Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
File: FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft (raw, json)
Hash identifier: wcidOWyiyjPpknMD+sKtq6fqBTfbK7zyR1aX/Tb4S0s=
Subject key identifier: F4:0A:13:8A:4E:BC:03:4B:64:29:C3:40:40:BE:1C:39:1B:A3:29:EC
Authority key identifier: 15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68
Certificate issuer: /CN=1515e2fef4d31245dc67018befc3374dc0f1ec68
Certificate serial: 01A08C7BAB4B0AA9298950F5C589DB1F9769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
Manifest number: 1A45
Signing time: Thu 10 Sep 2026 18:01:50 +0000
Manifest this update: Thu 10 Sep 2026 18:01:50 +0000
Manifest next update: Fri 11 Sep 2026 18:01:50 +0000
Files and hashes: 1: FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl (hash: kGmpwus2f+Yb/utyrNf1POmMn8XY4fCOGcaV+2L9q0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:ab:4b:0a:a9:29:89:50:f5:c5:89:db:1f:97:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1515e2fef4d31245dc67018befc3374dc0f1ec68
Validity
Not Before: Sep 10 18:01:50 2026 GMT
Not After : Sep 11 18:01:50 2026 GMT
Subject: CN=f40a138a4ebc034b6429c34040be1c391ba329ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:26:41:9f:32:54:bf:08:7f:1c:ee:7e:89:
ea:fc:c1:7a:0a:0c:8c:fe:27:3a:b5:88:fc:ce:66:
c4:a6:ef:19:aa:19:d3:0b:15:d8:47:dd:41:c8:57:
53:0d:5e:00:7f:2d:b3:b0:71:e3:9e:3a:e0:d5:d3:
36:91:b6:cf:91:d0:64:68:e7:1f:2c:b4:e6:2e:61:
d4:e0:66:0c:c7:90:b4:bd:5a:5e:bf:58:21:18:67:
d2:73:a0:a4:3a:f5:90:62:02:d1:f2:87:96:65:89:
3e:90:03:b6:a3:b6:82:54:d2:31:69:fb:7e:be:32:
fd:67:60:8e:b3:e3:21:dc:b3:8f:95:f9:b3:db:88:
6a:3a:b4:70:e7:87:c4:55:22:46:10:24:a4:1a:ce:
d4:b3:62:2c:9c:8d:d9:83:40:af:e3:e8:a4:d6:f2:
a3:83:5e:b8:ab:a9:70:ad:e1:07:9d:69:68:b3:f4:
c6:76:2f:3a:87:ac:a5:1d:03:75:3e:13:d8:93:07:
f9:85:a5:50:39:bb:dc:25:44:fc:9e:96:d3:b5:0e:
7d:62:24:c0:88:46:ec:b5:5a:31:76:36:f5:ca:c0:
c2:4f:f3:ce:6d:30:f6:a6:d8:eb:ad:f9:75:75:29:
17:0e:30:3a:dd:c8:bd:1c:ad:35:7d:18:6a:fb:5f:
5a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0A:13:8A:4E:BC:03:4B:64:29:C3:40:40:BE:1C:39:1B:A3:29:EC
X509v3 Authority Key Identifier:
keyid:15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f1:44:c0:d5:50:1e:d3:74:b8:0d:6e:05:e1:90:c5:18:54:
b7:1d:43:b0:16:79:5b:0b:ff:ac:0a:ba:ac:69:2d:b7:ae:c1:
ae:93:24:69:57:72:dc:bc:b1:23:a5:61:2d:3f:20:eb:4e:bd:
cf:fd:17:5d:5e:e0:9c:c2:78:c2:1a:5c:fb:cd:3f:cc:ec:85:
16:c0:80:4f:43:2d:a7:8c:9d:c3:2d:51:e5:ca:df:7a:7c:10:
9c:4c:61:cb:5b:bb:b7:aa:83:15:d8:43:23:1d:0f:d9:7d:e8:
9f:51:a9:08:b0:5e:90:0c:a3:bd:30:1a:24:82:41:81:c9:b5:
85:d4:2f:90:9e:ac:43:f7:59:10:10:4e:1f:6b:a4:23:09:8b:
f3:f1:ac:73:7f:85:97:d2:e0:b5:96:3e:0e:77:23:18:9b:a7:
d1:1e:37:b5:8f:e4:71:a7:3f:5d:98:36:f0:69:07:6c:8a:a1:
e6:9a:6c:1d:81:1f:60:c3:ee:da:75:3c:86:55:cf:cd:f8:f9:
4b:20:96:73:1b:8d:de:f2:a8:2a:ce:ef:47:61:95:9d:c7:06:
98:c2:99:3d:ef:e7:13:07:f9:dd:b9:60:e5:3f:75:81:33:ce:
39:cc:2f:90:ff:19:7d:1e:34:dd:e7:d1:75:08:25:9c:b6:ca:
91:07:12:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:25:09 2026 by rpki-client