Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/CRwEAeBMa8u9gnBm9v8IVMeXDLY.mft
File: CRwEAeBMa8u9gnBm9v8IVMeXDLY.mft (raw, json)
Hash identifier: Tc9cJGuDL30TGo3mdINm0YGDCjvTPSHf1Gme0SATyM0=
Subject key identifier: 64:CB:F2:73:60:D3:1E:26:50:46:FA:B8:FC:6D:36:A3:98:B9:3B:E8
Authority key identifier: 09:1C:04:01:E0:4C:6B:CB:BD:82:70:66:F6:FF:08:54:C7:97:0C:B6
Certificate issuer: /CN=091c0401e04c6bcbbd827066f6ff0854c7970cb6
Certificate serial: 01A0404E588CF63279F90CA3E049B1CACEC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRwEAeBMa8u9gnBm9v8IVMeXDLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/CRwEAeBMa8u9gnBm9v8IVMeXDLY.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 23:01:11 +0000
Manifest this update: Wed 26 Aug 2026 23:01:11 +0000
Manifest next update: Thu 27 Aug 2026 23:01:11 +0000
Files and hashes: 1: CRwEAeBMa8u9gnBm9v8IVMeXDLY.crl (hash: gaK5d2E/qwZIY80qkmh93bEEaveUVv82I2fD1p0M0cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/CRwEAeBMa8u9gnBm9v8IVMeXDLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/CRwEAeBMa8u9gnBm9v8IVMeXDLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRwEAeBMa8u9gnBm9v8IVMeXDLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:58:8c:f6:32:79:f9:0c:a3:e0:49:b1:ca:ce:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091c0401e04c6bcbbd827066f6ff0854c7970cb6
Validity
Not Before: Aug 26 23:01:11 2026 GMT
Not After : Aug 27 23:01:11 2026 GMT
Subject: CN=64cbf27360d31e265046fab8fc6d36a398b93be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:48:38:b7:c8:6e:9f:c2:e7:6b:50:b9:ca:
e6:02:a2:06:a8:30:ed:97:de:c8:17:4c:79:53:d5:
44:d2:64:f9:b4:91:e1:61:5e:5c:2d:b2:80:55:e7:
a8:4e:f9:3e:87:40:28:fb:16:da:09:d1:c6:c3:ab:
31:20:bd:79:7f:ed:5a:a1:97:2d:9c:02:5f:0d:14:
c5:c7:30:c5:28:6b:d8:de:7d:c5:80:18:97:93:2c:
5a:de:d4:cc:26:a3:54:36:b4:f3:11:c6:bb:ac:b8:
7c:cd:04:8e:28:60:08:56:a7:25:24:8c:62:cb:cb:
22:f4:f1:57:aa:4c:5f:6d:72:19:09:8e:b8:c6:74:
4c:a8:c3:b5:c3:94:dc:d1:5d:12:45:14:39:33:cc:
04:41:f5:8b:ec:1c:68:9b:91:3f:ef:c8:fe:89:2c:
e1:a9:d3:d7:0f:51:d1:1d:34:c8:83:df:c3:b2:16:
72:7b:7b:8c:84:96:35:a0:c1:c2:f8:b8:3e:fe:ea:
88:ab:b1:a3:0c:29:b8:46:ae:37:5d:67:fa:e2:ad:
3d:8b:4f:6b:7b:3b:a9:3f:39:33:90:e6:7f:03:5f:
62:00:82:c3:84:44:c7:53:f9:94:d6:d3:36:80:20:
67:55:30:c6:7f:2d:fc:98:b3:a6:9e:29:8e:01:46:
8e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CB:F2:73:60:D3:1E:26:50:46:FA:B8:FC:6D:36:A3:98:B9:3B:E8
X509v3 Authority Key Identifier:
keyid:09:1C:04:01:E0:4C:6B:CB:BD:82:70:66:F6:FF:08:54:C7:97:0C:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRwEAeBMa8u9gnBm9v8IVMeXDLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/CRwEAeBMa8u9gnBm9v8IVMeXDLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/CRwEAeBMa8u9gnBm9v8IVMeXDLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:31:94:cf:26:52:56:64:6a:b5:f3:4b:4e:b1:de:d3:4d:77:
20:7a:8c:e2:a5:db:f6:01:82:dc:22:79:6b:cf:b2:b0:b7:e5:
33:70:81:c9:da:b1:04:39:5a:99:b9:8b:39:e3:c7:0d:12:dd:
0c:18:3a:7a:64:8a:55:5d:60:e1:bc:cb:50:7a:6a:23:27:22:
b1:7e:c6:6b:d0:f6:cc:ac:51:1b:bb:2b:54:0e:a5:41:9b:f0:
4c:36:1b:bd:8c:46:14:eb:ed:07:70:ff:47:e8:e8:80:30:b1:
25:fb:dd:ef:24:92:34:b5:f6:4a:cb:17:ca:28:9c:f8:db:3d:
21:35:89:61:4b:ee:af:da:26:41:ab:00:94:e0:bc:d0:6c:e4:
d2:76:51:23:d6:12:d5:79:27:62:d5:87:c3:e3:2d:d0:46:34:
37:9b:d7:81:10:0a:19:8f:ad:19:be:1c:fa:ec:09:c2:d6:52:
1c:5e:c0:8c:b3:fb:e1:62:e7:3f:4f:c3:19:f2:a4:55:9d:ba:
46:4e:a1:41:5a:24:69:a9:36:bc:f5:a1:45:b7:db:5c:19:dc:
05:53:a1:ee:0d:39:29:9c:e9:92:79:8d:41:df:65:c9:a8:e2:
68:bd:f4:96:45:fe:36:99:9f:d9:1f:88:27:43:79:f5:2b:fb:
2a:d7:ab:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:25:48 2026 by rpki-client