Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.mft
File: U9L19sohYsiL85oPnekm9CPlMQQ.mft (raw, json)
Hash identifier: wOGtxZJRNv1qCpQSkwNo2cfdSd5X26gVJUdR7xTceWk=
Subject key identifier: 1D:A3:BE:A8:65:1D:8C:18:01:F2:37:77:7B:37:B3:2A:A9:4B:CE:59
Authority key identifier: 53:D2:F5:F6:CA:21:62:C8:8B:F3:9A:0F:9D:E9:26:F4:23:E5:31:04
Certificate issuer: /CN=53d2f5f6ca2162c88bf39a0f9de926f423e53104
Certificate serial: 01A08A1ED494D75A376646D4FD3D5A172E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9L19sohYsiL85oPnekm9CPlMQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.mft
Manifest number: 13AE
Signing time: Thu 10 Sep 2026 07:01:11 +0000
Manifest this update: Thu 10 Sep 2026 07:01:11 +0000
Manifest next update: Fri 11 Sep 2026 07:01:11 +0000
Files and hashes: 1: U9L19sohYsiL85oPnekm9CPlMQQ.crl (hash: 4b6twhibSXtevOFb9ujKfLy2UV4cR/A9S59jrmW402I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9L19sohYsiL85oPnekm9CPlMQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1e:d4:94:d7:5a:37:66:46:d4:fd:3d:5a:17:2e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d2f5f6ca2162c88bf39a0f9de926f423e53104
Validity
Not Before: Sep 10 07:01:11 2026 GMT
Not After : Sep 11 07:01:11 2026 GMT
Subject: CN=1da3bea8651d8c1801f237777b37b32aa94bce59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6d:a7:8c:d5:27:4b:a6:e3:d4:84:d9:52:1d:
99:4d:e5:e7:2d:37:52:02:50:81:f0:90:bd:63:fc:
3c:8d:5a:d4:f1:6e:c4:28:68:9e:3c:3a:e1:6f:4a:
06:7c:2f:4a:1d:6d:8c:e0:a5:c8:e2:8f:62:70:ab:
57:8b:45:54:15:ff:5b:79:bf:8d:31:1f:f0:87:c8:
aa:ad:39:27:ed:4b:ad:31:22:ac:72:f5:79:18:a6:
e7:b4:87:2f:87:14:3b:48:ee:0d:05:af:46:94:c5:
a3:91:d1:db:71:42:d2:10:8b:c1:33:01:2d:b3:39:
31:2b:11:5a:29:f3:18:ff:a7:be:0a:8b:52:08:21:
f8:35:9f:29:11:09:c7:28:cc:d5:5d:de:36:d0:60:
b6:5f:d0:1d:c8:04:7d:b7:54:7a:73:70:76:99:e0:
de:66:bc:db:a0:34:27:11:d2:5c:b3:4b:d4:16:51:
f1:2f:50:84:cc:d1:c6:fa:18:25:c2:eb:ff:dd:67:
3d:0c:a1:78:5d:37:ff:4c:fb:96:e0:e7:6f:9a:e2:
27:52:43:33:2d:7a:ec:d5:d2:65:42:69:49:1c:53:
74:db:76:d5:c9:1a:96:d4:bd:7d:c8:80:bb:2c:b8:
01:c9:5d:45:8f:af:fd:9a:97:b5:0f:be:56:16:38:
fc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A3:BE:A8:65:1D:8C:18:01:F2:37:77:7B:37:B3:2A:A9:4B:CE:59
X509v3 Authority Key Identifier:
keyid:53:D2:F5:F6:CA:21:62:C8:8B:F3:9A:0F:9D:E9:26:F4:23:E5:31:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9L19sohYsiL85oPnekm9CPlMQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:09:92:af:eb:d7:c7:db:88:98:20:41:4a:08:52:78:b5:80:
6a:b9:6e:53:f8:3d:3d:1f:2a:85:06:78:45:c1:f5:75:77:a0:
fd:bf:00:1b:2c:b1:29:5f:a8:b8:36:58:a1:d3:f2:8b:ac:3c:
36:fd:10:66:5f:2f:f3:9d:86:35:c1:6c:2d:50:4f:0b:b3:37:
95:7b:28:b6:08:b3:da:8c:e6:9c:b9:4d:2e:5e:d2:b0:95:a0:
3b:0b:95:da:9b:b5:72:8a:1a:1f:ca:0f:30:70:85:81:2b:fb:
df:d2:b6:4f:06:22:07:ea:07:ff:78:43:8b:23:3d:2d:a6:56:
d6:ee:89:4b:5d:d6:44:30:2c:61:63:8f:90:bc:c4:39:b3:db:
da:4a:1c:c6:e2:50:08:9c:3c:7e:6a:1d:47:6a:f8:6a:38:ba:
4e:08:4f:18:7c:05:62:e4:89:97:31:76:47:a7:30:e3:18:27:
29:6f:3f:b5:c6:03:ef:fb:50:8a:3c:ba:f2:3a:cf:2a:66:c8:
99:9e:b4:38:96:41:83:5e:b1:63:aa:50:33:d0:7a:46:c2:4a:
da:a9:6e:6c:bf:c6:87:30:52:59:55:06:ea:9a:de:a2:31:9b:
88:66:76:34:f0:6f:60:fb:10:46:41:0e:b9:93:09:92:22:4b:
4a:56:92:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:02:45 2026 by rpki-client