Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
File: 9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft (raw, json)
Hash identifier: sQNkKCEWosoDlHd8BCvptE1dfs4578G3V2hREXbBUFc=
Subject key identifier: C0:46:25:C8:64:5B:45:EF:34:5C:D5:3B:71:60:2D:5E:5A:AE:64:3C
Authority key identifier: F6:56:FA:18:B1:19:C3:A4:9C:BB:CC:56:A6:04:57:43:9A:44:92:CE
Certificate issuer: /CN=f656fa18b119c3a49cbbcc56a60457439a4492ce
Certificate serial: 01A0D9BA3747C0B18A0A02513B95C665436D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
Manifest number: 19FC
Signing time: Fri 25 Sep 2026 18:00:54 +0000
Manifest this update: Fri 25 Sep 2026 18:00:54 +0000
Manifest next update: Sat 26 Sep 2026 18:00:54 +0000
Files and hashes: 1: 9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl (hash: qlrjqepzPyTt56P5KfFM9pxfyX/ttzjxwDPAc6w8+V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:37:47:c0:b1:8a:0a:02:51:3b:95:c6:65:43:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f656fa18b119c3a49cbbcc56a60457439a4492ce
Validity
Not Before: Sep 25 18:00:54 2026 GMT
Not After : Sep 26 18:00:54 2026 GMT
Subject: CN=c04625c8645b45ef345cd53b71602d5e5aae643c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8a:d3:c4:b0:ed:75:99:29:6d:3a:b7:d2:b7:
d2:45:50:b3:69:7f:af:15:26:29:bd:e5:1e:8c:03:
e0:ec:dd:08:a1:70:8e:04:cc:fd:55:7d:50:37:a6:
6d:04:59:e5:68:95:90:c3:fe:d4:67:1a:7d:c4:d8:
f1:c5:fe:40:a1:ad:6e:42:1c:9e:cf:79:40:ca:41:
2e:31:5e:94:9d:2c:d6:c7:76:80:bf:03:14:69:d0:
b9:5a:1a:c3:bd:52:9e:a3:c1:2d:25:65:2d:da:cd:
34:f2:6b:da:9c:15:bd:9b:cc:f0:bc:84:7c:d6:5d:
7f:81:9f:fa:f7:80:47:e9:4f:e6:30:17:8b:b5:45:
a2:b7:ea:fc:f7:75:a7:26:94:5e:49:4a:63:51:5a:
f0:f0:2b:fd:c9:36:a5:dc:bd:76:cf:2b:6c:da:6b:
09:bb:15:e5:f3:d0:a9:7e:54:e8:fd:b4:c2:ec:0f:
58:77:a4:42:35:cf:bc:3b:4f:49:72:fa:4d:76:60:
17:1e:e7:30:eb:3d:45:44:6a:c0:c3:58:28:75:ca:
00:8b:4b:c2:cd:a3:a4:cd:87:da:36:f3:16:6e:24:
00:a6:2b:fc:94:52:b7:6e:17:78:ff:7e:f5:ad:2a:
d1:49:0f:eb:9c:50:0d:9c:9b:52:d1:f9:43:f8:bf:
73:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:46:25:C8:64:5B:45:EF:34:5C:D5:3B:71:60:2D:5E:5A:AE:64:3C
X509v3 Authority Key Identifier:
keyid:F6:56:FA:18:B1:19:C3:A4:9C:BB:CC:56:A6:04:57:43:9A:44:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:df:cd:ea:cb:18:3e:08:31:c7:04:ae:c2:46:4b:fe:ef:af:
6d:f5:ef:76:d9:76:a6:62:34:1b:98:00:91:7f:0c:ed:c6:b9:
79:ae:71:0c:ef:70:98:62:0a:ac:65:49:3c:59:f2:8c:15:88:
66:50:4d:c4:a9:7d:75:cb:ed:fa:46:13:60:99:97:7c:81:23:
cb:a1:66:95:16:56:54:e9:9a:c2:f7:ef:b3:db:7d:f2:78:77:
91:90:fa:ca:8f:82:75:b3:d5:14:e5:00:43:be:2c:95:2e:bd:
41:fc:87:a6:95:29:08:bf:8b:56:1d:5c:e5:10:71:d9:12:3f:
56:d3:31:a4:0d:30:b3:57:ba:88:58:72:23:bc:a8:c6:b2:dc:
ce:10:30:44:e2:92:52:31:72:6d:9c:7a:8b:e3:a5:b3:11:42:
8a:1d:c7:71:58:c9:14:59:d5:ab:5c:82:70:0c:fd:06:04:41:
7e:f1:40:42:02:4c:71:0f:de:09:31:93:77:4e:f3:e9:d2:82:
23:8e:13:6f:b7:90:2c:9b:c1:f5:53:81:6b:c5:88:dc:85:fd:
32:33:41:fa:3d:66:90:98:0e:79:26:98:49:9f:2d:f0:3d:57:
7c:0e:9e:32:ea:44:5d:ab:8f:a3:49:72:f8:17:bb:03:bf:2a:
d9:46:22:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:27:31 2026 by rpki-client