Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
File: 9fqTbNBbJl9g8zNAqMY952gvw18.mft (raw, json)
Hash identifier: 6RimToclPSPZQdmN9T5Exb2lPcLQvsAT2NzyY9Wn02s=
Subject key identifier: 0F:DC:B8:2B:56:19:53:89:FF:F2:9B:9E:5D:83:42:C4:F5:59:11:26
Authority key identifier: F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
Certificate issuer: /CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Certificate serial: 01A0E81C55FE23950D527F5233C0E84F7F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
Manifest number: 0A65
Signing time: Mon 28 Sep 2026 13:02:46 +0000
Manifest this update: Mon 28 Sep 2026 13:02:46 +0000
Manifest next update: Tue 29 Sep 2026 13:02:46 +0000
Files and hashes: 1: 9fqTbNBbJl9g8zNAqMY952gvw18.crl (hash: KBbTf1W5lbFOKfAqvGW/v2R7RWj3xnVA/M0sCCFGkCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:55:fe:23:95:0d:52:7f:52:33:c0:e8:4f:7f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Validity
Not Before: Sep 28 13:02:46 2026 GMT
Not After : Sep 29 13:02:46 2026 GMT
Subject: CN=0fdcb82b56195389fff29b9e5d8342c4f5591126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:3d:65:44:0f:d1:86:71:ce:29:39:94:3c:
ae:f0:07:1a:cb:33:1e:e1:fa:b6:ae:63:3f:b4:ac:
f9:de:64:ab:f9:e5:9c:00:4b:d1:04:e8:7e:e4:bf:
e1:2e:08:35:5c:d5:1d:3a:5a:e4:a7:8a:af:79:90:
68:c3:75:45:fa:fc:26:d6:e6:d1:cc:92:8a:f2:28:
d7:9c:3e:72:36:5d:10:3a:85:5b:6e:bd:63:b8:a5:
6e:32:7b:85:b8:b7:39:cf:bd:5b:9b:59:39:be:d3:
3f:77:32:13:c0:71:d2:03:04:94:1d:01:31:7a:98:
d8:a3:6b:f1:82:c3:4b:41:b2:fb:af:e4:3f:10:40:
7f:8e:0d:ee:b8:db:d8:f0:c1:7e:af:4e:e5:4f:97:
00:f6:2a:f7:4d:f4:cb:16:8c:ae:56:51:0e:b6:3e:
12:f9:ec:0a:68:3f:b4:0e:10:ae:56:7d:93:2f:b1:
59:a0:9e:fe:cf:86:f8:52:5a:29:de:6a:14:2e:ad:
2a:5c:7d:27:33:20:a6:9a:63:49:c2:08:29:69:d5:
e4:59:dc:39:28:c7:f3:04:2e:bf:99:ea:88:dc:5c:
b9:46:27:da:11:77:8e:1b:76:90:ea:b1:50:b7:3f:
d3:28:9d:6a:ef:c9:63:1c:7a:b2:bf:4e:6f:3f:ad:
12:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DC:B8:2B:56:19:53:89:FF:F2:9B:9E:5D:83:42:C4:F5:59:11:26
X509v3 Authority Key Identifier:
keyid:F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a8:d5:7c:21:5e:34:61:c5:d2:1f:c6:8b:50:82:61:0b:f1:
51:8a:b3:cf:b6:89:f4:0c:8e:28:56:3e:4a:33:72:3e:79:61:
1b:fb:ec:a6:60:08:36:ed:ea:7c:c8:c1:a5:80:35:71:aa:b4:
1e:17:45:41:a0:f3:f1:ae:5a:90:50:97:16:27:b0:ac:c3:de:
07:f7:ea:c1:f5:fb:5b:2c:5a:e0:b5:52:22:76:af:f8:a4:ab:
fe:fe:09:c2:07:3a:49:ef:c3:81:07:04:fc:3b:aa:1e:5c:c3:
77:e2:f8:af:78:ca:57:85:8e:8b:d0:f3:62:47:13:d6:5e:e3:
cc:41:ad:7b:05:64:70:11:d2:3d:59:a4:fd:cb:8e:bf:d1:d8:
64:bd:b2:9f:f7:ad:ee:42:18:8c:1d:6e:5c:60:8e:55:e4:ff:
55:bd:75:24:b4:bb:bb:85:1a:38:74:35:b6:3e:71:7d:69:ac:
2b:56:35:33:09:fc:21:e2:e7:82:77:6d:b4:3a:c9:a6:33:a5:
c3:2d:7c:e6:4d:cc:5a:ed:f1:df:dd:38:ab:3d:89:7e:91:e4:
65:a1:96:10:70:83:12:0a:0b:7e:05:ec:fe:a3:eb:b5:90:2c:
b8:b5:80:b3:0e:0f:e8:21:dc:84:dc:0d:09:82:c8:c4:5a:a9:
6f:91:57:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:06:59 2026 by rpki-client