Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
File: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft (raw, json)
Hash identifier: LHlPF9i5WtcXny4ceFakKEhAxPuy7XoPKCUPtHpgVOc=
Subject key identifier: AE:67:2E:3A:F7:23:40:47:7A:5C:FA:0A:02:BD:94:17:B5:7B:1E:2F
Authority key identifier: F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
Certificate issuer: /CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Certificate serial: 01A001DCDDD750BBC60C863CEDC09B69E202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
Manifest number: 15D2
Signing time: Fri 14 Aug 2026 20:00:46 +0000
Manifest this update: Fri 14 Aug 2026 20:00:46 +0000
Manifest next update: Sat 15 Aug 2026 20:00:46 +0000
Files and hashes: 1: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl (hash: M16WdgU1fEtL7a1vfd68F2u63tG0AzETQJXheUg0i88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:dd:d7:50:bb:c6:0c:86:3c:ed:c0:9b:69:e2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Validity
Not Before: Aug 14 20:00:46 2026 GMT
Not After : Aug 15 20:00:46 2026 GMT
Subject: CN=ae672e3af72340477a5cfa0a02bd9417b57b1e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:18:00:db:0a:a7:98:49:08:27:0e:e0:d4:
2f:d8:fe:82:13:35:73:af:30:c9:ed:3f:d6:cc:b8:
17:b5:0d:fa:e4:83:fb:d1:33:75:4a:52:8e:14:5f:
f2:50:ec:ad:27:44:cc:de:e8:15:6f:47:ea:51:13:
b7:0c:8c:da:fc:9a:34:4f:44:a2:25:a1:5a:6c:41:
f4:c8:81:25:3a:d4:dd:89:fd:7c:f4:53:68:14:af:
cd:e9:4b:30:4b:a4:4b:f5:e7:30:0a:b4:88:b2:47:
78:a5:22:4d:1b:e2:bf:4b:24:78:7c:5f:d3:00:ff:
3b:af:4e:ae:9c:e1:46:3f:34:5e:a8:c5:0d:90:9a:
9d:74:68:ae:f5:89:77:d0:7e:ed:92:50:5e:61:0e:
a6:ec:51:c3:0c:4a:57:e0:1a:ec:2c:e6:c7:85:14:
ed:75:70:70:9a:a5:e1:82:10:d9:e8:7f:7b:21:80:
b6:ed:b9:bd:b0:2f:25:dc:17:e3:d0:60:31:ff:bb:
6e:f6:a2:da:66:29:99:18:29:f4:5f:a3:81:94:17:
17:40:b5:78:b8:bc:46:ab:ac:e3:1c:a4:05:7d:03:
11:da:87:20:64:1b:68:99:9f:ca:25:3d:b7:46:ba:
e7:ea:fe:ea:f2:9e:28:aa:83:57:21:64:d2:51:fa:
74:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:67:2E:3A:F7:23:40:47:7A:5C:FA:0A:02:BD:94:17:B5:7B:1E:2F
X509v3 Authority Key Identifier:
keyid:F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:21:f9:a0:e8:2c:e4:ec:7e:dc:41:e8:ce:c9:b0:dc:fd:6d:
89:3d:30:54:5a:4c:aa:ee:28:e9:5d:30:69:8f:73:fe:2e:fb:
54:e7:5b:a7:00:a8:2b:b6:a4:3e:90:a3:ed:ad:87:2c:6a:d3:
8e:57:9b:90:fb:8c:a8:cb:85:93:e7:e0:c9:2d:65:e6:5a:78:
06:18:7b:85:24:1d:15:c0:30:28:b5:70:34:27:50:0d:d9:71:
6f:27:8d:61:13:8c:05:06:71:1c:37:2c:7b:f8:2b:8a:7a:3e:
1d:9f:4b:1f:29:dd:46:72:b5:9b:fe:9a:ac:fd:83:c1:24:7c:
7b:6a:fd:e1:fc:c7:46:ef:9d:57:43:7d:30:1e:21:0b:bf:0a:
fe:eb:ac:e2:21:36:d4:76:27:e3:85:69:d9:b6:a6:c2:17:31:
fa:e5:ff:e1:83:ae:05:14:df:9f:48:12:7f:74:54:c7:59:88:
5e:17:1f:da:60:b4:03:35:59:96:4b:5d:8d:a8:85:08:ef:18:
65:64:ea:bc:e6:24:ab:a8:d1:09:45:e0:c7:32:fa:75:d2:56:
65:8c:f4:40:13:ee:88:d8:be:a4:41:b1:26:c3:4c:df:c0:05:
6d:cd:d6:da:5a:26:84:72:f5:ee:5a:0e:72:28:3c:a9:c4:27:
6d:9d:5d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:35:58 2026 by rpki-client