Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
File: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft (raw, json)
Hash identifier: C69zB90UEPUaORBN2uwzi41j8LV1xZQjvwJuEao2EII=
Subject key identifier: A3:DE:B8:9F:94:35:02:A8:47:30:4B:70:4F:CE:30:CD:35:47:C4:B0
Authority key identifier: F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
Certificate issuer: /CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Certificate serial: 019F17C35A1B173FE06E0CC4EEE116F34FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
Manifest number: 1067
Signing time: Tue 30 Jun 2026 09:01:46 +0000
Manifest this update: Tue 30 Jun 2026 09:01:46 +0000
Manifest next update: Wed 01 Jul 2026 09:01:46 +0000
Files and hashes: 1: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl (hash: 5qmnjJkxrFpN55qYxkNwEln0lzGPh1VYaYgICONCgeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:5a:1b:17:3f:e0:6e:0c:c4:ee:e1:16:f3:4f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Validity
Not Before: Jun 30 09:01:46 2026 GMT
Not After : Jul 1 09:01:46 2026 GMT
Subject: CN=a3deb89f943502a847304b704fce30cd3547c4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3e:0b:81:a2:63:83:19:2a:8d:3e:ed:b5:a9:
59:3f:db:53:39:e4:e1:4f:9b:24:14:d3:d6:e6:44:
40:f4:4b:38:ac:62:20:89:99:53:da:e8:de:13:11:
e1:05:a4:d9:da:82:05:f0:4c:10:ff:7c:93:92:65:
5c:b2:7a:8b:02:56:82:40:a7:75:2e:59:7b:98:e2:
fe:49:da:f0:f6:63:9a:19:13:a3:8d:a6:71:18:cd:
b8:f8:36:fb:14:74:cf:f3:b2:4f:6e:59:30:93:e7:
f0:f3:1a:ad:70:47:d5:2a:30:75:18:87:95:a4:a5:
c5:ba:0c:36:0f:2b:ec:1e:93:46:53:ba:da:38:ca:
69:bc:e1:dc:fe:3f:f5:2e:f7:fe:72:c3:6d:1e:9e:
bf:3f:16:b1:c1:f7:2f:6a:5b:70:48:44:7d:e1:f8:
57:f5:02:f0:bf:eb:29:2d:ee:43:0f:fe:85:6f:37:
a2:69:4a:f3:2c:da:fa:53:67:ed:ef:8f:20:b9:ed:
64:34:a9:23:fc:60:87:4e:42:6b:3d:00:05:e6:50:
c9:f3:02:fa:be:82:e5:29:f9:9f:23:93:32:b0:48:
f4:a5:58:c4:ab:46:44:33:04:05:32:b9:b4:b0:c6:
f9:3c:1c:ff:6b:d2:c6:81:7c:59:14:77:84:b3:c5:
ae:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DE:B8:9F:94:35:02:A8:47:30:4B:70:4F:CE:30:CD:35:47:C4:B0
X509v3 Authority Key Identifier:
keyid:F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6e:14:f2:ba:2d:d5:bd:d0:01:fe:2a:cb:99:0e:e3:97:a2:
9f:40:d7:a4:40:96:08:e1:9d:ec:ba:ca:79:f2:d7:a1:d2:40:
14:98:52:45:b1:23:85:78:38:b5:9b:02:69:d1:e6:a2:57:34:
4c:68:5e:4b:79:d7:6b:ae:b3:7c:2e:19:cf:04:e6:a0:38:1b:
b5:74:3c:47:04:73:08:76:df:cf:0c:f1:ac:f8:2d:ab:3c:f2:
00:71:d8:cc:90:2d:bb:92:da:36:a7:3f:9b:90:1d:8a:3a:75:
30:f6:fe:f6:df:ea:c0:04:5d:3f:13:b8:56:31:4e:11:82:d6:
23:b2:54:9a:4b:38:79:df:f4:39:ec:3e:2f:1d:c9:dc:6f:df:
c8:97:c7:f0:54:71:17:43:ca:99:7e:39:b9:c8:41:0b:65:50:
1a:57:3a:3d:a2:b1:ac:4e:7c:b5:80:d5:8d:2b:c9:02:d8:7d:
b6:9e:8b:fb:54:b3:2d:08:cd:b6:32:c5:00:5a:b4:ae:b3:aa:
88:c8:cd:c7:48:b2:bd:83:ad:04:a9:a2:af:15:06:0b:58:f9:
9b:43:91:b1:71:ee:de:12:9f:bb:87:46:4f:f9:9e:d7:a4:38:
14:ff:7a:e9:16:8f:62:84:2e:4c:77:97:d9:61:40:da:0e:6f:
8a:52:4f:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Xw1obFz/gbgzE7uEW80/kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NDNmMDM1MmFkZmM5OGFjODgwMWI5NGU1YTAwN2U3MDcw
YjA3YWMwHhcNMjYwNjMwMDkwMTQ2WhcNMjYwNzAxMDkwMTQ2WjAzMTEwLwYDVQQD
EyhhM2RlYjg5Zjk0MzUwMmE4NDczMDRiNzA0ZmNlMzBjZDM1NDdjNGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j4LgaJjgxkqjT7ttalZP9tTOeTh
T5skFNPW5kRA9Es4rGIgiZlT2ujeExHhBaTZ2oIF8EwQ/3yTkmVcsnqLAlaCQKd1
Lll7mOL+Sdrw9mOaGROjjaZxGM24+Db7FHTP87JPblkwk+fw8xqtcEfVKjB1GIeV
pKXFugw2DyvsHpNGU7raOMppvOHc/j/1Lvf+csNtHp6/PxaxwfcvaltwSER94fhX
9QLwv+spLe5DD/6FbzeiaUrzLNr6U2ft748gue1kNKkj/GCHTkJrPQAF5lDJ8wL6
voLlKfmfI5MysEj0pVjEq0ZEMwQFMrm0sMb5PBz/a9LGgXxZFHeEs8WuhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPeuJ+UNQKoRzBLcE/OMM01R8SwMB8GA1UdIwQY
MBaAFPZD8DUq38mKyIAblOWgB+cHCwesMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWtQd05TcmZ5WXJJZ0J1VTVhQUg1d2NMQjZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82YWM3N2EtNGE1Zi00ZDM5LThjZmEt
MDA1ZmMwN2NlZGM4LzEvOWtQd05TcmZ5WXJJZ0J1VTVhQUg1d2NMQjZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi82YWM3N2EtNGE1Zi00ZDM5LThjZmEtMDA1ZmMwN2NlZGM4
LzEvOWtQd05TcmZ5WXJJZ0J1VTVhQUg1d2NMQjZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnW4U8rot
1b3QAf4qy5kO45ein0DXpECWCOGd7LrKefLXodJAFJhSRbEjhXg4tZsCadHmolc0
TGheS3nXa66zfC4ZzwTmoDgbtXQ8RwRzCHbfzwzxrPgtqzzyAHHYzJAtu5LaNqc/
m5Adijp1MPb+9t/qwARdPxO4VjFOEYLWI7JUmks4ed/0Oew+Lx3J3G/fyJfH8FRx
F0PKmX45uchBC2VQGlc6PaKxrE58tYDVjSvJAth9tp6L+1SzLQjNtjLFAFq0rrOq
iMjNx0iyvYOtBKmirxUGC1j5m0ORsXHu3hKfu4dGT/me16Q4FP966RaPYoQuTHeX
2WFA2g5vilJPtg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:35:45 2026 by rpki-client