Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
File: AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft (raw, json)
Hash identifier: ZJtrlgVGEnMcVPKOKeXdbiYSLu6ES8EKRj55x/b+Jmk=
Subject key identifier: 35:32:3A:63:B5:03:16:03:30:05:12:EB:DE:1B:00:50:F5:2E:10:74
Authority key identifier: 01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04
Certificate issuer: /CN=013f6db0fd57d19f9ee15242a2e4167efb522d04
Certificate serial: 01A001010BB1D008582DF4EA3958D963EA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
Manifest number: 0ED6
Signing time: Fri 14 Aug 2026 16:00:40 +0000
Manifest this update: Fri 14 Aug 2026 16:00:40 +0000
Manifest next update: Sat 15 Aug 2026 16:00:40 +0000
Files and hashes: 1: AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl (hash: rDrXxNfyOsmGkl4UCH/l+TQ+IGF5UpWPUHtzja3jt9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:0b:b1:d0:08:58:2d:f4:ea:39:58:d9:63:ea:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=013f6db0fd57d19f9ee15242a2e4167efb522d04
Validity
Not Before: Aug 14 16:00:40 2026 GMT
Not After : Aug 15 16:00:40 2026 GMT
Subject: CN=35323a63b5031603300512ebde1b0050f52e1074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4d:24:a3:f4:4e:1f:5f:f1:f2:4a:8a:39:52:
21:c6:71:54:86:de:ca:5e:62:19:79:0b:a0:d3:5c:
4f:06:44:68:d8:b7:3f:b2:69:39:fd:8d:88:61:62:
5c:9f:0b:c8:2d:3c:b7:1d:15:29:ac:87:cf:bb:a4:
f2:69:73:02:d8:26:63:f4:bf:84:aa:2c:99:05:fc:
ea:39:4a:e7:0b:83:40:37:4b:6b:69:1b:e4:e5:26:
fb:a4:03:2e:4e:2c:01:18:f5:5d:fe:fb:94:04:5e:
d3:ad:74:98:44:17:78:c4:52:2a:c4:39:de:85:72:
33:72:67:89:49:ea:70:97:aa:2f:c1:cb:ab:bb:9b:
fe:75:ee:ec:5a:01:67:c9:fa:0f:27:84:b9:98:b8:
ed:ec:0c:51:bd:87:5e:2b:19:57:96:25:54:cf:e8:
cf:79:b8:d3:04:e4:3d:e3:25:4e:27:52:73:fd:c8:
c7:87:6c:b4:68:bc:fa:50:7f:3e:35:13:b2:42:b0:
64:3c:b2:ce:b3:99:c8:0b:7b:24:e6:9b:c1:46:9c:
72:37:30:92:c0:14:d9:f9:ac:eb:61:d7:ae:23:7b:
61:51:74:55:90:72:62:46:c4:41:ca:30:b0:53:1a:
94:39:5f:17:68:94:1e:69:67:e5:93:8a:e1:48:13:
d2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:32:3A:63:B5:03:16:03:30:05:12:EB:DE:1B:00:50:F5:2E:10:74
X509v3 Authority Key Identifier:
keyid:01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:10:98:ab:43:ff:55:b2:15:d3:d0:0c:77:cc:2a:2c:08:52:
6a:e9:bb:27:d1:0a:f0:49:06:31:d9:37:d4:47:37:00:71:69:
ca:90:29:12:2a:12:a7:f3:9b:cd:c7:21:da:14:63:c9:3b:7b:
dc:d4:2e:b7:a9:5e:f6:63:9b:1d:25:72:1b:27:28:55:2a:f0:
f7:d0:9a:4f:2b:55:13:ed:aa:37:3e:7c:a7:99:25:65:b7:40:
5f:55:24:9b:4c:78:ef:f0:30:c7:fd:37:55:ac:fb:c6:43:30:
f5:97:fb:3d:2a:ef:d9:c4:3a:d6:d9:b5:82:39:50:51:5a:46:
dd:bd:a0:49:c1:60:86:f5:51:be:ee:43:7f:f7:df:9a:d6:83:
54:3f:48:26:63:60:b0:dc:16:c8:8b:da:aa:29:d0:9c:ee:a5:
d5:32:f8:80:77:df:dd:70:11:a8:52:3d:47:bf:cf:37:73:45:
71:8d:71:bc:f6:ae:e7:d4:d1:29:58:0a:45:3a:37:fa:b3:93:
e8:16:9b:f5:2c:c2:fa:e2:df:f7:93:3b:81:24:24:71:2d:95:
14:c8:04:24:03:68:9d:bc:5d:73:76:cd:79:dc:86:f9:84:ba:
d1:98:f6:b8:82:4a:2a:66:37:3f:b7:4e:c5:43:8d:ed:56:5c:
a5:1f:ed:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:23:44 2026 by rpki-client