Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
File: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft (raw, json)
Hash identifier: Xn6JiHn4ljplGHZ43aWtm/cMnnfy26VooOS9EyatAkU=
Subject key identifier: 2D:D8:3A:F4:4B:49:4E:14:64:71:BA:05:B0:2C:18:66:3B:DF:9D:D9
Authority key identifier: F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
Certificate issuer: /CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Certificate serial: 019E307269964C1A5C1E061EDEBA8B4571DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
Manifest number: 14E1
Signing time: Sat 16 May 2026 11:01:04 +0000
Manifest this update: Sat 16 May 2026 11:01:04 +0000
Manifest next update: Sun 17 May 2026 11:01:04 +0000
Files and hashes: 1: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl (hash: 7zyPpom4bUbqTFho9vwnij4ZRLQ3MDiC1gR8T8rPGow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:69:96:4c:1a:5c:1e:06:1e:de:ba:8b:45:71:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Validity
Not Before: May 16 11:01:04 2026 GMT
Not After : May 17 11:01:04 2026 GMT
Subject: CN=2dd83af44b494e146471ba05b02c18663bdf9dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:80:d9:c6:dd:f9:3a:ab:15:55:e2:9f:68:a4:
3d:48:96:80:bc:1c:8e:45:e4:99:37:1f:f0:e4:c7:
74:5a:8f:14:12:fd:b6:09:04:b8:75:b2:4e:47:f5:
81:9b:98:14:bc:46:b1:34:6c:7e:fb:08:89:6d:e1:
b2:1e:9b:7c:aa:b0:de:17:5c:2b:83:4b:73:59:30:
83:fd:64:59:50:35:8c:7b:1f:3e:71:56:05:f2:cb:
61:c8:9c:dc:25:94:56:ae:02:0c:3a:13:2e:28:d0:
ef:25:5d:73:db:4d:05:db:29:73:ec:cb:4c:7d:2d:
c7:e1:0b:d2:55:56:42:20:90:a1:dc:23:4c:7d:2d:
94:41:8b:2b:e4:b7:66:b0:99:36:b9:7a:00:21:3d:
fe:7a:0f:97:62:43:92:1d:90:c9:96:c8:06:3d:ae:
57:2f:5e:f5:b8:ec:31:c9:09:b7:e0:a2:6f:71:67:
30:ff:ed:7d:46:69:50:31:b8:5c:98:39:e4:d5:a1:
e9:b4:00:4d:df:b8:d2:56:64:4c:4b:7d:58:f3:c9:
3d:4b:e1:3e:30:d5:61:8f:2e:21:49:5d:3f:fe:6e:
51:d0:21:37:06:d7:f3:95:c0:8d:ff:bc:68:8d:46:
57:c2:34:68:85:e9:65:06:b9:6b:e2:85:a9:f4:da:
b7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D8:3A:F4:4B:49:4E:14:64:71:BA:05:B0:2C:18:66:3B:DF:9D:D9
X509v3 Authority Key Identifier:
keyid:F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:da:0c:c8:be:f4:17:34:8f:7a:a8:a5:6d:32:aa:7a:92:42:
39:0a:21:4d:e5:ac:26:8f:9b:a9:01:bc:09:98:8e:2b:d9:d2:
9e:eb:bc:ce:9e:62:3d:0d:44:98:8f:aa:98:d5:ca:e6:ea:d3:
fd:5b:3c:14:14:9b:98:6f:2c:b0:9f:aa:77:57:b3:b8:e6:a3:
62:74:11:a3:13:dc:84:96:db:47:f9:2f:c0:e6:3a:1e:c6:b8:
f1:b7:01:dc:aa:1b:e0:9d:45:e9:a8:36:a8:4c:7a:ca:cd:a6:
01:85:55:3f:be:39:38:4a:72:59:a4:ac:22:a1:13:59:d7:9b:
a8:00:49:88:7f:71:ef:1c:3a:6c:c0:7e:6e:a6:5d:46:58:cb:
4c:92:7d:fd:ae:1e:fa:31:63:41:50:3a:23:0e:1c:df:9a:92:
22:fe:79:b5:c3:c4:e1:18:d9:cc:a5:f1:4d:ba:8e:fa:0e:23:
52:67:51:cd:87:83:e2:f2:dd:6c:d0:c2:0b:07:fa:96:ba:b1:
dd:99:70:1b:bc:0b:61:dc:63:cf:fb:76:80:94:be:3a:86:5b:
96:59:de:4d:87:45:26:56:ed:5a:7a:4b:16:da:5d:70:91:ea:
d7:83:ce:b7:3f:02:f2:67:35:c7:fa:c0:9d:2c:70:3d:fa:a1:
14:cc:66:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:06 2026 by rpki-client