Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
File: _sl9DBu8zD2GcSKhFxD1X3AjAI4.mft (raw, json)
Hash identifier: Gps4L4NSjhOORAB/IXt7OF13SlKAxHFFvo3ISCOB9Ks=
Subject key identifier: 1C:38:2B:0B:12:90:73:23:57:D6:E9:80:4E:A6:87:CF:5B:7E:39:10
Authority key identifier: FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E
Certificate issuer: /CN=fec97d0c1bbccc3d867122a11710f55f7023008e
Certificate serial: 01A0E81D1C831D3F76A0B4433C7024F6C76F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
Manifest number: 0971
Signing time: Mon 28 Sep 2026 13:03:36 +0000
Manifest this update: Mon 28 Sep 2026 13:03:36 +0000
Manifest next update: Tue 29 Sep 2026 13:03:36 +0000
Files and hashes: 1: 42w4s7cc1vYrQJakM-RA4hC1xv8.asa (hash: aeAHEvSU6traM7AlMX4qRqQZlSyobtwKFlRtS36Ka2w=)
2: _sl9DBu8zD2GcSKhFxD1X3AjAI4.crl (hash: zfZyYNCz8Nb8LaZwWn9LNI6P64kzYJ/VWH6+tNdAtCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1d:1c:83:1d:3f:76:a0:b4:43:3c:70:24:f6:c7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec97d0c1bbccc3d867122a11710f55f7023008e
Validity
Not Before: Sep 28 13:03:36 2026 GMT
Not After : Sep 29 13:03:36 2026 GMT
Subject: CN=1c382b0b1290732357d6e9804ea687cf5b7e3910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ff:de:45:ba:b3:04:8a:42:6c:bf:cb:95:ee:
c7:f6:9d:a4:6f:3c:83:a5:15:38:77:39:c6:9f:b0:
01:58:e3:b6:10:d4:29:96:84:2f:5b:4a:58:3d:a8:
1b:fa:48:c7:ed:51:0b:ad:ec:57:2c:3c:9d:39:bb:
7c:b0:8d:2e:2f:9b:3c:8a:3d:69:af:ac:dc:7a:3c:
70:18:69:84:a3:9e:47:d1:c7:6b:da:bd:dd:af:da:
7e:e1:54:a1:17:c7:5d:ec:33:fa:40:bf:76:5d:58:
38:ed:cf:c7:6e:a1:a1:ce:61:83:69:54:eb:46:b9:
80:70:ba:35:3a:ba:e4:51:8c:e1:ec:67:a6:d1:ba:
69:a8:41:7f:94:42:ff:eb:b4:48:7d:ca:36:c0:b3:
f1:b1:bb:85:79:18:52:d1:11:d9:e9:5e:63:f2:11:
66:8e:6a:2a:ce:ac:84:22:cd:fa:b2:9b:37:9b:77:
72:84:e0:40:e2:df:d6:cd:31:97:4c:75:1e:a9:d5:
fc:13:2a:53:33:8d:88:f4:51:d6:30:d2:2f:66:69:
7e:f1:7d:81:d7:0e:57:76:6b:10:93:3a:51:d6:9a:
89:cf:dc:4d:d0:e4:bb:38:40:1a:e1:04:00:c3:10:
a3:ff:55:29:06:e6:4a:29:0c:a7:1b:98:97:7b:c5:
d7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:38:2B:0B:12:90:73:23:57:D6:E9:80:4E:A6:87:CF:5B:7E:39:10
X509v3 Authority Key Identifier:
keyid:FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:aa:64:16:11:bc:c5:30:0c:7c:66:6a:e5:40:6c:91:5d:27:
5d:c5:bc:dd:40:c5:9c:2e:1b:1b:cc:15:f9:ce:ad:3b:4f:72:
a1:51:cb:62:58:d3:8e:f1:08:be:fa:df:78:b4:0b:32:f1:b7:
1c:74:3a:6f:04:55:45:30:4f:fa:32:4f:18:fd:e7:af:8b:13:
f5:bc:b9:ef:98:f8:28:11:80:ac:6d:f9:bd:23:26:e2:f3:1b:
77:56:ae:a9:ff:b0:91:ff:92:36:21:82:20:78:0a:b5:e5:c4:
25:aa:74:e8:9a:53:67:54:2f:27:12:29:c7:a2:5e:50:e6:67:
9f:e7:ec:c0:e2:93:e8:ee:f4:6e:20:96:e1:7a:9f:86:77:37:
0f:a1:dc:bf:67:87:ad:c3:c7:13:86:7b:cf:91:24:7b:86:2e:
6c:07:ca:4b:fa:f3:79:4e:15:ae:de:6d:6b:f1:3c:02:3d:3b:
60:c4:e1:a5:f3:25:9e:40:b8:42:98:f3:4a:44:f8:77:ae:3c:
2d:6c:a2:c6:65:83:17:63:a0:5d:aa:f6:a9:32:3b:16:d8:b6:
cf:6b:8a:94:91:f1:92:89:c4:b2:c7:fe:f8:48:3e:7b:2d:ba:
c6:73:53:5b:1f:fd:eb:6b:b7:ba:c4:1f:cf:20:d2:d5:bb:42:
96:64:5a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:32:47 2026 by rpki-client