Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.mft
File: 9lLDECU8Ea-N8dkL6BrOQ31ti_Q.mft (raw, json)
Hash identifier: 9bTItMpBx8J4/CQX6nVGDZNHZ40sh1d2iikRKJhLDNg=
Subject key identifier: ED:96:69:98:21:AE:1B:38:04:10:95:13:84:D3:14:0A:90:7B:00:C5
Authority key identifier: F6:52:C3:10:25:3C:11:AF:8D:F1:D9:0B:E8:1A:CE:43:7D:6D:8B:F4
Certificate issuer: /CN=f652c310253c11af8df1d90be81ace437d6d8bf4
Certificate serial: 01A03FA8F509C55A92A528AF1305FC566564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.mft
Manifest number: 02ED
Signing time: Wed 26 Aug 2026 20:00:32 +0000
Manifest this update: Wed 26 Aug 2026 20:00:32 +0000
Manifest next update: Thu 27 Aug 2026 20:00:32 +0000
Files and hashes: 1: 9lLDECU8Ea-N8dkL6BrOQ31ti_Q.crl (hash: T3cXamQMrCBazw1lTOylEh/pNzDKEbkyABJ3JZ00DFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a8:f5:09:c5:5a:92:a5:28:af:13:05:fc:56:65:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f652c310253c11af8df1d90be81ace437d6d8bf4
Validity
Not Before: Aug 26 20:00:32 2026 GMT
Not After : Aug 27 20:00:32 2026 GMT
Subject: CN=ed96699821ae1b380410951384d3140a907b00c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:be:8a:1d:32:78:94:dc:a8:b2:13:02:b1:cc:
b5:da:bd:b5:39:68:cb:83:37:f2:f6:27:45:89:fe:
f6:15:21:aa:f3:23:ab:c6:5d:ba:ef:af:2b:e4:57:
f0:bc:31:60:d5:c5:0d:40:0c:bd:f9:c1:f8:02:3d:
af:ca:70:50:99:22:25:59:4d:fd:58:fb:7c:05:c3:
f0:63:81:3b:e2:44:88:77:61:16:0c:a5:29:e6:58:
5e:30:f1:02:32:b9:14:3d:41:03:c2:e7:95:82:8a:
ce:bf:17:c7:cb:bf:22:0b:2f:ae:fb:f1:33:40:c7:
c8:09:5e:78:3a:f5:74:99:dc:01:64:d8:55:5c:f8:
82:d7:6e:13:de:14:25:08:28:61:74:75:df:93:c0:
6c:2e:02:ef:62:d8:fe:95:95:c3:2d:d3:fe:5e:69:
af:01:7b:d2:22:7e:be:e8:70:ca:79:fc:45:a6:e2:
be:c7:3c:2f:4d:07:38:47:34:bb:ad:16:21:af:53:
92:ef:d8:c6:66:0e:96:61:42:b6:c3:57:27:2d:38:
cf:5f:08:88:9b:08:83:93:67:b3:64:11:f9:19:22:
d1:b5:c3:56:d8:0f:44:52:05:a0:ae:41:b5:d4:7f:
52:08:76:c3:e5:4d:a7:63:bf:7a:34:71:fb:94:7b:
99:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:96:69:98:21:AE:1B:38:04:10:95:13:84:D3:14:0A:90:7B:00:C5
X509v3 Authority Key Identifier:
keyid:F6:52:C3:10:25:3C:11:AF:8D:F1:D9:0B:E8:1A:CE:43:7D:6D:8B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c1:eb:55:1f:b0:7e:8d:c1:c7:bd:44:dd:dd:48:fa:3e:fc:
3f:b6:af:5c:74:0b:b8:73:d5:71:f7:f6:ba:02:e6:e6:f8:f7:
f0:e3:ae:53:43:64:d5:4c:71:b2:a8:50:23:bc:e1:7c:e4:a0:
d5:b9:36:0d:ae:b3:ea:2f:1e:74:89:ac:b0:f1:b6:58:a3:66:
57:5a:2e:0c:58:6f:db:e6:f3:38:36:4d:41:c4:4d:fc:c3:c6:
93:6b:4d:28:d9:0b:f8:34:b1:8c:97:7f:a6:e9:01:0d:2e:c7:
40:d3:32:fd:30:65:2d:31:dd:96:79:b3:d8:5a:6f:ff:c0:c1:
76:95:80:c8:f9:29:3a:03:15:ca:39:27:cc:6d:a3:71:70:1d:
9d:1e:af:cb:ed:84:af:b3:94:1d:56:d8:18:1d:8b:33:4f:49:
43:95:b1:e7:be:0e:d2:f4:cb:af:98:bb:78:ed:39:c0:15:bc:
04:2c:e2:47:61:c0:81:06:2e:c5:0a:2d:a8:64:bb:16:d9:f5:
c3:11:65:1c:de:76:f0:c6:fc:81:22:e0:0d:9c:51:7a:b4:c8:
a7:a9:80:78:c0:ba:5d:58:4d:84:97:91:da:02:0e:f7:31:42:
e7:86:1e:04:93:b1:32:3d:22:10:c6:2e:cc:8b:cc:27:b9:55:
f8:df:fc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:47 2026 by rpki-client