Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft
File: 1-ff4bGznPV12NAP0mO6zL3DEdK4.mft (raw, json)
Hash identifier: YhMpT9oD9mbfZ/7TnZ6B847wBroUi5YqsLtIxb6b7Co=
Subject key identifier: 74:D7:5B:0B:D0:E0:5F:94:26:62:CD:98:E7:1F:28:99:97:71:A7:AA
Authority key identifier: F9:F7:F8:6C:6C:E7:3D:5D:76:34:03:F4:98:EE:B3:2F:70:C4:74:AE
Certificate issuer: /CN=f9f7f86c6ce73d5d763403f498eeb32f70c474ae
Certificate serial: 01A0CAEBE36C3C53445F4A1F2D0A189F3099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ff4bGznPV12NAP0mO6zL3DEdK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft
Manifest number: 03B9
Signing time: Tue 22 Sep 2026 21:00:51 +0000
Manifest this update: Tue 22 Sep 2026 21:00:51 +0000
Manifest next update: Wed 23 Sep 2026 21:00:51 +0000
Files and hashes: 1: 1-ff4bGznPV12NAP0mO6zL3DEdK4.crl (hash: HonG4aiRNjB4vF68mgdOl6ICtAy6qyez4XnYFlCxnWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ff4bGznPV12NAP0mO6zL3DEdK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:e3:6c:3c:53:44:5f:4a:1f:2d:0a:18:9f:30:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9f7f86c6ce73d5d763403f498eeb32f70c474ae
Validity
Not Before: Sep 22 21:00:51 2026 GMT
Not After : Sep 23 21:00:51 2026 GMT
Subject: CN=74d75b0bd0e05f942662cd98e71f28999771a7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:08:28:d1:f2:d7:2b:81:b3:70:4b:ed:5f:
50:0b:2c:a9:0d:51:a4:5a:02:5a:9e:24:df:07:e9:
1a:20:9c:b3:ca:1d:ca:6e:30:d6:34:b5:94:1e:b1:
62:7a:98:b6:1e:b6:39:cb:0a:12:5b:b0:e9:e2:98:
4b:12:9f:a6:e5:ca:81:f7:ec:07:f5:97:2f:d8:4c:
f7:2b:81:e0:3e:99:40:4b:e9:c9:42:86:88:2f:7a:
6b:09:5f:f2:f6:c8:74:7f:84:7f:41:e7:b9:e6:50:
b5:14:32:d8:8b:b3:1c:24:a6:9b:5c:78:5f:7b:e8:
28:b1:60:ac:d5:55:d9:60:7e:1c:61:04:bd:95:e7:
f8:f4:b0:87:46:d7:12:dc:45:5e:17:1c:c3:0c:dc:
28:1d:ac:41:a4:03:90:0b:16:a7:16:2e:35:c6:47:
a0:83:50:82:1c:8a:4c:fd:03:d7:90:38:7c:de:0f:
b8:00:4e:e6:41:45:a3:49:f3:cd:47:d2:5d:d3:77:
9f:85:d1:5b:70:95:c8:32:a9:02:89:b0:bb:28:15:
23:d6:b7:cb:09:da:e2:56:82:5a:8a:84:e9:99:5c:
58:8c:ad:04:ca:eb:02:13:9b:65:cd:8d:02:95:aa:
72:97:0b:86:e7:98:db:6e:20:34:bf:6b:c2:e2:6d:
83:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D7:5B:0B:D0:E0:5F:94:26:62:CD:98:E7:1F:28:99:97:71:A7:AA
X509v3 Authority Key Identifier:
keyid:F9:F7:F8:6C:6C:E7:3D:5D:76:34:03:F4:98:EE:B3:2F:70:C4:74:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ff4bGznPV12NAP0mO6zL3DEdK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:44:34:c0:5a:3f:d0:6f:bf:41:47:f0:e6:cd:68:8d:02:4d:
ae:28:d6:1c:92:37:30:8f:6f:6b:1d:c1:34:e7:00:ec:7e:69:
5f:dd:14:76:6c:fd:00:e2:0d:7e:48:31:a4:2d:d0:f3:47:ed:
b9:0b:8f:fb:a1:96:db:83:18:8e:12:fc:50:cf:71:bc:7e:fd:
64:a8:ee:46:db:e8:6f:4c:7e:17:45:dd:a8:3b:ea:67:56:50:
bf:2d:cc:28:35:97:c0:94:99:5d:e7:29:fd:29:b9:e7:01:86:
17:fc:18:d6:45:d5:4b:38:f2:a2:f1:40:5e:b8:c8:5f:4f:c5:
a8:bb:53:c1:98:eb:09:20:b9:6b:07:b0:5e:28:c4:b6:5e:5d:
2c:55:77:53:40:2d:9b:1b:66:9b:db:a5:02:81:72:78:8e:4d:
a0:a9:22:4e:00:dc:f6:1a:13:79:26:1b:10:6b:b3:5b:41:02:
67:7d:9d:65:5d:9f:b9:dc:44:cf:9f:5d:33:62:71:68:94:34:
b5:9c:a7:b5:07:6b:8d:a4:a8:1e:30:03:8d:be:ec:4f:30:69:
7d:07:36:f2:59:70:a4:52:3e:0e:0e:50:31:19:fa:94:71:42:
17:10:77:12:7a:a0:d1:b7:9b:6d:64:d9:e7:7a:27:8c:e3:5b:
63:55:18:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:28:38 2026 by rpki-client