Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
File: 9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft (raw, json)
Hash identifier: qtc6IkPJhDpu/A2dOhMPWEHBbNfUR+qWUm7Q6YzYCV8=
Subject key identifier: FA:A5:EE:EA:6A:2D:79:B4:28:33:43:94:77:D4:A8:65:17:5E:2B:5C
Authority key identifier: F6:09:32:C7:B8:94:51:9D:34:62:47:30:2E:B3:65:F5:C4:09:B0:3C
Certificate issuer: /CN=f60932c7b894519d346247302eb365f5c409b03c
Certificate serial: 01A040F2DA1BC76DAF8C7ADA7CD4037D196E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
Manifest number: 035D
Signing time: Thu 27 Aug 2026 02:00:52 +0000
Manifest this update: Thu 27 Aug 2026 02:00:52 +0000
Manifest next update: Fri 28 Aug 2026 02:00:52 +0000
Files and hashes: 1: 9gkyx7iUUZ00YkcwLrNl9cQJsDw.crl (hash: mai9FZLB6NjI7Kdow/+qx81StjrjplT4EpkWq2CXuqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:f2:da:1b:c7:6d:af:8c:7a:da:7c:d4:03:7d:19:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60932c7b894519d346247302eb365f5c409b03c
Validity
Not Before: Aug 27 02:00:52 2026 GMT
Not After : Aug 28 02:00:52 2026 GMT
Subject: CN=faa5eeea6a2d79b42833439477d4a865175e2b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e9:df:cd:c8:f8:14:e2:04:93:db:ac:fb:01:
80:e3:b0:32:78:7b:4b:50:d2:ca:a3:b5:68:78:bd:
d3:1b:bc:54:c4:d3:ab:84:e8:cb:c9:e2:3c:a1:7f:
fb:c8:76:27:ce:ea:3c:2e:ba:83:2c:65:11:48:27:
45:2a:4f:1d:2a:52:3f:8b:8f:e8:27:d2:15:26:be:
96:c8:09:b8:76:14:1d:ec:e9:54:09:bc:9a:d2:3c:
16:24:84:4d:0a:5a:db:db:a7:60:91:9e:ff:1d:1f:
94:a4:31:23:19:f5:d2:8b:32:5d:e6:4c:9f:23:8a:
b5:89:4e:a1:57:8d:6f:6c:35:91:8d:fb:7d:98:25:
93:67:24:1a:7a:5a:29:f6:c8:94:d2:e6:e9:21:94:
27:d4:2c:fe:07:48:ab:81:f3:4c:82:44:cf:c9:7f:
ac:bc:8c:02:66:0c:9c:c3:8d:5d:19:33:96:ce:aa:
3b:21:75:2a:b7:32:b9:b9:41:1e:55:09:b7:4c:3c:
5e:b2:a1:f1:d5:1c:95:ab:97:5f:5d:ec:e5:a3:e9:
e6:00:07:f8:1b:9d:78:f0:c0:2e:e4:cf:e7:f9:65:
bb:9a:2c:f3:e2:e7:12:26:20:ca:a6:08:71:cc:62:
ae:85:7e:7b:4a:05:28:07:59:a5:49:32:c9:15:9b:
f9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A5:EE:EA:6A:2D:79:B4:28:33:43:94:77:D4:A8:65:17:5E:2B:5C
X509v3 Authority Key Identifier:
keyid:F6:09:32:C7:B8:94:51:9D:34:62:47:30:2E:B3:65:F5:C4:09:B0:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b3:c8:ce:38:33:a6:d1:9f:7f:fb:42:12:17:79:f5:f0:f2:
98:9a:6a:02:d4:8b:b6:85:f6:ae:fd:5b:57:cf:c2:31:3c:8d:
b7:1f:ef:db:fe:81:fb:55:52:0e:e9:4a:8c:ce:21:74:22:f9:
74:e1:48:e4:20:4d:1a:67:ff:f5:a3:e7:24:de:43:eb:19:0d:
c6:e5:bd:c2:73:3b:4c:90:75:df:80:35:8c:ae:50:f2:34:8f:
ee:26:63:cc:8a:eb:32:c0:82:b6:e1:c8:fb:78:31:f5:61:02:
56:7d:45:53:18:92:94:26:0f:9c:87:6d:c8:14:1b:67:f7:b3:
9b:16:08:f0:1f:d2:41:24:b0:9d:04:1f:33:16:87:af:2f:26:
e4:0a:57:c7:b0:f9:9f:c0:a0:bd:c0:22:03:bc:53:16:a7:50:
2f:c1:89:cc:d0:9d:eb:61:d2:62:11:53:7d:bc:c5:e6:8d:69:
3c:bd:db:b5:62:c3:77:ff:e0:73:9e:0d:19:89:46:60:08:94:
15:86:93:b9:18:38:a7:5a:65:c4:cd:2e:f8:0e:e1:35:60:a0:
a0:c0:0c:fc:c5:5d:03:a7:b0:19:0c:c3:d1:ff:42:59:67:cb:
b4:0b:c8:1c:36:64:01:47:6d:cb:42:b6:d1:a6:fb:e4:f7:90:
ec:04:0b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:51 2026 by rpki-client