
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
File: 9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft (raw, json)
Hash identifier: FXrFnvta1/WFpR+3n0dRzBfraSEykA9RJ6MaPPe8Pio=
Subject key identifier: E4:06:F9:29:BA:D4:67:4B:A7:7C:47:98:41:94:61:77:0A:F3:55:35
Authority key identifier: F6:56:FA:18:B1:19:C3:A4:9C:BB:CC:56:A6:04:57:43:9A:44:92:CE
Certificate issuer: /CN=f656fa18b119c3a49cbbcc56a60457439a4492ce
Certificate serial: 01A0016EDC878EA4A61CFC292AA8D00FD627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
Manifest number: 198C
Signing time: Fri 14 Aug 2026 18:00:37 +0000
Manifest this update: Fri 14 Aug 2026 18:00:37 +0000
Manifest next update: Sat 15 Aug 2026 18:00:37 +0000
Files and hashes: 1: 9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl (hash: xglFa+RZukJe6fPD7lD8SeQUEWRaGrKBy98m1nWQ6Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6e:dc:87:8e:a4:a6:1c:fc:29:2a:a8:d0:0f:d6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f656fa18b119c3a49cbbcc56a60457439a4492ce
Validity
Not Before: Aug 14 18:00:37 2026 GMT
Not After : Aug 15 18:00:37 2026 GMT
Subject: CN=e406f929bad4674ba77c4798419461770af35535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3c:0d:26:76:6c:79:30:f2:9f:fb:2b:63:f3:
cf:48:1e:fc:a1:3e:04:5c:f8:76:0b:a9:a3:b7:f0:
48:24:8e:c9:dd:84:ab:dd:86:32:54:16:32:a4:01:
31:05:d7:cc:88:a3:49:3e:b2:f8:bc:ba:1a:a2:fb:
ee:eb:62:c4:ba:71:1c:aa:f8:c6:a5:36:b8:44:55:
6e:d4:06:0e:0b:74:8c:b9:60:eb:f6:29:43:9f:51:
09:57:19:a3:d5:ba:80:03:e7:f7:83:19:95:77:83:
0c:76:e3:ce:d4:8e:ca:d4:4b:79:8b:be:9f:bf:c8:
3e:ec:9f:eb:4d:c3:86:6b:4e:c2:a3:5d:7f:6a:9b:
86:32:12:1d:91:c1:4a:f5:17:ca:03:48:64:ca:eb:
bb:20:82:0e:14:5e:e9:88:61:87:6f:10:cd:58:92:
7b:be:f8:d7:a1:6e:f3:07:44:a3:51:93:94:52:49:
98:f2:ea:86:02:45:4a:ae:f7:28:8b:ee:03:bb:ad:
ac:ae:ca:b4:b0:c6:ff:2d:0f:9b:0e:db:fb:c0:ba:
12:51:71:af:cd:af:c3:47:7e:fb:d4:33:8a:fb:9e:
fc:84:22:49:e7:7e:49:6d:aa:1d:b9:4c:8c:b4:01:
6c:ff:df:bd:7c:70:c1:55:78:7e:0f:11:e6:3d:23:
27:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:06:F9:29:BA:D4:67:4B:A7:7C:47:98:41:94:61:77:0A:F3:55:35
X509v3 Authority Key Identifier:
keyid:F6:56:FA:18:B1:19:C3:A4:9C:BB:CC:56:A6:04:57:43:9A:44:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:99:d9:89:7b:9e:53:3f:0c:b1:7c:9d:b9:a0:63:83:96:21:
6a:1a:7d:80:c2:90:11:66:5c:0b:0a:a6:90:b8:ef:21:05:aa:
53:5e:7b:31:d1:0e:a1:28:e9:f5:89:c0:e6:d4:31:70:8e:d2:
55:ad:ee:a2:4e:ae:32:40:26:5a:bc:17:3b:d3:65:18:ca:3a:
66:26:07:f4:1d:31:b9:04:13:7d:a0:71:aa:92:d0:2c:a2:1b:
29:d3:87:aa:1b:76:32:09:2a:99:2f:b7:82:cf:5c:10:8d:04:
c4:6e:97:21:dd:cb:28:ae:54:64:1a:11:37:a5:b8:40:65:d4:
6b:50:d7:5c:9a:c2:d8:71:8a:d0:fa:ab:fa:5b:be:8a:8f:1b:
68:13:cc:25:34:cf:f7:ae:7c:07:60:c3:43:6b:e9:66:ef:a1:
85:ed:95:67:c7:ca:df:c2:38:fc:b3:67:9c:fc:f6:cb:84:be:
b2:0c:42:97:6d:93:bb:63:72:7d:0d:2b:a5:6f:ac:12:3d:26:
ae:63:7f:b6:cd:d1:1a:56:90:38:7f:0b:e0:40:5d:ba:81:e6:
66:d3:ca:bc:58:47:e3:2f:fa:ec:8d:d5:65:b3:bd:af:0e:18:
cd:a7:dd:21:1a:88:5a:46:3f:56:8f:43:4f:e1:80:35:19:e4:
aa:c8:76:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:29:17 2026 by rpki-client