Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/7bb576-35da-4ac1-b7ee-0a9c4bddc8ac/1/AIce9D_KCSFC2TVYXyGSZG9HTBw.mft
File: AIce9D_KCSFC2TVYXyGSZG9HTBw.mft (raw, json)
Hash identifier: z++h1Z7mnqFOriizSKjYUW+eZeo7245um6bPouC2n0I=
Subject key identifier: FE:D0:9C:21:3C:C6:73:7C:77:39:70:C7:A3:83:D5:05:83:D0:BF:CF
Authority key identifier: 00:87:1E:F4:3F:CA:09:21:42:D9:35:58:5F:21:92:64:6F:47:4C:1C
Certificate issuer: /CN=00871ef43fca092142d935585f2192646f474c1c
Certificate serial: 01A0CF6D9328DFFF1BFA36A73069399EF835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIce9D_KCSFC2TVYXyGSZG9HTBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7bb576-35da-4ac1-b7ee-0a9c4bddc8ac/1/AIce9D_KCSFC2TVYXyGSZG9HTBw.mft
Manifest number: 035F
Signing time: Wed 23 Sep 2026 18:00:59 +0000
Manifest this update: Wed 23 Sep 2026 18:00:59 +0000
Manifest next update: Thu 24 Sep 2026 18:00:59 +0000
Files and hashes: 1: AIce9D_KCSFC2TVYXyGSZG9HTBw.crl (hash: RTSKp3L3Z6WN8geDQAVYPwJqE95KCtYNuYEWRn82+34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7bb576-35da-4ac1-b7ee-0a9c4bddc8ac/1/AIce9D_KCSFC2TVYXyGSZG9HTBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7bb576-35da-4ac1-b7ee-0a9c4bddc8ac/1/AIce9D_KCSFC2TVYXyGSZG9HTBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIce9D_KCSFC2TVYXyGSZG9HTBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:93:28:df:ff:1b:fa:36:a7:30:69:39:9e:f8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00871ef43fca092142d935585f2192646f474c1c
Validity
Not Before: Sep 23 18:00:59 2026 GMT
Not After : Sep 24 18:00:59 2026 GMT
Subject: CN=fed09c213cc6737c773970c7a383d50583d0bfcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d6:af:1d:ae:8f:d9:a0:a9:2b:d3:02:5e:26:
97:3b:3e:7d:60:7e:fe:60:7d:7f:31:98:ec:36:21:
73:cd:fc:c2:63:91:eb:27:85:fa:67:19:c5:cb:6f:
10:cc:e0:7f:35:bf:39:ee:f4:14:2a:be:61:ee:d3:
4c:e4:aa:7d:91:db:37:a0:6a:c1:49:f5:5b:01:66:
11:be:f6:0f:27:74:6f:a0:52:44:27:8e:9b:6e:fd:
e5:fe:05:e2:cd:f5:a4:31:5c:75:cd:c9:9a:a9:1b:
c3:69:ee:e6:55:9d:f6:b8:aa:b0:27:a1:19:6e:41:
90:65:15:50:b2:25:c9:c9:f6:a4:b1:24:81:a9:ca:
1a:dc:18:5e:f3:20:32:dc:19:bc:90:2c:ee:4d:bf:
18:49:08:64:68:1b:38:18:fe:75:12:96:10:32:16:
38:28:13:49:11:13:57:12:1d:bc:b9:b7:a4:6e:6d:
87:5d:cc:70:f4:02:3a:f4:b6:96:c1:e7:5d:57:c9:
b1:86:73:80:cf:7e:24:69:ca:af:8e:b7:05:0b:d9:
c8:3c:8a:b6:40:a1:bb:4c:77:1e:d4:2c:02:4d:02:
3b:81:8d:05:77:19:62:5f:55:a9:f2:31:28:7a:79:
20:5b:6d:cc:df:eb:1d:c6:a7:3a:71:0b:ca:3a:a0:
7b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D0:9C:21:3C:C6:73:7C:77:39:70:C7:A3:83:D5:05:83:D0:BF:CF
X509v3 Authority Key Identifier:
keyid:00:87:1E:F4:3F:CA:09:21:42:D9:35:58:5F:21:92:64:6F:47:4C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIce9D_KCSFC2TVYXyGSZG9HTBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7bb576-35da-4ac1-b7ee-0a9c4bddc8ac/1/AIce9D_KCSFC2TVYXyGSZG9HTBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7bb576-35da-4ac1-b7ee-0a9c4bddc8ac/1/AIce9D_KCSFC2TVYXyGSZG9HTBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:23:7b:6f:d2:33:7a:2a:bf:0a:8d:cc:df:85:2a:fb:56:f1:
ce:3d:74:fd:a8:85:ef:58:25:a5:f4:92:5a:de:aa:15:c4:d8:
56:a4:e1:ca:98:e8:03:47:13:9b:b5:bf:23:d9:e2:99:09:f0:
58:5e:57:4b:22:a2:b7:66:92:4f:68:36:d6:54:04:02:ec:33:
4f:9d:d9:9d:76:f8:ad:b4:fb:f4:82:17:9d:16:79:3d:da:bd:
5d:72:c8:8e:13:eb:5c:56:53:28:93:a8:3b:99:a6:05:c4:64:
3e:9b:d0:b7:0a:c7:1f:ca:e6:9d:75:8a:06:d6:d9:c0:2b:a7:
92:b3:5a:96:68:06:32:36:1a:bd:c4:d9:5b:db:3d:d5:ad:ae:
bb:de:03:7f:26:5d:45:76:60:62:55:df:55:4d:ea:2b:6f:44:
f3:02:79:bb:c7:30:80:b2:02:fc:c7:09:bc:88:31:47:c1:27:
0a:e2:ef:ad:88:cc:4d:16:64:15:7a:5d:9d:67:2e:d4:c8:fe:
7f:d0:af:fe:60:6b:28:5b:ad:29:3e:91:81:6d:4d:42:75:d8:
94:61:31:28:34:c2:3a:a7:62:6b:d9:fd:57:ce:f8:ac:fb:9c:
a5:94:14:55:05:f8:56:0e:f2:fb:e1:5e:fe:e7:da:59:2f:36:
c1:a0:9d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:41:50 2026 by rpki-client