Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
File: 1-muQgEgTpldoh5it3nvb0ObQ5T4.mft (raw, json)
Hash identifier: 9dqt1tXDfNXKvb9pF64UDv9DFcynP641Y0RlSiL3Lws=
Subject key identifier: 5A:20:05:D3:BE:E0:D7:70:71:F0:69:B7:6B:5D:3A:C6:97:94:4E:1A
Authority key identifier: FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
Certificate issuer: /CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
Certificate serial: 01A0CEC89CCB36F7A66984AA947C37B012B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
Manifest number: 098F
Signing time: Wed 23 Sep 2026 15:00:48 +0000
Manifest this update: Wed 23 Sep 2026 15:00:48 +0000
Manifest next update: Thu 24 Sep 2026 15:00:48 +0000
Files and hashes: 1: 1-muQgEgTpldoh5it3nvb0ObQ5T4.crl (hash: Cpc1IBaTqn3Cn475/5m1LJrxFoYuV//wgR9a1ngDppw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:9c:cb:36:f7:a6:69:84:aa:94:7c:37:b0:12:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
Validity
Not Before: Sep 23 15:00:48 2026 GMT
Not After : Sep 24 15:00:48 2026 GMT
Subject: CN=5a2005d3bee0d77071f069b76b5d3ac697944e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6b:b5:41:18:f7:32:c2:9b:af:eb:4a:65:32:
6c:00:86:bf:22:9f:aa:bc:4c:56:16:aa:e9:e1:93:
95:7f:85:35:80:3a:79:0d:08:c4:5b:d5:89:ab:69:
65:35:7e:c0:c9:71:41:75:18:3d:a8:59:ad:17:b5:
0a:be:4f:22:df:d2:b1:0f:e6:37:c6:df:8b:00:af:
19:d3:24:fe:ab:4f:31:ea:75:f8:93:8c:36:db:8b:
4e:4a:ac:97:29:eb:de:65:b5:f1:f6:9e:2b:e9:ba:
df:05:31:95:97:ac:2a:96:6f:fc:d1:7d:4c:7f:48:
7b:73:75:28:59:63:af:88:2c:50:8d:92:08:d5:00:
15:ee:36:69:a3:60:49:15:58:de:ff:b9:f8:fe:8d:
dd:df:30:15:42:61:52:82:74:d9:9b:72:11:9a:3b:
f8:09:5b:f0:a4:f5:f2:e7:f5:d2:94:2a:f5:89:5d:
05:c5:38:34:d4:7d:33:6d:b0:ea:12:87:5a:2b:5e:
ce:fe:96:58:3e:20:cc:a6:5f:f7:04:02:0b:e8:28:
12:9c:9c:7b:7e:2b:28:95:48:ff:83:29:d6:e5:bf:
1c:d3:ad:17:ed:e3:b9:03:f2:29:02:8b:73:76:9b:
6d:cc:02:b5:d1:77:17:dc:56:6e:3a:b4:7e:49:f9:
ae:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:20:05:D3:BE:E0:D7:70:71:F0:69:B7:6B:5D:3A:C6:97:94:4E:1A
X509v3 Authority Key Identifier:
keyid:FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b8:68:73:eb:04:bc:f4:cb:e7:e5:56:cd:04:02:c6:3c:03:
73:ec:a4:37:44:31:13:c6:0f:6b:ff:b8:c5:5c:94:02:84:29:
9a:ce:f7:93:00:52:5e:b2:0e:23:9e:73:52:47:3a:c9:37:43:
c0:45:b8:c9:1d:eb:f3:71:82:4d:63:44:31:24:f9:4f:6e:77:
32:c6:63:a2:4c:73:e6:42:be:45:c1:dc:a2:81:5c:8c:e8:09:
eb:0e:cc:6f:a5:0f:91:a9:f5:f9:90:ca:35:82:c8:28:f2:b7:
28:20:8d:e3:a5:da:45:f3:e8:15:26:71:a5:37:f3:15:6c:ee:
fe:1a:d7:5b:79:f9:8b:6c:e1:0d:a2:d1:c7:f2:08:7a:ae:e7:
67:de:5a:48:3b:2b:41:71:c8:fe:58:a9:12:02:1c:9c:22:b3:
52:93:00:5c:ba:e0:d0:79:92:4f:ba:5b:95:0b:be:2a:73:6f:
79:ff:f6:4a:67:ca:26:df:07:7e:71:9f:45:68:5e:2c:b5:0c:
b7:f9:01:ab:c2:35:35:9b:14:f1:82:bc:76:86:60:0f:a1:28:
f8:41:89:2a:95:9d:80:a4:d9:98:17:d4:7d:3f:15:34:f5:4c:
3e:60:ec:ab:f2:95:f5:d1:2f:f0:21:e5:76:ef:a1:ea:60:41:
9a:8f:55:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:34:12 2026 by rpki-client