Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
File: 9WFTxQuIFb0o37sA4j5vJjIDFy4.mft (raw, json)
Hash identifier: ukRH9v1AzNd8BKIiZw5Wzy4YmyWkelkrTvxosmyBoXw=
Subject key identifier: 25:31:01:B2:09:78:1C:15:18:EE:C7:DF:BF:8A:54:B6:65:27:8A:B8
Authority key identifier: F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
Certificate issuer: /CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Certificate serial: 019E3073210370A02FE8F8A8CAE7081AE4B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
Manifest number: 0DF2
Signing time: Sat 16 May 2026 11:01:51 +0000
Manifest this update: Sat 16 May 2026 11:01:51 +0000
Manifest next update: Sun 17 May 2026 11:01:51 +0000
Files and hashes: 1: 9WFTxQuIFb0o37sA4j5vJjIDFy4.crl (hash: kG1AoMfx6gGKXuUOvLIZqH63zQ83CsmO2AUDdQj9l/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:73:21:03:70:a0:2f:e8:f8:a8:ca:e7:08:1a:e4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Validity
Not Before: May 16 11:01:51 2026 GMT
Not After : May 17 11:01:51 2026 GMT
Subject: CN=253101b209781c1518eec7dfbf8a54b665278ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:11:96:1f:37:6b:e7:2c:3d:82:a4:3c:ba:40:
20:cd:4e:0b:9f:ac:12:ad:31:90:0a:a4:88:77:31:
cc:5d:2c:64:e2:21:d1:b8:0f:3b:59:28:8c:dc:8e:
9a:9a:8f:45:80:ef:bb:59:c1:ee:eb:6f:f9:a7:8b:
66:2d:7e:73:fb:8e:a1:4a:2f:f2:58:ea:9f:2f:98:
f5:1c:8c:e4:e9:68:41:e4:32:9c:a7:ea:8e:9b:79:
0b:e6:2b:00:20:db:d3:7a:b8:b6:99:f3:ba:00:b8:
63:f8:cc:e6:4a:6f:23:17:ff:76:e9:2d:cb:7a:76:
8b:40:fe:92:9b:7f:d0:92:2e:f8:2f:64:76:2b:d6:
e3:eb:4a:37:a9:a4:4a:1a:96:88:ee:10:12:d6:27:
e2:54:ad:60:cb:76:c8:6b:7f:f2:de:30:a0:c1:0b:
47:43:5a:ac:00:bd:7f:73:5d:be:b2:f7:74:38:dc:
eb:53:f2:f6:8a:51:de:78:4a:47:c2:ca:9c:17:0c:
be:03:12:a6:6c:50:37:ed:c2:a7:0b:8a:a2:c6:b0:
4e:8a:a8:53:cd:ec:d9:5e:b7:a8:75:a8:a1:0e:85:
89:c0:5e:56:d8:84:84:f5:7f:e1:8b:65:03:6e:53:
bc:06:60:76:fd:df:81:2c:b8:b8:41:51:9c:bf:99:
4f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:31:01:B2:09:78:1C:15:18:EE:C7:DF:BF:8A:54:B6:65:27:8A:B8
X509v3 Authority Key Identifier:
keyid:F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c9:ef:99:ad:3d:68:aa:b7:f9:52:e8:86:10:ad:82:38:ab:
27:d7:39:bc:3b:3e:54:5f:aa:ae:b8:ef:7c:10:f0:e6:a2:8c:
3e:60:28:93:22:ba:c8:c9:07:e2:1e:71:54:1b:a4:25:a5:c4:
af:de:96:20:ba:8a:be:c3:97:d7:91:2a:55:04:42:c1:72:5a:
dc:91:f0:19:f3:27:5f:37:2d:5f:66:73:30:e0:17:1c:59:a2:
a5:26:2b:23:b7:f1:52:f3:0c:7e:19:74:8c:fc:1c:fa:25:35:
92:2d:0e:4a:19:fc:ea:90:4c:ec:e3:e1:fc:fc:c3:ad:d5:c0:
9c:b9:b6:e3:53:a4:21:4a:c5:b5:fc:d9:82:46:0f:4d:f8:15:
b9:6f:74:75:f7:b4:30:06:7e:fc:14:1a:41:7b:25:12:0b:da:
25:05:6a:ed:dd:8b:bb:09:85:7f:8e:bb:f3:fe:b5:b2:34:31:
f4:72:31:d6:2e:91:77:48:df:b4:c3:c9:f2:02:e8:f3:32:19:
40:2b:e6:c6:25:2e:3c:10:bd:cc:b7:af:5b:11:83:84:b3:1e:
2a:c4:d3:8b:25:fb:c4:9c:60:9c:67:c6:42:e7:92:37:75:96:
ad:cf:4f:8b:a8:84:5b:f6:09:e9:6f:2e:c1:6a:51:86:96:36:
c9:4e:ee:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:09 2026 by rpki-client