Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
File: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft (raw, json)
Hash identifier: hldCnlGkk8kr55qe9aG84Lf8ygx2u76ynY0ONUdOzpQ=
Subject key identifier: A7:02:F0:18:7F:C2:D7:12:0E:23:E4:52:E7:C3:8C:C6:3F:07:0D:52
Authority key identifier: F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
Certificate issuer: /CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Certificate serial: 019D39412D6F7586C6D30B0B72F6D2473482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
Manifest number: 1461
Signing time: Sun 29 Mar 2026 11:01:05 +0000
Manifest this update: Sun 29 Mar 2026 11:01:05 +0000
Manifest next update: Mon 30 Mar 2026 11:01:05 +0000
Files and hashes: 1: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl (hash: rtQd/Jx5g9E3wxlonjRHyQuVlcPMmSnoGGrCsMqkVaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:2d:6f:75:86:c6:d3:0b:0b:72:f6:d2:47:34:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Validity
Not Before: Mar 29 11:01:05 2026 GMT
Not After : Mar 30 11:01:05 2026 GMT
Subject: CN=a702f0187fc2d7120e23e452e7c38cc63f070d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0f:fa:fc:7f:e3:b1:0d:de:86:37:a1:50:6a:
94:b5:e8:c4:ea:3c:1b:de:cd:a0:0e:1f:d0:75:45:
b0:0a:54:ea:c0:b9:d6:39:fc:2a:7a:3e:db:69:05:
82:69:88:37:bb:d6:d3:65:cf:a1:09:6b:f7:c2:83:
cf:f7:b4:c1:53:9f:41:b7:c9:c5:6a:68:c7:89:94:
85:ee:65:a8:a3:65:24:6e:12:51:fc:4f:c7:5e:a3:
35:e3:14:78:af:41:06:b9:24:79:6f:22:e3:17:10:
5c:55:68:39:ba:61:aa:05:12:bc:f4:a1:11:3e:92:
32:9c:e2:a6:01:75:a9:b7:41:bd:fb:53:b2:4d:f3:
90:6f:d4:cc:7d:69:37:60:6a:17:a7:73:d8:da:91:
62:8c:0c:c0:87:c4:7e:97:8a:c4:81:1d:41:b7:fa:
0c:e8:21:85:cb:06:ff:36:26:cc:75:7d:69:34:2d:
75:67:63:12:33:4b:62:b7:d3:93:b7:9f:2a:25:0f:
98:6c:c9:31:a3:22:5a:ee:6d:a8:d5:2b:9c:88:93:
77:8c:29:cc:10:16:75:6e:86:e6:b6:08:bf:a0:7e:
a5:40:11:f3:80:d0:0c:6d:f7:22:da:25:4d:5a:08:
1e:ff:59:65:f9:6e:c4:54:a8:df:87:24:88:0f:ab:
22:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:02:F0:18:7F:C2:D7:12:0E:23:E4:52:E7:C3:8C:C6:3F:07:0D:52
X509v3 Authority Key Identifier:
keyid:F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6f:23:08:fe:a3:dd:7d:ba:af:af:af:02:04:c1:c7:67:bf:
f6:2c:04:cd:a7:3c:05:7d:16:0a:20:cd:f9:ba:cd:93:08:11:
7b:91:d5:ea:6b:36:eb:c9:24:f4:74:2e:a7:bb:e5:42:2c:5d:
1e:17:b0:c7:d7:11:8d:f1:72:9f:fb:ea:78:42:ef:68:7c:15:
08:1c:74:ee:1b:4d:8a:c6:75:28:01:4f:f7:0e:3d:4f:74:68:
12:27:46:b7:ec:1c:82:16:8a:d0:6b:7e:15:92:1d:fd:bc:07:
3d:a0:a4:a0:b0:ae:c0:18:13:bc:97:2f:d6:30:a2:66:82:12:
6b:5d:73:2c:0b:b2:ee:f3:f1:8b:5d:9e:7d:da:75:ef:c4:5b:
21:83:12:cf:b2:22:78:9f:9f:af:49:a9:f0:30:39:38:8e:9b:
fb:c8:b7:ef:80:30:e9:d1:b1:81:7e:75:df:75:23:63:c6:42:
05:d4:f7:db:2a:3f:16:f4:b6:b0:26:ea:90:de:bf:21:85:19:
89:b7:7e:c0:f1:af:61:f5:95:04:cd:27:7f:cc:78:f8:4e:14:
a9:ea:2c:f2:b4:77:22:71:86:fb:66:8f:19:76:0d:89:fb:8e:
2c:51:d2:30:3e:fd:54:f3:3f:ee:ef:ab:de:1c:5e:41:22:81:
ae:38:f3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:31 2026 by rpki-client