c3:86:f2:65:96:76:5f:c9:65:89:df:d5:89:02:2d:60:c6:
2e:4d:f6:53:ec:a7:33:27:0f:03:77:fd:50:56:2f:9d:90:30:
e2:8e:0f:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXH7RDuZJ5RVIfN5X2a4yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NDhiMTU1ODJkMzRiZDUxNzBhOWRkMTNiODEzMjViYWJh
ZTVlM2EwHhcNMjYwODE0MTMwMDU2WhcNMjYwODE1MTMwMDU2WjAzMTEwLwYDVQQD
EygzMzc1Mzc1ODhjNDk1MjEzN2I2OTM5YjdjN2VmYzM1YjM1YTA1ZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOU+uLcJ1QenZksex6kVqUr/0MMr
UWegFvs4wrtsAJ3wdI60XksNnw86AdwzZb0m/zLkmqFKsEG7KGVD8Mxnls/TA1Xk
jU/KAJTUBAN0nMhhVrWhnLOjqkIz+DIYHy2OiKAorkawsihiozQV2z4oyy1av15u
Uht0QXgrOg914fHeh0kRLVWRmTW741qNJ7dvB/K2z+eeO1NC9pLMft78zj64eG9c
VH0y8zz3W0aAXEOoP2ZIscBTpYYeoLq7iBAx4kQ/UNySaD2GAu/QFpvQk2PKxU8E
pyPNjzW/c7Flmfkc9N/yPa2lZ5ZKPuW2PYxWFyZbk4lzN38aXlaTF/FyRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDN1N1iMSVITe2k5t8fvw1s1oF5FMB8GA1UdIwQY
MBaAFPZIsVWC00vVFwqd0TuBMlurrl46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWtpeFZZTFRTOVVYQ3AzUk80RXlXNnV1WGpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kOGY2NzItNTM5Zi00MDFkLTlkYzct
NjI3OTliOTAyMzFiLzEvOWtpeFZZTFRTOVVYQ3AzUk80RXlXNnV1WGpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9kOGY2NzItNTM5Zi00MDFkLTlkYzctNjI3OTliOTAyMzFi
LzEvOWtpeFZZTFRTOVVYQ3AzUk80RXlXNnV1WGpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUplKhWE0
cPP4iFnfsQ69OrUe31MjOu/BQx8NWh1YQ/qEib7cd8sfxZ5kKRxIqxpUhhgNhuAB
O5+kluTO4NnLoh8LLyo1BI1zfpmD+HblPeDsdgzty+oaswxfcuThdatyGc5zs7I+
H+sG7R/HU+uCWS3CDCZwrJUXnExVnxlbJq4AoQ733igJ0//gksDyt2B4qGGySLob
YKEZDQysprgORP2krrFIzAy/TpDQR6HnXZYziggOPQ/JHaVMhXR4MhMWM/SfsS2d
/Ok8lKkPnJ3je7rrf6hEcUSEpsOG8mWWdl/JZYnf1YkCLWDGLk32U+ynMycPA3f9
UFYvnZAw4o4PJA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:21:42 2026 by rpki-client