Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
File: 9XGHM6rUPvapm9jZUEog3YkCLo8.mft (raw, json)
Hash identifier: oXQuati/CJknMQldkhWYmi+O84oADWR0uiCNBqJaLbQ=
Subject key identifier: D9:FF:66:10:4B:23:8D:6C:4E:9D:F3:4F:DA:00:58:7E:96:2C:6F:F3
Authority key identifier: F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
Certificate issuer: /CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Certificate serial: 01A13F02DBBC79E8C6F6C647E7CC6BF01863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
Manifest number: 17A4
Signing time: Thu 15 Oct 2026 10:01:54 +0000
Manifest this update: Thu 15 Oct 2026 10:01:54 +0000
Manifest next update: Fri 16 Oct 2026 10:01:54 +0000
Files and hashes: 1: 9XGHM6rUPvapm9jZUEog3YkCLo8.crl (hash: OWVTf/h81Ig2mje4s4J/qJCkE3qAkA6hLeJxivE4DWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:db:bc:79:e8:c6:f6:c6:47:e7:cc:6b:f0:18:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Validity
Not Before: Oct 15 10:01:54 2026 GMT
Not After : Oct 16 10:01:54 2026 GMT
Subject: CN=d9ff66104b238d6c4e9df34fda00587e962c6ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b1:21:51:cd:9e:0f:f1:2b:2b:82:28:7c:14:
24:53:de:7c:0f:13:9d:11:e0:33:26:93:48:b0:08:
9f:97:a3:ba:80:81:cd:4d:3f:de:d0:40:d6:c4:34:
d5:0d:3e:1b:e4:cd:82:ca:ef:0b:93:5d:48:c4:4d:
3b:8d:46:a3:df:11:23:52:ec:73:40:9d:bd:02:b5:
98:42:9c:3b:42:c3:f2:a0:a8:d3:04:f9:a8:79:e2:
1d:68:1a:9a:19:72:51:b3:b2:67:02:bd:a1:cc:68:
30:a5:6e:d5:4d:45:74:13:b9:48:c0:22:e7:e9:ae:
0d:8b:92:70:47:ed:21:52:26:55:80:05:71:ba:70:
d1:d9:fb:f7:d7:be:3e:9b:a9:f1:ce:02:6b:b3:5f:
5a:97:50:45:c7:8b:8d:bb:f7:24:85:56:26:b4:f1:
1e:49:9f:ea:2a:5a:32:ba:35:89:8a:c4:0f:e9:90:
e9:71:13:f3:06:57:34:01:97:a8:cb:a5:7e:e6:78:
af:80:cf:35:5f:81:8a:b7:ea:a4:18:75:70:f9:09:
3e:90:a5:11:b7:fb:80:59:4a:07:7d:5b:00:96:12:
bf:dd:07:40:c0:e2:e0:17:b3:d3:72:5a:37:8b:40:
09:35:ee:08:6b:49:a5:ce:de:35:64:0b:4f:55:06:
2c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FF:66:10:4B:23:8D:6C:4E:9D:F3:4F:DA:00:58:7E:96:2C:6F:F3
X509v3 Authority Key Identifier:
keyid:F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:66:64:cd:dd:e2:ef:7e:37:1d:43:fa:96:d3:ca:57:44:93:
42:bc:93:af:93:1a:7a:78:df:05:ef:44:98:ff:87:31:d2:0e:
20:d0:f5:56:39:c8:95:2f:fc:bf:35:06:db:a9:2e:22:33:e5:
6d:7c:e7:f6:b6:07:d1:a4:cc:7c:f3:77:21:86:c3:36:3a:71:
54:56:4f:e5:5d:6b:91:38:58:8a:27:06:17:2c:cd:db:38:75:
32:0e:3a:72:9a:4f:b7:3c:1c:e5:a1:95:55:65:5e:2a:0b:aa:
b9:e1:b2:f0:f0:e8:52:20:14:f3:ae:fc:e6:a9:cb:a0:da:d9:
a7:26:05:bf:f6:8e:4d:73:42:04:bf:4c:f0:33:8f:50:63:e0:
b3:90:fb:31:c4:bb:70:e3:c9:9d:79:2f:85:80:ed:36:bd:13:
69:3d:2e:f9:97:c9:87:3c:66:3d:e8:59:9b:6a:df:bc:ff:fd:
7a:7d:e8:1d:3b:97:2e:20:e5:55:4a:e5:e0:bd:b9:ce:3f:cc:
14:78:ca:6d:1b:88:bf:d2:3e:8f:10:11:3e:b2:68:f8:a6:ec:
b4:17:d9:9e:08:ce:99:82:82:a0:96:a4:23:2a:fe:9b:55:de:
11:50:6f:f0:9f:be:b9:aa:2e:76:93:d5:c7:5d:cf:08:60:2e:
ed:a1:72:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:16:07 2026 by rpki-client