
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
File: 1-muQgEgTpldoh5it3nvb0ObQ5T4.mft (raw, json)
Hash identifier: Ay2FJ6pECQeYys5SFSp7HmJpme6k4ecGCtt7DuU11W0=
Subject key identifier: 19:53:03:81:31:48:D7:A7:13:D5:56:0C:83:19:4B:80:6E:87:DE:E8
Authority key identifier: FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
Certificate issuer: /CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
Certificate serial: 01A140BA0495D7F0B9B0C0A8C4AE68EC36FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
Manifest number: 09CA
Signing time: Thu 15 Oct 2026 18:01:34 +0000
Manifest this update: Thu 15 Oct 2026 18:01:34 +0000
Manifest next update: Fri 16 Oct 2026 18:01:34 +0000
Files and hashes: 1: 1-muQgEgTpldoh5it3nvb0ObQ5T4.crl (hash: tjJbNall1F4lPpxMxPLFmrMSHdkw/Yq6mSc7r1v5gKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:ba:04:95:d7:f0:b9:b0:c0:a8:c4:ae:68:ec:36:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
Validity
Not Before: Oct 15 18:01:34 2026 GMT
Not After : Oct 16 18:01:34 2026 GMT
Subject: CN=195303813148d7a713d5560c83194b806e87dee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:f3:83:30:87:fd:ae:ed:0b:40:2b:5c:3c:
a5:67:50:21:67:b1:bc:d7:f3:92:33:48:0e:49:5a:
15:e0:e9:61:70:b8:35:a4:dd:b0:f4:51:16:aa:b6:
fb:78:5c:6c:c3:ce:65:79:d8:f7:36:82:72:a8:9e:
6b:f4:c8:33:da:37:02:7a:7d:46:d9:f6:11:97:b3:
07:84:9b:09:01:d6:b2:d7:bb:a1:d3:a9:af:a9:65:
0e:13:37:b2:99:78:05:71:d8:51:61:a3:0b:1e:5a:
ce:95:ad:c6:a9:13:67:b5:03:4c:92:21:77:06:2f:
2e:6c:16:68:31:49:df:0f:bd:04:e7:f3:5e:af:00:
48:4a:87:61:b9:31:9f:f9:67:f1:fb:9d:72:2a:cb:
1f:69:01:01:01:69:18:58:2c:00:02:11:0e:be:db:
c8:10:8a:56:c0:4f:f6:46:13:c3:db:13:af:a9:ea:
21:14:84:70:0c:7d:23:58:98:db:f3:fc:b0:9e:cd:
68:bc:69:13:4c:54:f7:79:d3:d2:45:1b:16:66:63:
26:2d:94:5f:36:47:fa:b5:0a:07:20:5c:8d:c1:4e:
d4:f6:dc:0e:9f:f8:a0:f3:25:e0:ac:c9:01:72:f6:
55:9e:69:cb:5e:3f:10:8a:c4:54:57:99:f6:13:08:
b3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:53:03:81:31:48:D7:A7:13:D5:56:0C:83:19:4B:80:6E:87:DE:E8
X509v3 Authority Key Identifier:
keyid:FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:76:17:e5:f1:d2:fb:96:17:b4:ef:17:08:f2:5c:8e:8a:57:
c7:7b:fa:a8:c9:9a:fa:e9:5b:56:3c:99:7f:6d:4b:28:d3:df:
a8:61:13:e8:f3:3f:10:5c:a8:9e:39:f3:93:86:2a:56:bd:d7:
