
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
File: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft (raw, json)
Hash identifier: 7xRexQ+ray20Jfjyo20jqTyAuyyc5IrkYd3v0v1Gyo8=
Subject key identifier: 98:A4:B8:7D:A5:91:88:49:71:2B:3C:6D:6A:C3:F8:A1:17:F8:02:AF
Authority key identifier: F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
Certificate issuer: /CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Certificate serial: 01A0005D14C5445F12489A19D2E771C8A599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
Manifest number: 0634
Signing time: Fri 14 Aug 2026 13:01:35 +0000
Manifest this update: Fri 14 Aug 2026 13:01:35 +0000
Manifest next update: Sat 15 Aug 2026 13:01:35 +0000
Files and hashes: 1: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl (hash: xDzXJKZuYUcalQFZ8dtU5Lnq/Ivhtqzm1jw0fhDG9lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5d:14:c5:44:5f:12:48:9a:19:d2:e7:71:c8:a5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Validity
Not Before: Aug 14 13:01:35 2026 GMT
Not After : Aug 15 13:01:35 2026 GMT
Subject: CN=98a4b87da5918849712b3c6d6ac3f8a117f802af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:02:b2:a8:06:e4:13:32:44:67:0a:36:2b:81:
15:8a:15:13:a4:67:0c:bf:d1:36:d4:c2:97:33:73:
4e:e2:0d:a6:2c:89:19:6a:7e:05:44:dc:df:38:1a:
46:0e:04:73:4a:50:71:7f:a7:5c:90:a2:33:c9:7f:
ae:6a:02:b3:7d:8b:15:b1:15:43:22:5c:4d:14:72:
cb:e5:07:09:33:d5:55:f6:c3:d8:1a:29:f4:5f:eb:
c7:8f:68:a1:e6:63:05:43:0e:e5:8e:af:42:50:e8:
65:1a:d3:67:61:b8:a3:97:a8:99:d6:de:9a:7f:eb:
70:8a:25:94:17:c0:25:97:d9:12:63:3a:d2:ef:fb:
22:b8:a7:83:46:db:a7:35:a0:57:15:aa:89:a0:18:
6f:98:8f:4c:3a:b8:aa:33:e4:02:5d:71:ad:4f:10:
7f:21:a9:b7:18:f6:7b:be:7d:72:09:77:1e:03:7b:
53:f2:d0:90:90:8d:eb:94:67:db:61:ba:ad:53:4b:
34:09:4f:92:be:f5:bc:bd:c3:2f:4f:7e:24:2d:ef:
25:4f:35:82:c0:66:2b:70:38:87:29:e8:1f:9e:08:
b0:da:86:45:19:29:01:a9:27:4e:d7:8b:8a:9c:28:
eb:72:71:b9:02:77:1a:46:e8:ef:52:21:20:ff:22:
c0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A4:B8:7D:A5:91:88:49:71:2B:3C:6D:6A:C3:F8:A1:17:F8:02:AF
X509v3 Authority Key Identifier:
keyid:F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e3:b4:56:0f:72:06:df:c8:d0:b4:03:5a:14:bf:9a:81:bb:
1c:1a:4b:97:ca:c8:44:17:bc:77:8c:1e:46:1d:96:38:c8:d7:
0f:13:38:5c:a9:62:f8:44:29:76:d5:2b:c8:3e:e2:26:b5:8d:
0a:d6:53:8f:26:29:5d:89:63:ab:06:b1:36:d0:c5:23:28:81:
0c:cf:be:58:f4:c6:3a:8e:a1:a4:82:6c:6e:b3:aa:b4:98:41:
06:8b:d3:aa:45:d0:82:31:51:93:88:91:40:70:71:54:57:6b:
6b:0c:fd:e3:e6:2f:19:22:93:f6:22:32:8a:03:09:f7:e1:ad:
a8:e0:ff:74:81:1f:27:5b:75:bd:46:46:7a:e5:b3:9c:0b:01:
a6:94:b8:1b:95:84:fd:fe:6e:0c:c1:89:12:f1:98:9c:d5:63:
17:fa:79:98:ca:8a:d0:3f:ad:da:b6:9d:c1:43:40:f6:3b:04:
b9:0d:28:55:9b:5c:48:1e:b5:97:3e:45:7f:e0:ce:34:50:71:
a9:ba:99:02:2a:3a:c7:39:ee:19:2e:ae:95:32:33:77:64:37:
52:0e:94:71:91:3a:60:97:b6:f1:b1:2d:c1:30:df:29:2a:a5:
9e:cb:63:e1:6e:7f:f7:e5:b0:ce:50:9a:ba:46:0f:4b:05:ac:
9e:da:3b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:14 2026 by rpki-client