Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
File: 9fqTbNBbJl9g8zNAqMY952gvw18.mft (raw, json)
Hash identifier: Zw1OI4XKY8fr88YvZMzGluggKCh7eQJpl3RREWSyjl8=
Subject key identifier: E5:19:98:45:83:E2:FF:50:EC:D9:61:44:43:D2:9F:FA:C4:65:5A:44
Authority key identifier: F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
Certificate issuer: /CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Certificate serial: 019D2A3B715F87D8E89393C50D94BA2E4B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
Manifest number: 0875
Signing time: Thu 26 Mar 2026 13:00:31 +0000
Manifest this update: Thu 26 Mar 2026 13:00:31 +0000
Manifest next update: Fri 27 Mar 2026 13:00:31 +0000
Files and hashes: 1: 9fqTbNBbJl9g8zNAqMY952gvw18.crl (hash: GRoxU1ceu1nRoPnKA63RNPEI6wgzscnJXcrV4dVnq94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:71:5f:87:d8:e8:93:93:c5:0d:94:ba:2e:4b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Validity
Not Before: Mar 26 13:00:31 2026 GMT
Not After : Mar 27 13:00:31 2026 GMT
Subject: CN=e519984583e2ff50ecd9614443d29ffac4655a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1e:70:95:69:6e:93:90:eb:92:08:c7:ee:73:
a5:bf:e0:41:83:73:e6:a5:6b:de:e7:52:9a:cf:7c:
aa:cf:d9:63:9f:e5:81:f4:eb:e0:00:a3:a8:aa:4d:
e5:9d:ad:b8:e0:55:aa:ef:90:76:f9:7d:27:31:8c:
14:46:9c:6a:b2:98:9f:a6:c3:ed:e3:e0:6e:00:fe:
34:b6:d2:2c:ae:b7:e8:9e:9d:26:7e:74:c3:63:0b:
6e:76:2e:8e:76:5c:41:d1:fc:b7:89:8a:bc:da:32:
19:e6:f3:e6:5a:79:b2:24:45:fc:24:0b:ac:41:b9:
1b:4c:bd:0f:0d:bc:c8:f6:91:cc:bf:ad:46:6d:c3:
eb:d9:ae:a1:3b:35:54:b7:20:76:6e:f8:dc:b7:e0:
e3:56:a4:e4:90:39:fc:eb:75:99:1d:9f:cf:7d:5f:
d0:17:a9:d2:be:64:c8:58:bd:01:e3:f0:c6:f4:a0:
ce:fa:14:89:9a:af:3c:8e:fc:c9:07:dc:b8:65:a9:
ae:df:20:f1:d8:cc:4b:d0:f9:03:4d:8a:f2:68:e4:
96:c7:b4:f2:43:4c:c8:67:25:c4:10:44:61:b8:e3:
1d:a5:10:f8:3b:bf:e2:7b:44:79:5e:af:77:bd:56:
38:66:d4:29:48:1f:88:b3:81:75:fa:f5:4e:72:83:
2f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:19:98:45:83:E2:FF:50:EC:D9:61:44:43:D2:9F:FA:C4:65:5A:44
X509v3 Authority Key Identifier:
keyid:F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:35:07:d0:fc:59:8c:a8:09:67:19:a4:74:42:dc:24:80:c6:
40:43:42:86:91:3b:2a:86:bb:88:72:72:f0:eb:fd:ed:0d:8a:
2b:6e:c5:36:72:1c:b6:1d:da:04:fb:e7:ec:eb:e4:ce:45:0e:
