Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
File: 9WFTxQuIFb0o37sA4j5vJjIDFy4.mft (raw, json)
Hash identifier: QMzpuSyDH2ctAWg1+PzHe/JksYkDaNDHdzvbaeO76Qg=
Subject key identifier: 03:86:57:FD:EB:75:2A:32:E8:B3:C7:29:AE:33:54:A3:9B:54:56:20
Authority key identifier: F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
Certificate issuer: /CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Certificate serial: 01A14082F29D7CD55648116D189CF3F00589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
Manifest number: 0F88
Signing time: Thu 15 Oct 2026 17:01:25 +0000
Manifest this update: Thu 15 Oct 2026 17:01:25 +0000
Manifest next update: Fri 16 Oct 2026 17:01:25 +0000
Files and hashes: 1: 9WFTxQuIFb0o37sA4j5vJjIDFy4.crl (hash: t/stWg8JnyIpH62smock0TDXDlZ6CiGgspFxTACv8p4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:82:f2:9d:7c:d5:56:48:11:6d:18:9c:f3:f0:05:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Validity
Not Before: Oct 15 17:01:25 2026 GMT
Not After : Oct 16 17:01:25 2026 GMT
Subject: CN=038657fdeb752a32e8b3c729ae3354a39b545620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:66:c1:8e:9e:17:7c:5b:c8:89:de:e8:1a:98:
c4:e0:e5:8d:6d:28:b9:94:36:32:ee:7f:fa:e2:9d:
f8:50:ce:5a:57:f2:e4:15:ca:e9:7e:79:44:b0:fe:
03:37:e0:6d:2c:c8:89:bf:71:d9:4b:bc:70:b6:6d:
19:2c:4b:24:12:42:f1:99:93:f3:55:c8:32:10:84:
32:8f:9c:a6:f2:aa:65:a1:77:fd:81:83:18:4e:dd:
56:26:69:a3:24:2a:11:40:59:8d:c8:76:03:a7:73:
a1:30:a5:fc:2a:20:ae:27:60:3f:2e:63:48:de:e0:
84:8c:64:cd:42:2a:b5:91:8e:02:bf:d9:5c:73:db:
b2:d1:a5:ee:16:35:a2:81:09:4a:bd:1e:69:26:09:
0f:f4:69:39:fa:75:74:c1:79:85:78:50:57:6f:e3:
0e:9f:af:a4:d3:f5:d1:41:54:3c:e1:af:dc:69:ca:
e7:f8:3d:43:af:5f:9e:5c:fb:2e:1e:29:4b:2b:71:
dd:33:a3:cd:3a:c7:9d:8d:b1:cd:d8:27:d6:ca:c7:
97:2c:09:2e:5b:69:24:b6:c2:50:35:84:6d:2d:28:
68:0d:73:82:8c:6b:c2:dd:99:e2:9d:b4:ff:93:ed:
dc:c6:57:47:28:e7:41:51:87:7b:4d:3f:1e:c4:ba:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:86:57:FD:EB:75:2A:32:E8:B3:C7:29:AE:33:54:A3:9B:54:56:20
X509v3 Authority Key Identifier:
keyid:F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0d:31:1f:6d:ec:e8:b5:16:03:ed:8d:83:47:13:16:83:32:
0a:9c:e1:68:d8:fe:45:1d:ac:03:48:4b:85:a2:6d:ac:12:2f:
f1:1d:76:20:0b:63:8f:0e:24:46:34:4f:a8:e3:60:d3:b4:81:
e2:42:37:68:83:55:cb:c4:09:6b:39:6e:a0:76:a4:5e:91:0e:
37:63:08:e6:67:d8:04:10:be:63:39:49:a1:d0:9d:1f:cf:6d:
01:79:cc:19:f0:ac:04:0f:82:32:74:ef:a9:39:2c:40:c7:f5:
15:47:ba:a2:b7:7f:64:e8:f9:bf:c1:39:40:73:fb:84:ce:5c:
1d:b0:6a:ea:bd:be:c4:56:27:c2:e3:24:94:1b:fd:4b:35:e3:
30:23:db:5d:16:e2:27:ea:04:45:c6:99:8e:3f:0f:b8:4a:1b:
0a:56:48:d8:25:dd:80:3f:e3:0c:a7:08:b8:45:0c:36:00:5e:
96:2c:7b:c1:88:02:3a:f5:ea:53:d5:2f:73:75:61:f5:86:69:
8e:40:ce:30:89:47:a0:54:be:ea:ca:c5:a8:8d:e8:96:96:0e:
04:1e:7a:85:c9:98:97:de:90:51:b6:5a:cc:73:79:8c:e5:eb:
0a:8d:05:b4:d3:19:bc:da:b0:09:27:fe:ea:85:fa:2c:ad:88:
da:44:94:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:53:44 2026 by rpki-client