Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
File: 9fqTbNBbJl9g8zNAqMY952gvw18.mft (raw, json)
Hash identifier: 78jvP82pEZeeLHzs/4RM/hOvcbhjByjq28/vlU9v7ks=
Subject key identifier: 37:E7:FD:FB:1C:FD:59:2F:B5:57:BB:B9:E1:E2:68:7A:DB:1A:33:2D
Authority key identifier: F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
Certificate issuer: /CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Certificate serial: 01A175152632765D59DAF244498B1C6E6C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
Manifest number: 0AAE
Signing time: Sun 25 Oct 2026 22:01:22 +0000
Manifest this update: Sun 25 Oct 2026 22:01:22 +0000
Manifest next update: Mon 26 Oct 2026 22:01:22 +0000
Files and hashes: 1: 9fqTbNBbJl9g8zNAqMY952gvw18.crl (hash: jj9pyYeJsugxqltACYG5EO1fdK5Xbgsdkyrti/YSWAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:15:26:32:76:5d:59:da:f2:44:49:8b:1c:6e:6c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Validity
Not Before: Oct 25 22:01:22 2026 GMT
Not After : Oct 26 22:01:22 2026 GMT
Subject: CN=37e7fdfb1cfd592fb557bbb9e1e2687adb1a332d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:cd:f1:b8:bd:e4:d8:71:1d:fc:40:1e:21:
60:2f:2d:e1:5b:cc:6e:b8:19:c9:1c:53:94:e5:d9:
8a:05:bb:e3:03:41:cd:37:23:ea:2f:ee:c6:0b:4a:
f0:21:f0:11:95:8e:5f:f0:a7:1b:54:d6:97:c2:4f:
d2:53:79:ec:50:45:09:a3:d5:76:0e:4c:f5:e5:33:
92:f0:39:32:f4:2f:a5:45:8f:3e:2d:4d:d3:f7:1d:
2c:c6:fa:5f:8c:bd:e1:ab:5b:c5:01:3f:0b:a5:09:
a8:60:55:27:18:dc:2c:35:36:22:1c:80:a4:2f:7c:
92:a4:82:a1:2a:73:67:b3:6f:02:6f:4e:19:d0:8c:
d9:89:a3:5e:8a:58:27:e7:23:d4:36:56:f6:0b:42:
b0:76:61:67:2e:28:73:aa:ca:7e:ce:62:55:72:1a:
7d:a3:1f:cb:8a:f1:e1:e7:76:de:de:eb:e3:55:c4:
31:d5:b1:6a:7b:7a:be:76:37:6e:82:cc:3e:2b:28:
52:8f:a2:5f:9a:17:f8:1e:e5:3d:bf:64:16:0b:62:
71:2c:61:ba:9c:0d:1c:43:62:be:f4:ca:37:7a:de:
1c:4f:97:2b:81:39:88:de:ab:55:71:e2:b0:1c:e0:
74:71:44:af:57:fd:c0:e0:be:cb:70:85:40:a1:23:
78:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E7:FD:FB:1C:FD:59:2F:B5:57:BB:B9:E1:E2:68:7A:DB:1A:33:2D
X509v3 Authority Key Identifier:
keyid:F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:de:47:e5:ae:22:99:b1:75:7c:cd:1f:f7:fc:37:70:66:90:
a6:fd:65:00:94:fe:20:4b:6a:9a:14:76:84:34:9f:1c:de:f9:
de:24:65:51:56:d3:4a:18:54:5b:9f:8f:e6:d6:db:59:98:33:
83:54:e9:2e:55:c2:2c:df:aa:9b:a4:f9:c8:3b:30:e1:3c:f4:
59:66:88:5d:be:d6:d6:29:84:f2:98:88:b4:42:80:1e:cb:93:
c4:6c:a1:1d:68:1f:de:7e:b5:82:f2:d4:c4:38:d9:4a:5c:75:
2f:21:37:c7:6b:1e:be:62:43:f7:a3:0c:99:03:bf:b6:ee:ef:
97:d0:c5:b2:09:03:5c:a5:2f:d1:a1:2f:d5:04:0f:10:a7:3c:
86:ad:b3:b7:50:36:5a:67:1e:91:27:51:40:0e:96:84:3d:98:
3c:7c:69:30:24:58:b5:c3:dc:1c:f6:18:a4:7d:73:03:ca:36:
15:39:20:5e:9b:36:d6:b4:08:50:f7:1d:69:2a:65:b5:5f:0e:
23:34:f5:af:2a:b7:d6:32:18:d2:54:24:a3:52:37:a9:57:a9:
57:a5:36:57:83:51:e6:80:40:63:ad:35:2e:be:b6:92:72:4c:
df:f5:de:db:38:77:94:0d:8a:06:0e:d8:f1:24:25:d4:fc:c0:
4c:59:93:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:21:04 2026 by rpki-client