eb:b0:40:13:9a:d9:b8:ef:62:23:8f:18:42:0a:8c:3f:7e:2a:
94:92:6f:c1:6d:54:a6:05:95:7f:65:c6:8a:d5:f5:4b:f2:73:
ce:21:09:53:e6:d9:10:5b:14:6a:b4:64:e0:3a:b8:05:98:42:
47:9b:b8:c1:bd:73:91:53:b3:50:92:aa:42:8a:43:b4:d5:c6:
54:cc:0b:bd:10:50:d7:05:b3:5a:d6:e5:12:80:1a:90:8f:c0:
fc:1e:6f:81:9b:eb:c0:89:c8:b1:28:12:8b:1d:bd:2d:33:28:
4f:2a:ec:60:ba:37:0e:2e:59:1a:f2:8e:27:4c:3d:5c:14:8b:
d3:2b:0d:65:64:b4:94:4d:2d:e4:c1:1c:06:e7:b0:12:7a:6c:
e3:3a:2c:94:a9:13:c1:99:2d:ab:71:e7:89:8a:46:7b:5c:69:
f0:2b:42:29:dc:72:1d:60:0c:40:43:ad:23:44:5b:0c:ef:03:
94:6f:bc:92:80:6c:4c:96:30:91:3d:f7:ac:1a:89:e0:50:d1:
46:b8:de:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO3Ffh9jok5PFDZS6LkudMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZmE5MzZjZDA1YjI2NWY2MGYzMzM0MGE4YzYzZGU3Njgy
ZmMzNWYwHhcNMjYwMzI2MTMwMDMxWhcNMjYwMzI3MTMwMDMxWjAzMTEwLwYDVQQD
EyhlNTE5OTg0NTgzZTJmZjUwZWNkOTYxNDQ0M2QyOWZmYWM0NjU1YTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzh5wlWluk5DrkgjH7nOlv+BBg3Pm
pWve51Kaz3yqz9ljn+WB9OvgAKOoqk3lna244FWq75B2+X0nMYwURpxqspifpsPt
4+BuAP40ttIsrrfonp0mfnTDYwtudi6OdlxB0fy3iYq82jIZ5vPmWnmyJEX8JAus
QbkbTL0PDbzI9pHMv61GbcPr2a6hOzVUtyB2bvjct+DjVqTkkDn863WZHZ/PfV/Q
F6nSvmTIWL0B4/DG9KDO+hSJmq88jvzJB9y4Zamu3yDx2MxL0PkDTYryaOSWx7Ty
Q0zIZyXEEERhuOMdpRD4O7/ie0R5Xq93vVY4ZtQpSB+Is4F1+vVOcoMvMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUZmEWD4v9Q7NlhREPSn/rEZVpEMB8GA1UdIwQY
MBaAFPX6k2zQWyZfYPMzQKjGPedoL8NfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWZxVGJOQmJKbDlnOHpOQXFNWTk1Mmd2dzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82ZTc2NzAtNjMxZC00Nzg3LWFlZGEt
ZjE1ODZmYmRlODFhLzEvOWZxVGJOQmJKbDlnOHpOQXFNWTk1Mmd2dzE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC82ZTc2NzAtNjMxZC00Nzg3LWFlZGEtZjE1ODZmYmRlODFh
LzEvOWZxVGJOQmJKbDlnOHpOQXFNWTk1Mmd2dzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzUH0PxZ
jKgJZxmkdELcJIDGQENChpE7Koa7iHJy8Ov97Q2KK27FNnIcth3aBPvn7OvkzkUO
67BAE5rZuO9iI48YQgqMP34qlJJvwW1UpgWVf2XGitX1S/JzziEJU+bZEFsUarRk
4Dq4BZhCR5u4wb1zkVOzUJKqQopDtNXGVMwLvRBQ1wWzWtblEoAakI/A/B5vgZvr
wInIsSgSix29LTMoTyrsYLo3Di5ZGvKOJ0w9XBSL0ysNZWS0lE0t5MEcBuewEnps
4zoslKkTwZktq3HniYpGe1xp8CtCKdxyHWAMQEOtI0RbDO8DlG+8koBsTJYwkT33
rBqJ4FDRRrjeEg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:08:47 2026 by rpki-client