Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
File: 9fqTbNBbJl9g8zNAqMY952gvw18.mft (raw, json)
Hash identifier: 8qXXHgDP43YgBYMlgHtGc17kM+0U34jcXRZI4oX4MMk=
Subject key identifier: E9:6D:99:0D:DB:D9:26:C3:82:4B:47:DA:AD:74:EF:90:47:BC:BE:00
Authority key identifier: F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
Certificate issuer: /CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Certificate serial: 019E30E0A950E8052506F9799D2394455F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
Manifest number: 08FD
Signing time: Sat 16 May 2026 13:01:30 +0000
Manifest this update: Sat 16 May 2026 13:01:30 +0000
Manifest next update: Sun 17 May 2026 13:01:30 +0000
Files and hashes: 1: 9fqTbNBbJl9g8zNAqMY952gvw18.crl (hash: d4fvBDA8r6NRVpKhKlk9j70VayEsEcXXRhNwTsWEcHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:a9:50:e8:05:25:06:f9:79:9d:23:94:45:5f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Validity
Not Before: May 16 13:01:30 2026 GMT
Not After : May 17 13:01:30 2026 GMT
Subject: CN=e96d990ddbd926c3824b47daad74ef9047bcbe00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:99:eb:ef:90:0d:0b:ec:81:fd:07:c0:86:
2e:51:eb:a9:e6:72:91:0a:2e:ec:23:a2:21:50:13:
a3:b7:80:48:09:50:b1:8a:00:70:4b:1e:95:5d:de:
e4:12:67:51:31:45:55:c1:c5:d1:ac:2d:ff:cf:9a:
ee:ce:f2:aa:9f:b6:29:78:c0:90:15:0d:31:c0:02:
99:b0:fe:01:14:e8:59:65:b5:49:fc:b6:b5:57:d6:
f1:64:c6:76:c9:17:61:b9:15:f1:b5:6a:49:c9:21:
75:1b:ea:76:b1:e2:48:38:db:7f:3b:0e:0a:69:0d:
fe:03:6a:20:21:6d:49:48:26:7f:3e:b3:c0:35:57:
c0:ff:ee:b5:fd:d7:ab:1b:69:b5:9c:09:d7:00:73:
69:f7:78:dd:47:48:d2:67:fa:04:df:de:ff:8a:ab:
e0:8b:cf:54:6d:22:df:7f:97:2c:3a:cb:2c:42:9d:
86:ce:47:6b:c7:9d:c7:a2:0f:6f:a8:00:00:e5:61:
0f:ae:fc:a2:5b:93:cd:56:fc:48:b1:e7:36:0c:b5:
f2:0e:a7:8b:46:8b:5e:63:fd:fc:81:8d:4b:2d:d9:
60:75:39:e9:8f:8c:dd:bf:b8:2f:27:eb:11:0d:fd:
58:16:6a:ad:a5:2b:4a:f7:c8:cd:8f:45:62:40:a7:
dc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6D:99:0D:DB:D9:26:C3:82:4B:47:DA:AD:74:EF:90:47:BC:BE:00
X509v3 Authority Key Identifier:
keyid:F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b9:15:a9:1f:b1:b5:73:5f:1d:5b:4b:83:b0:a8:9d:c8:fa:
31:f5:53:e3:ae:1b:7d:a3:62:d8:f2:77:a8:98:3f:de:38:87:
c9:db:ae:cf:01:ef:22:b0:0e:cc:7a:a0:f9:6b:7c:c5:5f:79:
32:20:5c:eb:64:3c:9b:27:a0:41:20:db:74:f1:cb:70:85:9f:
7a:60:52:2b:5d:18:d4:b4:04:63:74:d7:49:83:bb:de:7d:4d:
eb:d0:4a:eb:60:a4:bd:b4:f1:31:0b:a3:93:0d:c8:76:fb:6e:
a9:af:0d:11:bd:20:47:eb:c0:69:c5:62:4e:22:9c:51:6c:81:
e9:18:18:05:c2:57:39:f6:57:9e:50:ad:ca:60:f5:1a:e8:e8:
06:49:12:d5:c0:fb:d8:e7:cb:d5:ad:a6:5e:c9:ab:65:72:ce:
2c:68:8a:32:58:0d:df:02:be:70:09:6e:28:20:cc:d0:9d:a5:
dd:fe:d6:dc:f0:8a:65:0c:53:30:c5:7d:e6:2a:2f:63:ef:f0:
ea:96:a5:a7:94:07:e0:c1:bb:88:03:02:41:0b:2e:10:03:08:
54:46:0b:ab:5e:8a:4b:8b:dc:7c:be:01:f4:7a:13:2c:3d:c3:
1e:68:d4:4f:0a:bb:cb:8e:fc:7d:54:db:b6:c3:23:9c:73:80:
5c:e1:e5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:14:44 2026 by rpki-client