
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
File: 9yjCKwJQJ1-m63NLoA55D343pVA.mft (raw, json)
Hash identifier: ZjFSwCat+bhnwC0WbAaLFb7X3Llp1eL32TR2VKT0xlo=
Subject key identifier: A4:69:21:9D:A3:97:D8:09:78:51:2F:44:14:E9:3E:7B:38:45:F4:3D
Authority key identifier: F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
Certificate issuer: /CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Certificate serial: 01A00101759926915F4D253F1BB1CC24BE5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
Manifest number: 0D2D
Signing time: Fri 14 Aug 2026 16:01:07 +0000
Manifest this update: Fri 14 Aug 2026 16:01:07 +0000
Manifest next update: Sat 15 Aug 2026 16:01:07 +0000
Files and hashes: 1: 9yjCKwJQJ1-m63NLoA55D343pVA.crl (hash: zVK0heh4Qr9t57G4093pdt/QXA6g/mgc0Hbw5X3abls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:75:99:26:91:5f:4d:25:3f:1b:b1:cc:24:be:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Validity
Not Before: Aug 14 16:01:07 2026 GMT
Not After : Aug 15 16:01:07 2026 GMT
Subject: CN=a469219da397d80978512f4414e93e7b3845f43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ed:7e:82:62:3b:6f:05:61:56:af:00:0f:9b:
2a:1f:2e:a6:4f:5e:f3:4d:08:a5:fe:59:51:16:7d:
18:c0:92:f5:01:95:41:12:a1:12:16:ea:69:83:73:
6d:bb:03:87:2d:db:76:78:7b:de:f1:a1:36:c8:39:
03:54:77:a7:bd:8e:39:47:3b:ab:15:49:25:5f:96:
21:23:b5:26:74:40:24:8f:58:54:bf:ca:c2:77:df:
1f:fb:56:26:d7:fb:99:fd:3e:11:5c:ba:11:69:bb:
7f:1a:37:7c:3c:b9:5a:b1:76:5c:3f:52:91:ec:94:
38:85:fc:6d:5c:a8:35:e7:27:88:09:2d:20:92:86:
b1:4f:03:25:aa:4a:a7:be:6d:50:a7:79:3c:f0:32:
41:63:0d:0b:cf:b7:ce:aa:f6:15:7c:0a:ff:22:55:
4b:93:ef:6e:03:4d:07:e9:d3:27:ec:35:97:b1:4f:
b5:eb:10:07:df:9e:d6:15:35:e9:57:5d:b3:cb:d0:
86:11:6c:ed:b0:9f:18:4b:1c:ce:d0:fe:9f:1e:92:
07:53:d0:1e:9a:d4:b2:2a:fa:eb:f1:40:75:c2:a2:
fd:e0:2d:a6:f7:73:00:fe:b7:82:ac:4a:30:04:ef:
99:d7:75:46:d2:ae:7d:3a:67:b4:8b:9c:27:55:b7:
d5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:69:21:9D:A3:97:D8:09:78:51:2F:44:14:E9:3E:7B:38:45:F4:3D
X509v3 Authority Key Identifier:
keyid:F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:9e:71:be:43:73:bf:14:af:ed:ca:f8:e8:95:31:1b:c7:08:
bf:c4:ac:ef:91:7f:0e:5a:9d:a5:e9:4a:93:ea:48:5e:7b:37:
9b:c7:6e:d8:0c:1f:1d:99:48:26:52:c1:02:59:57:38:f4:be:
81:a9:97:53:2f:58:bb:1a:c1:70:01:da:2c:eb:9f:da:c3:62:
d7:5e:18:5a:3b:12:8b:e3:a2:48:4d:ce:e2:40:79:0a:14:cf:
53:cd:65:3b:b0:f0:1c:b8:03:97:be:bd:e2:28:71:e7:a7:9b:
e8:55:ab:80:9e:ce:6f:ba:1a:25:92:e6:af:c0:cf:ef:f9:ad:
8e:7a:1e:5f:c1:ec:95:2a:98:dc:bd:cf:9b:6a:e4:5e:31:ea:
98:a9:5f:32:cc:61:30:2d:04:2f:5f:6d:ee:9a:fc:84:18:99:
c2:43:22:41:f7:ac:59:d6:8e:20:e8:ea:13:5b:66:de:65:c7:
11:0b:e7:d2:9d:7a:54:22:0b:d7:f1:69:1f:19:f2:80:f7:e2:
86:74:11:dd:f2:09:cf:70:37:a8:b5:ac:a9:36:e0:ca:db:b4:
77:d6:37:82:19:f3:3d:5c:a7:85:41:fe:df:52:ea:ed:6d:00:
92:09:30:c0:b8:8f:a4:ad:63:6a:e8:8a:51:34:9a:01:39:29:
c2:19:64:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:18 2026 by rpki-client