49:40:a6:61:c2:d3:4e:be:5a:fa:62:31:ed:a2:b0:3b:bb:ce:
f1:5c:e5:48:28:61:c8:8a:fa:de:97:e9:a7:5c:27:e1:9f:33:
cd:c7:71:91:4d:94:d0:4b:09:55:1e:d0:b4:79:e2:84:8b:ee:
ac:6d:40:cf:8d:dc:0c:df:c4:ea:0a:c7:3b:87:6d:73:99:72:
06:75:68:a1:89:56:99:14:95:19:89:a7:4e:fe:5c:4d:e5:46:
d5:6a:6c:e8:bd:f3:8a:6d:c5:cb:07:b2:e7:e4:c2:47:73:89:
fe:3f:b4:fc:23:14:b9:25:00:05:d2:51:84:9d:9a:9c:75:22:
e5:cc:33:84:c5:b4:e2:22:94:b5:6a:c2:ed:fc:d5:42:e1:32:
2c:43:1b:ea:b7:52:4d:8d:5f:6a:79:3d:37:b1:f2:ec:d7:e3:
f7:6f:1d:86:4b:f1:f9:3b:c8:da:74:bf:c5:16:9e:94:1d:33:
05:25:4c:a2:13:b8:bc:89:41:ca:cf:df:cb:b7:6d:e8:eb:58:
7e:92:ed:b2
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaFAugSV1/C5sMCoxK5o7Db+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNmI5MDgwNDgxM2E2NTc2ODg3OThhZGRlN2JkYmQwZTZk
MGU1M2UwHhcNMjYxMDE1MTgwMTM0WhcNMjYxMDE2MTgwMTM0WjAzMTEwLwYDVQQD
EygxOTUzMDM4MTMxNDhkN2E3MTNkNTU2MGM4MzE5NGI4MDZlODdkZWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucDzgzCH/a7tC0ArXDylZ1AhZ7G8
1/OSM0gOSVoV4OlhcLg1pN2w9FEWqrb7eFxsw85ledj3NoJyqJ5r9Mgz2jcCen1G
2fYRl7MHhJsJAday17uh06mvqWUOEzeymXgFcdhRYaMLHlrOla3GqRNntQNMkiF3
Bi8ubBZoMUnfD70E5/NerwBISodhuTGf+Wfx+51yKssfaQEBAWkYWCwAAhEOvtvI
EIpWwE/2RhPD2xOvqeohFIRwDH0jWJjb8/ywns1ovGkTTFT3edPSRRsWZmMmLZRf
Nkf6tQoHIFyNwU7U9twOn/ig8yXgrMkBcvZVnmnLXj8QisRUV5n2Ewiz8QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBlTA4ExSNenE9VWDIMZS4Buh97oMB8GA1UdIwQY
MBaAFPprkIBIE6ZXaIeYrd5729Dm0OU+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1tdVFnRWdUcGxkb2g1aXQzbnZiME9iUTVUNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvYTllM2RiLTIyNmQtNDFlMi1iZTA5
LThkN2Q0YWZmYjU5Zi8xLzEtbXVRZ0VnVHBsZG9oNWl0M252YjBPYlE1VDQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y2L2E5ZTNkYi0yMjZkLTQxZTItYmUwOS04ZDdkNGFmZmI1
OWYvMS8xLW11UWdFZ1RwbGRvaDVpdDNudmIwT2JRNVQ0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXYX
5fHS+5YXtO8XCPJcjopXx3v6qMma+ulbVjyZf21LKNPfqGET6PM/EFyonjnzk4Yq
Vr3XSUCmYcLTTr5a+mIx7aKwO7vO8VzlSChhyIr63pfpp1wn4Z8zzcdxkU2U0EsJ
VR7QtHnihIvurG1Az43cDN/E6grHO4dtc5lyBnVooYlWmRSVGYmnTv5cTeVG1Wps
6L3zim3Fywey5+TCR3OJ/j+0/CMUuSUABdJRhJ2anHUi5cwzhMW04iKUtWrC7fzV
QuEyLEMb6rdSTY1fank9N7Hy7Nfj928dhkvx+TvI2nS/xRaelB0zBSVMohO4vIlB
ys/fy7dt6OtYfpLtsg==
-----END CERTIFICATE-----
Generated at Fri Oct 16 04:04:55 2026 by rpki-client