Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
File: f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft (raw, json)
Hash identifier: DYJ6IoIKTpblJq+156DZpq0g1wd57RQZNszth+5MRkg=
Subject key identifier: 4F:91:D1:C6:DE:15:96:EA:AF:7E:BD:31:87:E6:D0:08:DD:E5:50:BE
Authority key identifier: 7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46
Certificate issuer: /CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46
Certificate serial: 01A0DB3B068C409485E0150B030168894887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
Manifest number: 09C1
Signing time: Sat 26 Sep 2026 01:01:13 +0000
Manifest this update: Sat 26 Sep 2026 01:01:13 +0000
Manifest next update: Sun 27 Sep 2026 01:01:13 +0000
Files and hashes: 1: f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl (hash: wEJmhwOPBMOh4LcDm9hu78TAbYb8xFmCuH+HA/l2urM=)
2: mRB5Hkvcj1hKYhRgNGxK5sq7CD0.asa (hash: OW2a5vSieuRwC1YjVzbLfoP6BZPPRx+bPmnYVgXy6P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:06:8c:40:94:85:e0:15:0b:03:01:68:89:48:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46
Validity
Not Before: Sep 26 01:01:13 2026 GMT
Not After : Sep 27 01:01:13 2026 GMT
Subject: CN=4f91d1c6de1596eaaf7ebd3187e6d008dde550be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:a9:58:b8:af:24:1e:3a:44:24:da:95:f1:
6d:aa:4f:b8:93:99:a6:f7:7a:5e:46:2c:8b:ef:70:
18:40:bc:2a:66:46:82:c3:5a:11:dc:80:9d:8d:e2:
63:dc:38:0f:47:00:73:bd:ef:fb:94:c1:ba:47:d8:
6d:cb:9e:bd:c6:20:38:a0:a6:5f:04:ea:80:66:16:
20:5c:0c:58:2e:ba:38:9b:e7:a0:1a:7e:dd:3f:28:
83:b8:e6:4f:9a:f7:06:46:db:3c:a8:20:23:a9:85:
13:d7:77:85:c8:fb:6a:79:10:1d:a2:f0:5c:22:96:
d5:a3:eb:f8:49:10:f3:e1:9b:7b:ba:07:a3:74:42:
17:7d:48:c5:1b:ee:f0:c5:3c:3c:f3:f1:c1:30:1d:
a5:bf:a0:db:ae:c8:e8:3d:5c:78:55:6e:cb:f0:37:
07:f2:1b:f1:32:ba:57:a2:24:3c:00:0c:4b:3d:7a:
03:04:6b:c1:42:87:af:a8:04:8d:e7:bb:28:7f:f2:
3e:c0:64:99:05:ae:4f:bb:05:f7:d6:2f:3b:cd:94:
e1:5c:cc:c8:ea:49:fd:e9:cc:0b:d5:cc:52:32:c7:
0e:08:3b:0a:b2:9b:28:47:30:19:c8:dd:57:5c:74:
db:23:e0:38:3e:33:be:67:69:21:e5:2e:ba:2a:85:
d5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:91:D1:C6:DE:15:96:EA:AF:7E:BD:31:87:E6:D0:08:DD:E5:50:BE
X509v3 Authority Key Identifier:
keyid:7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5e:6f:99:17:c9:70:8f:47:97:f2:92:42:b6:cf:d2:f6:1f:
e5:56:28:f2:84:8b:d0:2b:ef:3f:27:56:4d:80:d0:9b:2d:24:
91:93:3e:3f:af:7c:a0:01:0e:9d:a8:09:52:28:a2:b3:cc:8c:
8d:e3:a5:3d:72:47:f6:ba:a7:33:49:22:fb:37:99:8a:0f:6c:
7d:13:a4:22:e1:92:3a:92:86:fc:20:72:5d:dc:bf:42:a3:d1:
d6:fc:bd:70:71:26:0e:d0:6c:f8:17:31:b6:42:63:40:27:54:
03:4a:ab:1a:2e:45:83:84:f8:3a:25:4f:08:a2:c7:2c:c8:e6:
2a:73:2f:81:f7:ce:c2:55:ff:07:b0:dd:34:cf:8b:78:60:aa:
10:3a:42:bf:b6:98:45:3b:41:63:69:1f:0b:72:3e:5d:71:f2:
14:c8:d0:72:83:6f:6e:f5:27:7c:23:d2:b6:28:f2:fa:21:2b:
a8:dc:42:6f:fd:0f:70:2a:1a:cd:ef:e2:fe:65:8d:3d:6b:bb:
a3:a3:ad:e2:eb:3b:f9:1d:b7:1c:34:62:d5:52:1a:11:97:97:
fb:15:8f:79:2b:2f:51:5c:7e:f3:ff:5d:07:a6:69:df:a9:83:
59:02:03:60:84:30:a8:c3:ed:ac:46:6d:78:e8:20:fd:61:19:
c3:08:9c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:11:22 2026 by rpki-client