Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
File: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft (raw, json)
Hash identifier: pY5SNcUTRHB7i4r9MAmLo6yzxmOjc+lW8DiDer7h5lA=
Subject key identifier: 5F:13:30:35:24:0B:D0:16:C5:DC:8A:64:85:56:3B:27:57:13:5E:0B
Authority key identifier: F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
Certificate issuer: /CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Certificate serial: 019E3004D3C66D00F019D0486480B4EA0818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
Manifest number: 0FEF
Signing time: Sat 16 May 2026 09:01:23 +0000
Manifest this update: Sat 16 May 2026 09:01:23 +0000
Manifest next update: Sun 17 May 2026 09:01:23 +0000
Files and hashes: 1: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl (hash: rwF0+QMPxAQi4jijT/xevjM5VDAXO7QUVq3CO+jJ8s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:d3:c6:6d:00:f0:19:d0:48:64:80:b4:ea:08:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Validity
Not Before: May 16 09:01:23 2026 GMT
Not After : May 17 09:01:23 2026 GMT
Subject: CN=5f133035240bd016c5dc8a6485563b2757135e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d1:8f:b8:da:17:98:8c:35:b2:d4:94:4b:62:
16:fe:5e:68:b0:d8:fd:f9:b3:d7:bb:f8:e2:ce:1f:
37:0b:6b:06:d7:4c:d2:8b:bb:f4:69:c0:61:19:70:
87:59:20:5e:6d:fa:8b:05:8f:f7:39:18:15:1d:53:
53:74:eb:7e:5d:c2:0a:4e:d8:a7:98:68:0f:09:a6:
16:a3:f7:f8:11:65:ec:b1:85:f0:6a:eb:50:ba:4b:
65:b0:d0:9b:06:73:4c:70:a0:09:62:30:b6:d1:28:
fd:57:ec:a1:3f:b1:ad:6f:db:0d:c9:44:5c:fc:00:
9b:ad:de:a6:11:97:98:08:fd:fe:05:24:bc:e7:0d:
d9:a4:11:ff:5c:ca:ad:67:5f:72:9e:c7:b5:b7:b6:
f8:d1:35:6d:40:c3:f3:0d:b3:ca:50:9c:a0:84:09:
09:94:c0:c2:ae:3b:e7:50:e2:87:4d:06:e3:23:b6:
bf:db:d2:12:e6:2e:29:e1:89:0b:96:5a:dc:1b:a8:
5f:fa:4b:e5:e1:15:2b:db:02:08:b0:7a:36:7f:13:
d5:9e:40:6e:02:25:d2:6e:35:2e:50:49:de:01:b0:
6b:73:78:dc:6f:c0:67:7e:75:f5:b5:66:ee:71:7d:
8d:3e:e2:74:49:6b:82:b6:21:3e:e3:13:c0:f7:da:
3c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:13:30:35:24:0B:D0:16:C5:DC:8A:64:85:56:3B:27:57:13:5E:0B
X509v3 Authority Key Identifier:
keyid:F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:aa:3b:b2:88:69:42:d0:34:6d:c0:6e:e9:a3:a0:aa:bc:e0:
93:66:a3:09:b4:57:18:03:12:50:9f:e8:ad:59:8c:5b:6b:84:
61:8c:41:0c:d7:a2:75:05:a1:b2:ff:43:43:c7:46:2f:4b:eb:
06:83:0a:33:a6:c0:32:65:7a:fc:17:28:ec:d5:c5:fd:cd:2b:
fe:28:ad:53:81:4d:f3:d6:1c:c5:40:1d:ac:0c:34:c6:30:f8:
39:e9:09:11:fc:09:ba:83:02:81:09:96:7e:02:31:06:d3:0f:
93:7a:ad:4e:f3:a2:c7:1a:d8:a5:28:07:96:b3:59:c9:36:b2:
36:4f:33:d2:eb:dd:81:4b:d0:d5:73:f8:d6:a5:de:db:8b:56:
79:2f:56:59:f9:14:a7:01:72:b0:7e:4f:ae:b8:b4:1d:05:51:
d7:8b:39:91:6c:00:64:24:78:6b:29:5f:09:f5:cc:6f:4a:94:
f0:de:d3:d5:be:0e:37:95:2b:65:63:19:3f:ac:92:7d:36:9b:
28:d6:52:5d:2e:10:2b:75:7e:ff:d0:36:1f:db:0d:d3:85:67:
de:51:b8:fb:5e:13:6e:d5:cd:a4:00:b9:41:4b:70:c1:e3:1f:
38:bd:80:49:2a:f5:27:70:1c:04:3e:7e:af:4d:19:76:b2:b2:
b0:fa:9f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:13 2026 by rpki-client