Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
File: 9fqTbNBbJl9g8zNAqMY952gvw18.mft (raw, json)
Hash identifier: 0szu+Qa7k9FapKuhTxPN1KWzFXdwYNKSk002CScPf8I=
Subject key identifier: EA:40:F2:00:9F:82:07:D4:7C:5B:AB:A7:08:63:D2:02:29:43:D6:A2
Authority key identifier: F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
Certificate issuer: /CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Certificate serial: 019F94370F6EC6A2CF0F3CA2D7005E76C761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
Manifest number: 09B5
Signing time: Fri 24 Jul 2026 13:01:04 +0000
Manifest this update: Fri 24 Jul 2026 13:01:04 +0000
Manifest next update: Sat 25 Jul 2026 13:01:04 +0000
Files and hashes: 1: 9fqTbNBbJl9g8zNAqMY952gvw18.crl (hash: PdqQbBl56zWFudQcdwQxxitXIE2nvlFcx/rt4C6PVhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:0f:6e:c6:a2:cf:0f:3c:a2:d7:00:5e:76:c7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Validity
Not Before: Jul 24 13:01:04 2026 GMT
Not After : Jul 25 13:01:04 2026 GMT
Subject: CN=ea40f2009f8207d47c5baba70863d2022943d6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:23:99:2d:59:b8:cf:a2:5e:db:97:dd:a0:
ec:88:39:41:ad:b4:9d:34:30:60:c2:c3:49:bc:93:
b3:4d:4f:21:4a:0a:06:de:96:2d:aa:4f:46:b1:52:
b2:ad:a4:fd:29:dd:c4:5a:69:c1:f9:31:fa:64:ea:
88:fb:0c:a2:ab:b5:3d:45:4b:f4:24:be:51:67:a2:
3b:5d:fb:df:ce:b3:a8:e1:22:70:d2:e4:6a:f3:25:
f9:94:ab:f9:60:e2:21:64:25:59:65:d0:23:17:3d:
46:20:7b:ea:be:8d:be:f4:61:85:1c:4a:03:61:d2:
d8:78:5e:f8:a8:35:be:29:b9:96:d6:84:3c:0b:f8:
8e:24:47:df:45:b8:94:ea:1a:2b:2b:4f:8e:65:fb:
ac:47:a5:e5:2c:0f:68:74:5e:48:cd:25:83:59:0d:
ae:7d:17:10:d6:4d:da:29:b4:35:99:4d:b2:2d:9d:
9f:83:3f:a0:e4:b6:6d:74:27:fd:7e:b7:42:01:d4:
52:ed:e9:88:a0:1b:d6:3a:ad:1d:d6:ad:61:20:fe:
00:9f:0c:21:46:25:1f:fa:83:38:dc:cc:f8:1b:6b:
2d:c7:19:5e:d2:07:5d:f6:1b:7b:0e:ee:ad:b3:7a:
34:58:64:b4:ab:e6:65:51:dd:a5:eb:97:5a:73:c9:
fc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:40:F2:00:9F:82:07:D4:7C:5B:AB:A7:08:63:D2:02:29:43:D6:A2
X509v3 Authority Key Identifier:
keyid:F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:aa:22:79:4e:2f:b7:66:12:7e:57:c1:75:a4:77:74:9f:b5:
fe:90:0a:71:76:13:db:d6:f9:78:f9:c9:58:7e:0e:6d:96:d9:
92:18:74:19:f7:12:ff:6f:2a:4f:b1:3d:9f:b5:f3:9e:87:dc:
10:e2:d1:31:76:5d:ad:36:c0:31:7b:1b:f3:bb:de:55:80:5e:
a7:b7:5d:b2:79:ad:b1:46:44:5e:6c:0a:7f:de:cf:f8:da:f5:
a8:83:c4:eb:1a:e8:69:29:b5:b8:f8:73:99:32:be:76:73:b5:
3d:fd:60:1f:76:b3:78:b3:a8:9f:6d:cf:81:53:8c:e7:3b:a3:
1c:b1:f8:13:3c:6d:d5:d2:2d:fb:75:74:6a:80:dc:95:36:7c:
ac:af:66:62:3a:72:2a:73:37:37:32:86:c9:37:b6:46:60:2a:
b9:86:bf:1d:53:1d:df:52:c4:a6:87:8c:40:5d:31:5f:a7:3f:
01:0b:44:2d:00:be:16:7b:85:37:b2:2b:43:90:f3:be:a2:41:
83:aa:8f:02:92:5d:37:9f:3f:0c:27:5a:b4:71:02:ea:e4:0d:
27:5e:e4:78:34:fb:fc:f3:07:2a:17:07:6c:35:8e:14:e9:40:
a1:b5:27:5e:91:c8:54:d7:49:8f:d0:1d:ea:e2:71:9d:52:3f:
eb:5b:28:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:54:12 2026 by rpki-client