Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.mft
File: eXqQW0595YVil_bgOmViXeIsQvM.mft (raw, json)
Hash identifier: HBOu9zHPOLXUo4yARBvOyicIa5vTIIkvfJwQ+WZqTsM=
Subject key identifier: F9:FA:42:2F:F3:B3:3F:D1:5A:E7:7D:76:6B:C6:19:EB:81:07:30:65
Authority key identifier: 79:7A:90:5B:4E:7D:E5:85:62:97:F6:E0:3A:65:62:5D:E2:2C:42:F3
Certificate issuer: /CN=797a905b4e7de5856297f6e03a65625de22c42f3
Certificate serial: 01A177A79F287486840560657A8E609B4724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXqQW0595YVil_bgOmViXeIsQvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.mft
Manifest number: 128D
Signing time: Mon 26 Oct 2026 10:00:36 +0000
Manifest this update: Mon 26 Oct 2026 10:00:36 +0000
Manifest next update: Tue 27 Oct 2026 10:00:36 +0000
Files and hashes: 1: eXqQW0595YVil_bgOmViXeIsQvM.crl (hash: h/qQeW3mGfOIrxdYI8JogMlgyuDECt+OSO6/h5JPgFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXqQW0595YVil_bgOmViXeIsQvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:a7:9f:28:74:86:84:05:60:65:7a:8e:60:9b:47:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797a905b4e7de5856297f6e03a65625de22c42f3
Validity
Not Before: Oct 26 10:00:36 2026 GMT
Not After : Oct 27 10:00:36 2026 GMT
Subject: CN=f9fa422ff3b33fd15ae77d766bc619eb81073065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:e9:58:01:4b:07:1f:67:1a:e5:b7:b5:8b:
17:e7:cd:20:d3:8d:d4:fe:68:57:c4:0e:b7:26:e2:
81:98:4d:dc:2a:bc:bf:ec:26:ce:de:8d:fb:bf:ca:
5e:a5:3b:6f:ad:e5:d6:56:c8:8e:5a:65:d0:34:8d:
1b:1f:96:2e:11:03:7a:c1:31:59:81:d4:95:99:66:
38:fe:92:64:94:a5:7d:72:b9:7b:f2:d0:8b:97:c8:
76:3f:8d:fc:5e:9a:72:ae:e5:b7:ce:11:6e:08:7f:
ab:02:44:e5:ae:5a:20:97:33:d8:6a:32:cf:cc:58:
f4:dc:bc:92:20:7c:bc:07:e7:7b:21:42:6c:f4:8e:
8c:c9:e8:60:cd:6d:8d:ff:88:b5:7b:4e:bb:3e:88:
b5:4f:e3:24:bb:af:0b:55:ad:f6:3e:1c:81:8f:75:
0c:c8:54:dc:c4:a3:46:72:74:f3:f3:f3:06:c3:89:
a8:eb:d9:89:2d:31:45:e4:c5:5d:b0:78:39:d5:63:
29:1b:89:0f:be:bd:19:d8:e8:05:1c:f0:9a:54:d5:
77:fe:df:a8:bd:e7:e3:8b:1a:5e:90:43:c9:3e:42:
f2:f3:a6:e8:6e:58:88:c2:01:6e:83:a0:e2:ad:81:
e3:27:d3:0e:44:4f:65:36:de:90:56:ba:dc:c4:9f:
35:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FA:42:2F:F3:B3:3F:D1:5A:E7:7D:76:6B:C6:19:EB:81:07:30:65
X509v3 Authority Key Identifier:
keyid:79:7A:90:5B:4E:7D:E5:85:62:97:F6:E0:3A:65:62:5D:E2:2C:42:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXqQW0595YVil_bgOmViXeIsQvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a3:a6:da:38:e1:93:db:2e:1e:9f:30:d9:26:a9:c6:db:0a:
c9:f4:0e:26:ae:1c:26:a4:50:be:6d:e6:84:dc:30:b4:b8:72:
9e:b0:7e:3f:d2:86:a0:6b:eb:31:a7:b2:46:b8:f1:bf:51:31:
f2:15:22:af:01:38:23:ee:27:30:03:20:e8:d8:47:96:32:4e:
be:20:c2:40:af:e6:e0:6a:96:34:4d:e3:14:8d:66:ff:df:f5:
b7:6e:a9:34:fd:c2:23:09:59:3f:d7:74:6d:a1:c1:bd:2b:be:
c5:24:b9:46:d6:74:68:1d:08:9f:00:71:85:67:f5:b1:0c:94:
b7:f1:41:f5:f0:01:12:e0:0e:34:88:5e:6d:47:33:f1:ef:48:
53:ef:e2:83:8e:d1:59:a7:22:b0:2c:97:8e:a5:44:f7:30:fd:
e6:d1:0d:60:0a:33:3e:39:fa:0a:15:cc:52:94:2f:1d:33:6a:
0b:de:90:cb:11:b5:46:47:95:f2:f0:a2:02:88:e1:d7:55:ce:
85:31:60:14:c9:12:15:68:f6:b3:45:2e:3b:e3:4d:28:19:07:
b4:1d:7b:6d:7a:f7:96:f7:f0:3a:6e:58:fd:42:a9:af:c0:d0:
d7:96:3d:29:7b:b7:0d:0f:3f:cc:18:98:fa:56:6d:26:7b:33:
bd:f3:a7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:35:41 2026 by rpki-client