Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
File: 9bMQ6dROhHDWzYAJWQZssA8pHvo.mft (raw, json)
Hash identifier: W8SOtXkARybWxZhEDB7rh0fGIYBXeCZ1VkUyQeHFW3I=
Subject key identifier: 77:44:D0:54:84:67:86:4F:B6:DB:69:3C:8B:EB:A6:9D:58:F0:55:50
Authority key identifier: F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA
Certificate issuer: /CN=f5b310e9d44e8470d6cd800959066cb00f291efa
Certificate serial: 01A13DB7D0B578F27E51E96952206BD1EDDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
Manifest number: 1508
Signing time: Thu 15 Oct 2026 04:00:19 +0000
Manifest this update: Thu 15 Oct 2026 04:00:19 +0000
Manifest next update: Fri 16 Oct 2026 04:00:19 +0000
Files and hashes: 1: 9bMQ6dROhHDWzYAJWQZssA8pHvo.crl (hash: uIj8kcT9UbqidZR/PUUIW0m1yl7t+QL9ijt4qg0m1UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:d0:b5:78:f2:7e:51:e9:69:52:20:6b:d1:ed:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b310e9d44e8470d6cd800959066cb00f291efa
Validity
Not Before: Oct 15 04:00:19 2026 GMT
Not After : Oct 16 04:00:19 2026 GMT
Subject: CN=7744d0548467864fb6db693c8beba69d58f05550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:6d:55:fb:34:65:58:8f:62:9a:40:2f:29:
ed:39:96:68:15:53:22:1a:4f:a9:9e:59:08:87:cd:
f2:8d:4a:93:06:e3:be:98:41:bf:50:80:73:78:46:
17:2c:8c:a8:58:c1:d4:d9:fc:42:56:85:6c:e3:40:
f7:a9:06:17:49:7b:1f:7b:db:60:44:21:c2:a9:2f:
72:20:ee:ba:5f:a9:ee:d3:05:bc:62:f0:6d:76:d6:
e3:e2:2f:33:b7:79:17:e4:4c:8e:7a:ec:6b:fd:19:
8e:71:ff:e3:96:93:e1:9a:22:5e:dd:e6:70:d4:0d:
66:7e:9e:d6:3a:2c:13:89:4b:65:7d:25:90:12:57:
7b:4a:35:26:3a:f3:a5:aa:e9:11:5b:fe:87:7e:90:
41:b1:c8:f3:d1:3b:21:17:fc:56:18:cb:33:a1:f8:
15:01:01:3a:08:74:52:d5:6a:70:06:5b:a0:a7:8e:
46:01:65:86:d3:ef:2b:4e:c7:f1:67:4c:9f:41:c2:
fd:c4:b7:94:ee:f3:24:85:1a:98:54:d1:0d:95:fd:
b1:fc:9f:30:80:25:f0:21:af:96:ee:f0:6c:5e:70:
a3:2e:17:3b:49:eb:ad:6b:23:90:2f:e4:2f:07:18:
2c:74:00:f3:62:b2:f4:5a:06:ee:18:72:1b:b2:0e:
00:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:44:D0:54:84:67:86:4F:B6:DB:69:3C:8B:EB:A6:9D:58:F0:55:50
X509v3 Authority Key Identifier:
keyid:F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c0:ab:2a:e6:c4:a3:f0:fd:3b:43:2b:bb:a3:16:93:c9:d6:
c2:7b:c1:5f:d2:e3:0a:b2:21:b5:24:8c:5b:ca:b7:e7:c9:21:
73:2a:2e:7b:f3:a3:48:5f:eb:53:04:05:cf:37:0e:ba:32:02:
78:9b:f9:3f:68:91:e4:84:e0:84:ec:3d:3b:28:b8:12:63:c7:
80:52:49:4e:cf:db:40:59:ae:8c:70:5c:1b:11:62:b3:6a:79:
e0:65:02:43:88:d8:68:a0:86:70:d1:fa:5c:f2:75:bb:67:75:
30:6b:4a:43:4e:a2:7b:55:e1:fd:7a:16:e3:32:db:db:70:36:
42:1d:5c:49:3c:88:c0:5f:2e:a7:b2:c9:bd:22:2e:bc:5a:da:
6c:6f:80:f9:89:57:0a:8a:60:ed:cf:cf:80:d4:c6:df:8d:68:
da:91:99:d0:85:b6:04:1c:9c:ab:5c:eb:2e:f7:26:09:b5:6b:
ea:f5:b2:b6:67:17:0e:35:f2:31:47:10:28:11:35:10:b6:9b:
15:a5:ce:3d:c3:09:7b:24:6b:3e:25:62:79:e9:13:c0:33:b3:
39:be:94:27:95:f7:58:56:45:8a:0b:33:89:35:6c:b0:69:5b:
10:b5:2e:77:30:21:15:a5:b0:ae:a6:c5:b7:dd:02:8a:8a:3a:
53:00:da:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:05:47 2026 by rpki-client