Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
File: 1-75S2DTiaNxpiDApL95LY8faOS4.mft (raw, json)
Hash identifier: kVEhVC6xE+pMkLH+uAK2wecAnvyNR4ei/q0IncCsWyg=
Subject key identifier: 9C:17:0D:8D:3F:10:EE:3D:88:74:08:27:2B:4F:25:A3:BF:33:72:3D
Authority key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
Certificate issuer: /CN=fbbe52d834e268dc698830292fde4b63c7da392e
Certificate serial: 01A13F70A265F86D08BDC506DE2A40CC53D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
Manifest number: 1026
Signing time: Thu 15 Oct 2026 12:01:48 +0000
Manifest this update: Thu 15 Oct 2026 12:01:48 +0000
Manifest next update: Fri 16 Oct 2026 12:01:48 +0000
Files and hashes: 1: 1-75S2DTiaNxpiDApL95LY8faOS4.crl (hash: bIZ58ZnM5t1egKZhDbp+zp7qRnKtt6BgricWgmxE11I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:a2:65:f8:6d:08:bd:c5:06:de:2a:40:cc:53:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe52d834e268dc698830292fde4b63c7da392e
Validity
Not Before: Oct 15 12:01:48 2026 GMT
Not After : Oct 16 12:01:48 2026 GMT
Subject: CN=9c170d8d3f10ee3d887408272b4f25a3bf33723d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:db:44:84:10:a2:d2:5c:04:b4:1d:06:7a:8f:
20:28:62:16:2d:08:9f:77:cf:34:eb:29:ea:f9:9c:
b6:41:75:0c:74:c4:1b:4d:e7:84:95:fa:f2:52:12:
46:62:12:53:51:4a:d4:3c:0b:1d:ba:08:46:4f:fa:
d8:c2:58:46:59:1a:fc:5e:ac:51:d5:f0:38:b4:d0:
c6:c0:96:32:b1:3f:5f:23:98:5f:9d:b9:75:7f:09:
5c:8f:39:08:c4:94:b6:25:07:07:c1:4d:16:d9:a8:
6a:9d:02:00:11:f6:13:fc:57:12:46:da:61:e4:af:
0a:69:bb:8f:eb:08:2c:b4:2c:58:76:94:26:c6:18:
dd:44:f4:29:6c:5f:a5:5d:d1:ec:d5:81:06:dd:b9:
bb:4f:bb:6a:05:90:88:ff:35:7e:20:c9:8a:51:1f:
1e:a8:ac:7a:23:27:a2:70:5b:82:ad:22:75:39:c4:
2b:09:f1:b4:0c:65:f9:c7:b9:9a:78:82:5a:1f:7d:
ac:aa:be:b7:b9:f5:37:bb:76:0f:ab:88:f7:35:1e:
2b:69:58:fb:51:eb:b2:1b:08:07:59:0c:6e:f3:56:
83:f4:8e:35:7e:14:e6:23:17:92:04:00:88:e6:a4:
0f:c8:12:80:64:ca:06:bc:7d:95:77:85:58:d9:14:
f0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:17:0D:8D:3F:10:EE:3D:88:74:08:27:2B:4F:25:A3:BF:33:72:3D
X509v3 Authority Key Identifier:
keyid:FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:73:ae:c3:64:00:fa:22:b0:b7:c2:d9:d1:92:12:7c:42:83:
21:d6:0f:9c:eb:25:fc:44:80:ac:7c:c6:cd:0f:78:c6:02:6c:
cd:53:29:d3:52:9a:2e:c9:6b:c9:28:91:79:5f:4d:4b:6f:9a:
27:c6:be:62:8c:7f:54:35:3b:98:62:c4:bd:86:39:e1:d8:9a:
8c:44:a4:b8:21:0f:ce:29:56:7c:24:8d:0b:29:64:2e:5a:4b:
ef:b9:9f:f4:1d:e1:d7:f0:b2:00:60:9a:50:6f:48:19:9b:a9:
8e:2e:97:ee:3c:cb:60:bf:86:ff:0d:1f:4e:f2:b1:0b:19:5f:
da:ab:eb:84:1c:c1:6f:be:f8:66:4d:7b:d3:55:b3:f0:ca:90:
81:41:77:3e:5a:2f:39:c2:aa:2c:34:3a:41:3d:ee:74:e1:89:
9d:c6:ea:37:e9:59:62:50:a5:59:32:72:a0:17:c5:13:b1:91:
e1:cb:ad:ff:49:b5:05:1f:af:b4:1c:0a:3b:e3:09:5b:85:57:
9f:2c:39:8c:09:00:7d:cd:19:94:36:29:5e:44:f6:40:53:28:
b6:b9:13:dd:e3:b3:9c:a2:01:c5:81:60:b6:d9:2d:73:13:2b:
c3:e6:67:fa:b7:52:d8:29:71:64:e4:87:b7:6c:34:71:9d:23:
88:24:c6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:08 2026 by rpki-client