Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
File: 9l50I9P3sbLnrMG6HO4CQLfWedY.mft (raw, json)
Hash identifier: nhdjsTInCdknZs3PmcTHKhkSf7V6Q8+yPRuVDJczEag=
Subject key identifier: 6A:C2:F4:17:4E:C3:D3:64:BC:21:EC:5D:A5:79:00:45:80:8F:6D:C5
Authority key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
Certificate issuer: /CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Certificate serial: 01A001DD3B6DA0B0FF02687CD3753AF50393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 20:01:10 +0000
Manifest this update: Fri 14 Aug 2026 20:01:10 +0000
Manifest next update: Sat 15 Aug 2026 20:01:10 +0000
Files and hashes: 1: 9l50I9P3sbLnrMG6HO4CQLfWedY.crl (hash: pZ+kAWoW4rwy2GLdmPV4cziMOsVp/6vgbR8o96x5gw8=)
2: pY5anUcF6nGQjRStvwUsfXfpPT4.roa (hash: ikRAmfOVAxrB8DLsnpaLa+mv7owmfzH47WnehifEhhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:3b:6d:a0:b0:ff:02:68:7c:d3:75:3a:f5:03:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Validity
Not Before: Aug 14 20:01:10 2026 GMT
Not After : Aug 15 20:01:10 2026 GMT
Subject: CN=6ac2f4174ec3d364bc21ec5da5790045808f6dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:39:44:46:c7:57:f1:4f:34:3f:5c:36:96:9f:
7a:ca:03:47:73:52:63:27:1a:d3:9c:d5:69:19:b0:
b7:4e:ba:e1:be:33:bd:7b:a2:0f:8d:9a:d6:e5:53:
8b:89:f4:db:04:e3:46:17:02:0c:69:3b:b3:50:59:
77:c9:b0:52:19:f9:24:3c:43:02:f3:04:bf:90:0e:
6d:b9:ad:fe:02:a8:35:c5:ba:8c:e6:60:4e:3a:a4:
df:74:01:4e:d5:03:36:ce:93:8d:09:59:c5:8c:30:
16:d3:f6:14:6b:14:69:65:3d:78:a9:33:82:51:c2:
25:32:83:4c:5f:f0:1c:d8:3b:03:c8:dc:1d:d8:f6:
07:2d:e2:84:93:87:63:9f:8b:f2:6a:0d:a9:e8:1f:
72:45:0a:1f:73:04:20:f7:24:39:d8:69:b9:90:16:
ec:36:ed:6a:67:41:f9:84:7f:46:5c:be:25:b7:b9:
2d:56:41:43:71:45:9e:f6:a0:a3:09:04:22:fa:61:
25:ff:1e:98:64:e3:ef:86:5f:01:d1:1f:70:4f:38:
b3:62:c7:0c:77:22:7a:ae:91:85:44:b4:d1:46:9b:
89:fd:7e:42:60:d0:bd:e1:2b:f4:0e:0f:3d:9a:ac:
ef:90:ae:50:c7:fe:f7:0a:8c:ca:2d:3d:14:99:d7:
fe:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C2:F4:17:4E:C3:D3:64:BC:21:EC:5D:A5:79:00:45:80:8F:6D:C5
X509v3 Authority Key Identifier:
keyid:F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b1:e6:5c:8f:7f:cb:b5:c5:4a:c9:a7:27:1a:6d:33:63:8b:
b2:ad:21:b8:74:4c:61:bc:3d:47:38:7b:37:ab:8b:fd:f9:7d:
d6:e7:e1:ff:9b:10:fc:a9:ba:02:a3:30:e3:48:29:37:2c:32:
e3:7a:7a:48:6d:e6:d7:5b:53:6e:94:59:ae:71:3c:a8:36:43:
96:fe:6f:74:65:fa:16:86:ae:e0:46:92:30:9d:68:a3:db:de:
b5:38:b3:66:f4:02:c0:18:8c:ad:18:23:48:c5:8a:7b:dd:86:
1f:05:31:94:73:05:19:e0:10:f4:44:a2:c2:46:70:84:40:7e:
e8:dc:18:cf:fc:48:a8:f9:20:5a:18:28:05:6c:35:11:1e:b9:
3e:8d:70:5d:dc:8a:fd:21:25:61:95:21:31:e0:11:f7:ad:a1:
2a:37:f1:45:41:f2:ec:9d:32:b7:f7:10:44:b8:87:fd:5f:ee:
da:6e:05:20:52:a2:15:1f:f3:40:b1:26:3e:64:bd:0e:94:74:
a1:bc:a2:dd:38:b3:c6:0a:7b:5e:40:30:fb:4f:d3:9b:1c:14:
c0:67:28:bd:27:b9:32:b4:28:1c:11:77:ee:a6:17:60:41:76:
36:d2:11:97:62:75:dd:7f:2f:4c:7b:7c:ef:44:93:e7:5a:66:
05:45:5a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:20 2026 by rpki-client