Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
File: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft (raw, json)
Hash identifier: 4X+FDznisPIiyl2X1UPL9h9q37aFJ5stc35tbxFyLPU=
Subject key identifier: B3:2E:7E:08:22:CF:5E:01:06:D0:9C:35:4F:62:B6:5D:96:78:D5:33
Authority key identifier: F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
Certificate issuer: /CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Certificate serial: 01A13F026DE57E0794B60C457BC89B60008A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
Manifest number: 06D9
Signing time: Thu 15 Oct 2026 10:01:26 +0000
Manifest this update: Thu 15 Oct 2026 10:01:26 +0000
Manifest next update: Fri 16 Oct 2026 10:01:26 +0000
Files and hashes: 1: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl (hash: e8IOiZeDQ/ybzKngS20QVSptObpNwp9S57UHmTw6Wmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:6d:e5:7e:07:94:b6:0c:45:7b:c8:9b:60:00:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Validity
Not Before: Oct 15 10:01:26 2026 GMT
Not After : Oct 16 10:01:26 2026 GMT
Subject: CN=b32e7e0822cf5e0106d09c354f62b65d9678d533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:8a:e2:55:8d:27:cc:0c:a6:6d:04:51:b3:
dd:e4:c6:39:3b:c9:dc:86:62:c0:c5:ca:8d:68:4a:
63:0e:e7:d0:9e:3a:ce:5b:6e:b0:0e:a2:af:fe:60:
77:a2:d6:fb:8c:c4:a5:c7:58:e3:8e:61:3f:0a:b4:
b8:f7:d9:c4:28:70:da:dc:44:90:da:0f:c2:3f:9e:
97:ec:f0:a7:7a:94:3c:f7:8d:5c:2a:64:bc:b8:f5:
ef:21:0e:ec:a2:8f:92:11:1f:79:4b:a5:15:02:c1:
0f:b1:d7:50:8c:0b:48:87:c9:87:56:16:fc:34:a0:
c6:7d:f9:8a:2a:d6:4e:7a:11:a7:52:12:5f:22:70:
d0:9d:cd:52:29:a9:92:f7:76:6c:48:39:9b:40:2c:
23:d8:f9:ee:06:de:d1:43:72:2e:a3:7c:8f:28:b5:
dc:2e:54:12:47:5c:f0:a1:ee:33:f6:01:bb:99:fe:
34:eb:41:9c:e6:9b:4f:c0:ae:b0:23:1f:61:46:ea:
a2:72:2d:b6:7c:f9:1e:37:ed:33:77:a0:b1:6d:37:
b0:07:d9:d3:77:6a:de:66:4c:14:87:1c:a8:e8:89:
09:d9:28:09:07:c0:92:58:82:34:3c:e8:0d:87:25:
aa:c1:1f:ea:b0:6f:84:0b:21:07:25:b6:e1:9c:98:
8d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2E:7E:08:22:CF:5E:01:06:D0:9C:35:4F:62:B6:5D:96:78:D5:33
X509v3 Authority Key Identifier:
keyid:F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2d:b6:41:8f:b0:e8:41:b7:f7:e4:ab:a7:2e:8a:8c:30:a1:
9d:e6:6b:6a:f3:3f:34:bc:d1:5e:53:8c:8c:ab:18:98:f1:5c:
47:fa:17:96:5a:88:62:8e:d3:9b:3d:c6:6c:03:4d:ed:0c:9d:
30:62:b2:48:3f:8c:a9:94:58:a1:63:9e:4b:f4:d0:62:4c:51:
cb:5e:49:d2:3b:aa:ab:4f:66:34:ee:f6:a0:ef:6d:5a:ed:c5:
31:b2:a5:92:30:fe:0f:5c:74:80:c7:55:0d:5f:2c:a3:48:68:
cb:50:5d:6d:a0:76:9e:c2:27:9f:54:72:30:94:69:91:c1:a4:
17:01:6e:e4:48:ec:89:2b:16:cf:37:a0:0d:00:cb:10:a6:b8:
fe:59:b4:80:49:f4:a4:3c:26:da:3a:9c:94:82:8d:37:e3:d0:
b1:11:b2:48:56:4f:b4:2e:e1:3e:40:dc:79:f8:93:84:16:d4:
64:91:5d:ba:b5:ca:4d:e8:4e:04:b8:fe:5a:b8:ba:6a:fc:4c:
4f:b7:de:bf:2b:93:46:11:e6:81:7c:65:cd:35:f3:50:95:79:
a7:bf:aa:d8:52:e6:5e:8d:fd:2f:1d:b1:85:5e:fc:a7:e6:dc:
01:d2:d9:05:f4:86:a8:87:b0:1a:fd:e0:82:dc:6f:f5:64:50:
81:51:d4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:18:06 2026 by rpki-client