
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
File: 9bMQ6dROhHDWzYAJWQZssA8pHvo.mft (raw, json)
Hash identifier: r4yjfuecAIR/3wm7MIuS8usj2Vg3uE1pJkiXyOUi5jc=
Subject key identifier: C4:21:24:84:8E:E1:47:4C:C1:72:46:D6:91:BB:09:5F:AA:E9:FD:25
Authority key identifier: F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA
Certificate issuer: /CN=f5b310e9d44e8470d6cd800959066cb00f291efa
Certificate serial: 01A0010151B4D820B6147FFADBC8FC225DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
Manifest number: 1464
Signing time: Fri 14 Aug 2026 16:00:58 +0000
Manifest this update: Fri 14 Aug 2026 16:00:58 +0000
Manifest next update: Sat 15 Aug 2026 16:00:58 +0000
Files and hashes: 1: 9bMQ6dROhHDWzYAJWQZssA8pHvo.crl (hash: GsUq5tYTeLIGtv7wt8uvY5ydNTPx/tCKvXGv1KZKmzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:51:b4:d8:20:b6:14:7f:fa:db:c8:fc:22:5d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b310e9d44e8470d6cd800959066cb00f291efa
Validity
Not Before: Aug 14 16:00:58 2026 GMT
Not After : Aug 15 16:00:58 2026 GMT
Subject: CN=c42124848ee1474cc17246d691bb095faae9fd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7e:23:14:ba:ff:65:a7:15:e1:75:26:8e:da:
0c:2c:03:32:bf:04:cc:5a:7c:44:19:fe:71:a6:8b:
4c:2d:4a:27:97:ab:1a:e1:a1:f2:09:54:ea:4a:4b:
60:f7:c7:3e:d6:f0:4d:6d:9d:bb:4e:54:39:c3:5f:
63:68:5a:92:03:03:e5:65:9c:38:b6:94:0b:11:15:
ef:f0:34:8c:d5:45:42:63:ca:07:83:5c:a5:c9:d4:
66:95:de:e3:6a:ad:26:05:3d:fc:e8:f8:cc:8a:2c:
db:2f:b3:e2:7e:6a:61:b5:0b:5e:c0:02:79:3c:5e:
d3:17:09:3f:9d:77:ef:96:e9:46:ea:e3:1e:fa:26:
f3:d9:5a:62:2e:62:ab:61:d3:9c:b3:98:14:ac:53:
e1:5d:34:01:69:be:41:13:93:9e:3e:d9:d7:04:f4:
32:a6:db:96:cf:b1:80:8d:91:52:ff:93:1e:2c:05:
a0:01:76:5a:d6:cb:17:ac:ee:81:d2:f0:25:00:5a:
cd:0d:42:0f:27:62:79:99:c8:24:57:21:a5:3d:a7:
7a:f3:3d:fd:f7:b5:60:56:ca:f8:29:64:2b:b2:70:
5b:4c:c3:42:de:14:03:cb:6a:2c:24:15:43:dc:21:
c4:14:6e:47:31:a5:29:df:59:da:8d:cf:3e:8d:69:
ba:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:21:24:84:8E:E1:47:4C:C1:72:46:D6:91:BB:09:5F:AA:E9:FD:25
X509v3 Authority Key Identifier:
keyid:F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:12:5a:af:15:eb:5b:f3:5c:26:fd:e6:63:77:50:9d:74:4a:
5f:72:92:74:02:6a:43:9c:f0:9d:47:3f:22:4e:59:ae:3c:6a:
2b:8d:b5:9f:31:46:a9:99:44:bd:f9:ef:2c:23:63:cd:c5:02:
6d:15:20:4f:02:e6:30:66:20:36:f6:34:c4:58:f6:ee:da:e0:
b0:95:c4:11:95:75:97:2a:1e:d8:ae:59:71:77:b0:25:ad:15:
73:16:2d:18:ab:74:2b:9e:79:fe:4e:7a:d4:5f:53:d5:b6:a7:
6b:4a:c4:d8:1e:d5:24:08:1f:1e:ba:2b:f0:df:1f:67:f3:3e:
85:ca:7a:b7:ff:a8:7b:58:2e:4a:0f:37:f8:ea:8d:fe:3e:27:
12:fa:f4:44:6a:05:c4:28:7f:d3:f3:47:c2:21:39:c7:bb:21:
30:81:a7:a8:70:2e:5b:ec:32:42:80:13:7c:5c:46:9a:63:2d:
c5:6c:1b:b1:b1:fb:60:9a:fd:ab:ac:8c:2d:d3:98:ec:40:fe:
ef:ab:74:20:8d:a9:a7:6d:8c:45:51:73:1f:1c:aa:ef:d6:59:
81:41:d0:34:69:0e:00:52:9a:4a:44:d6:9d:70:2a:bf:c8:3e:
ff:5a:97:5a:56:bc:83:7a:6f:78:a9:68:b5:9a:30:58:e6:c4:
25:0c:b2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:19 2026 by rpki-client