Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
File: 9fqTbNBbJl9g8zNAqMY952gvw18.mft (raw, json)
Hash identifier: vB5dih4To+I/zrMKllAl0y/5ChjGVncG+oyLUgnmOQc=
Subject key identifier: C8:2D:92:E3:84:94:84:4C:56:6D:49:AD:C3:07:62:B1:DC:35:17:2C
Authority key identifier: F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
Certificate issuer: /CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Certificate serial: 019D37C065872ECFBBBC07D060EF84D628D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
Manifest number: 087C
Signing time: Sun 29 Mar 2026 04:00:48 +0000
Manifest this update: Sun 29 Mar 2026 04:00:48 +0000
Manifest next update: Mon 30 Mar 2026 04:00:48 +0000
Files and hashes: 1: 9fqTbNBbJl9g8zNAqMY952gvw18.crl (hash: EkY7z1hwSM1WtigJYx3w0HLX5kFQzylzcPRhOd8ZlbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:65:87:2e:cf:bb:bc:07:d0:60:ef:84:d6:28:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Validity
Not Before: Mar 29 04:00:48 2026 GMT
Not After : Mar 30 04:00:48 2026 GMT
Subject: CN=c82d92e38494844c566d49adc30762b1dc35172c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:62:79:13:8f:9c:16:6c:e3:5f:59:16:6c:fa:
0e:2b:be:a0:05:0f:1c:53:62:24:74:74:0f:f7:ca:
6a:42:50:a6:21:82:f8:bc:f2:ae:dc:a2:30:4a:58:
1b:03:c5:07:a5:3f:7a:83:cd:41:cf:41:e2:cc:59:
e4:c2:1c:38:ce:05:cb:b8:3d:f9:30:64:73:84:5f:
e3:ea:52:66:f1:f4:33:67:a2:e8:1d:35:48:48:f1:
7a:08:e9:d8:2f:71:39:19:2d:4e:dc:98:26:2f:48:
42:c9:f7:bd:12:8b:b1:e4:fe:50:f6:1b:af:b8:49:
a0:8d:ce:26:b2:4c:6c:c4:0f:b3:45:1f:0b:38:81:
92:ff:e5:33:69:ba:b1:10:e8:2c:3c:b6:41:39:d8:
05:38:64:87:dc:0c:ed:a8:81:d9:2b:25:e1:d4:ae:
1e:fe:b4:83:8c:d1:2e:58:df:fa:f8:3b:35:9e:a0:
4a:d8:14:e5:d8:af:35:a9:d3:1a:f0:15:81:bb:bc:
b7:f2:a4:57:e6:7f:60:c1:9a:70:11:cb:c5:a6:92:
44:31:15:c8:84:60:dc:74:4b:12:ca:b5:53:2b:24:
46:b3:9d:b4:fb:42:32:d1:80:11:70:f1:d4:a8:cd:
a0:3b:3a:36:7c:59:f6:b1:d9:52:04:6f:df:88:88:
3f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2D:92:E3:84:94:84:4C:56:6D:49:AD:C3:07:62:B1:DC:35:17:2C
X509v3 Authority Key Identifier:
keyid:F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c5:ef:6a:8f:38:a3:89:21:14:49:65:fb:c1:19:36:5b:52:
3f:52:db:6b:72:db:71:46:33:44:c1:5c:fb:2b:e3:b4:a2:57:
aa:ae:50:ae:b8:13:40:bc:e5:b1:9d:39:5f:dc:b9:0c:cd:97:
f9:7d:9d:35:f0:4c:1e:b2:bb:f4:40:2c:9b:c8:3f:0b:70:57:
21:9a:39:32:07:67:9a:38:8a:23:92:72:b2:2f:49:1d:39:e7:
c7:a0:c4:ed:0d:76:19:e8:60:1e:44:1f:66:72:ea:ab:32:5f:
1c:a5:40:c8:c2:16:41:ed:71:87:f0:f1:04:65:46:5d:4b:d8:
e3:37:ec:f5:43:c3:c3:5e:13:37:44:ea:07:fe:a4:8a:44:92:
76:bb:ea:75:61:d4:09:7f:a6:ea:01:f6:9f:d4:6e:e6:a0:48:
e7:69:f5:70:a7:95:88:da:de:51:f6:3c:e9:3a:40:cc:2d:1e:
c4:13:44:00:30:4d:23:56:56:2d:08:65:81:05:80:92:8f:b2:
67:4d:65:33:a7:8e:59:f3:a3:3f:52:84:65:da:3b:e4:0e:a6:
96:45:ae:0e:9b:27:1f:52:3f:a0:b7:f7:5e:9d:6d:3b:4d:e0:
20:99:e4:4e:47:e5:25:f9:6e:08:bc:59:f5:8d:be:41:a9:e5:
47:86:da:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:48 2026 by rpki-client