Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
File: 9bJzfl2X4RCOsEmQTemxbzauseA.mft (raw, json)
Hash identifier: fO4QOPjp+UOJD1NZFXMc1OniWdV+vFGYbqKYPk2J1Hg=
Subject key identifier: 87:96:0C:AF:1E:C3:7B:DE:DA:C0:6B:CE:50:70:18:F0:6A:61:36:11
Authority key identifier: F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0
Certificate issuer: /CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0
Certificate serial: 01A0C9D8BAFDE8397C1F993481EF87BF99DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
Manifest number: 1A66
Signing time: Tue 22 Sep 2026 16:00:19 +0000
Manifest this update: Tue 22 Sep 2026 16:00:19 +0000
Manifest next update: Wed 23 Sep 2026 16:00:19 +0000
Files and hashes: 1: 9bJzfl2X4RCOsEmQTemxbzauseA.crl (hash: uvvl1GebRkyxl+HjPx3kGP9O8HWu3FUiU9ApyipqYLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d8:ba:fd:e8:39:7c:1f:99:34:81:ef:87:bf:99:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0
Validity
Not Before: Sep 22 16:00:19 2026 GMT
Not After : Sep 23 16:00:19 2026 GMT
Subject: CN=87960caf1ec37bdedac06bce507018f06a613611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:80:6a:be:34:e4:0e:af:b2:d9:d7:60:f9:
53:98:1d:42:b8:53:51:23:2a:8e:06:03:46:fb:3e:
0f:7d:3c:66:27:3d:3b:c2:b8:d9:d4:27:63:2a:5d:
71:9b:30:83:08:55:7c:a1:2b:6d:5e:9c:45:e0:ef:
3f:4b:39:69:d9:5f:67:92:f0:78:ca:b4:5c:18:58:
b9:dc:cb:1d:9d:97:91:06:52:ec:f6:47:d7:14:dc:
ae:1d:d6:0a:99:38:b6:cc:16:85:eb:25:c9:27:4a:
0d:f6:37:ed:4b:cc:72:64:a4:d3:e3:57:cc:3f:22:
f4:d6:61:72:ab:62:e9:7f:59:5c:02:3c:1b:99:79:
21:33:b2:4b:9f:49:e1:a5:e5:0a:b1:52:25:61:5d:
64:0a:26:64:11:25:e0:21:ac:80:f4:9e:b2:5c:b0:
ca:8c:b4:9b:56:ec:df:07:69:87:e7:33:5b:bc:5d:
09:06:2b:90:85:b4:25:a7:ac:cc:77:41:51:31:c3:
3f:74:54:b5:94:06:5a:e6:1b:86:91:e4:c1:6d:9d:
e0:6d:74:7f:a0:4d:07:88:63:23:ec:09:9b:29:10:
f1:fe:f9:fa:1b:d2:f2:11:5d:c4:4a:d6:42:4c:e0:
c5:c9:22:bd:77:a6:2f:03:4d:35:ae:24:af:1b:10:
f4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:96:0C:AF:1E:C3:7B:DE:DA:C0:6B:CE:50:70:18:F0:6A:61:36:11
X509v3 Authority Key Identifier:
keyid:F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:26:6f:f4:28:e4:0b:d1:d6:c1:20:78:15:ff:34:9f:f6:a8:
92:1c:f3:42:00:98:cc:95:2f:ef:56:ab:4b:98:c7:af:76:9e:
fa:ea:99:c8:b5:84:9c:0c:67:33:f8:ac:6f:92:03:64:94:6f:
d6:c8:ab:7a:03:24:80:0f:84:a6:98:aa:fd:95:e7:fe:36:29:
41:fc:ef:ba:18:67:11:14:bb:fd:f0:98:b3:5b:0a:d8:2e:56:
8e:dd:b6:48:25:4b:01:e1:d8:2c:51:67:99:fd:c8:aa:58:63:
27:cc:da:77:bb:72:1b:8d:8c:17:f1:ae:37:50:a3:da:46:b8:
3a:a5:de:24:46:28:24:3a:c6:08:60:4b:d9:47:41:94:1b:c0:
66:84:a1:14:4d:a7:6b:af:60:0d:29:9b:00:9c:b3:2c:4e:dc:
bc:47:ca:40:fe:c0:17:5a:e4:e3:93:2c:c8:63:6f:9b:b9:b6:
04:0b:40:e9:f6:ab:72:8a:24:5d:3a:ca:3f:75:89:af:6c:9a:
01:17:14:c8:7c:3f:e8:26:c9:50:9c:3a:5b:8e:80:2b:79:17:
f3:9c:19:de:25:7a:11:23:a1:a6:66:33:4e:68:bc:42:3f:10:
7c:ee:d8:44:7a:72:7f:4c:d7:bf:62:52:4a:ba:ec:74:57:6b:
4e:82:16:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:13:00 2026 by rpki-client