Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
File: 9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft (raw, json)
Hash identifier: fsufmOB3g2n5UOJgpdehXnTXWxkqhxR91ZT/e37Uqic=
Subject key identifier: BD:51:E4:D9:DB:70:67:5B:80:17:9A:2B:D9:FC:7B:68:47:F5:39:65
Authority key identifier: F6:56:FA:18:B1:19:C3:A4:9C:BB:CC:56:A6:04:57:43:9A:44:92:CE
Certificate issuer: /CN=f656fa18b119c3a49cbbcc56a60457439a4492ce
Certificate serial: 01A1DE715616E98CA4358F0BF06EF70CF7CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
Manifest number: 1A83
Signing time: Sun 15 Nov 2026 09:02:11 +0000
Manifest this update: Sun 15 Nov 2026 09:02:11 +0000
Manifest next update: Mon 16 Nov 2026 09:02:11 +0000
Files and hashes: 1: 9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl (hash: dRZDV+3V7zCNIFlLTjBPImzhVafNwEK4okslfwqGT4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:56:16:e9:8c:a4:35:8f:0b:f0:6e:f7:0c:f7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f656fa18b119c3a49cbbcc56a60457439a4492ce
Validity
Not Before: Nov 15 09:02:11 2026 GMT
Not After : Nov 16 09:02:11 2026 GMT
Subject: CN=bd51e4d9db70675b80179a2bd9fc7b6847f53965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:47:6e:e0:f0:84:d8:0f:75:e5:4f:0d:b5:
57:82:52:b9:35:8b:63:e8:76:e7:ca:df:f7:5d:ec:
ac:44:6a:c4:a3:5e:c1:6f:05:d6:83:42:f1:f3:fa:
43:26:2b:24:f4:2b:ef:56:41:67:23:ab:47:7d:5b:
84:83:14:19:1a:15:99:89:d4:9a:bf:8a:8f:54:5e:
12:e5:80:75:79:cc:43:81:73:1c:d0:ef:eb:cd:ad:
e5:b8:04:6a:ef:be:89:9f:cd:5d:5a:02:4d:5b:2c:
d4:df:29:1a:ea:7a:97:37:35:77:e7:25:2d:c1:dc:
e8:40:8b:e8:c6:93:ed:86:22:8c:9f:41:47:04:a7:
74:18:68:41:40:cf:9f:2e:66:ff:7e:8c:36:5f:ab:
b8:fe:63:f5:79:4b:ad:e0:fa:d1:40:88:b9:1b:56:
ea:d1:29:e1:d3:5e:18:97:7e:d7:0e:6a:19:ac:cd:
b1:a0:48:09:d5:8d:33:82:67:40:8e:b7:5b:0a:28:
89:0d:ff:e5:37:0a:39:b5:ea:f8:d6:f4:ab:78:77:
40:8b:69:b7:c5:81:49:8e:3a:b9:99:5c:79:f0:79:
f6:5d:62:e4:98:16:20:84:b8:4e:80:b4:30:bf:60:
20:33:4f:66:cf:45:64:19:8a:94:e7:d9:ba:61:88:
39:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:51:E4:D9:DB:70:67:5B:80:17:9A:2B:D9:FC:7B:68:47:F5:39:65
X509v3 Authority Key Identifier:
keyid:F6:56:FA:18:B1:19:C3:A4:9C:BB:CC:56:A6:04:57:43:9A:44:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:27:03:31:61:b8:05:09:dc:b8:84:ec:e3:88:97:3a:6f:dc:
a8:9d:9c:0a:7f:37:3f:dc:f7:c0:ec:9c:82:38:d6:28:ac:b8:
39:a7:c9:9f:04:f1:07:f6:cf:fc:69:10:bd:a6:42:45:09:55:
1a:28:14:2d:3a:63:3a:8e:9d:4d:8c:8b:b7:40:e7:19:8b:ca:
0c:a4:02:c3:b6:de:d4:18:05:9c:3f:74:40:86:22:2e:97:ac:
fc:e4:1c:79:97:b8:ed:fe:75:4e:46:fb:9c:34:a9:29:ef:b9:
f5:7f:25:26:d7:2e:ea:c2:2b:fd:06:50:07:72:35:78:01:c9:
d1:ce:1a:b7:68:af:a7:18:4a:96:28:a4:74:54:88:74:ba:88:
07:17:4c:c7:30:30:10:18:08:a7:a0:46:28:42:cf:59:d5:65:
c4:1e:19:a9:58:bb:a4:94:42:6f:73:ad:fb:5c:38:30:71:f1:
9c:5e:e8:98:7c:41:5c:77:ca:88:fd:27:91:59:2b:a4:43:06:
37:9a:13:ff:26:8e:a0:f2:f1:ed:1f:fd:01:a9:64:4d:f7:9b:
18:72:59:f9:8e:bd:73:37:00:ac:d0:14:9c:95:a7:26:7a:71:
e0:a6:b0:1d:09:f7:ec:e6:49:0c:d6:37:b5:ef:05:97:93:5f:
8e:84:cb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:57:52 2026 by rpki-client