Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
File: 9fqTbNBbJl9g8zNAqMY952gvw18.mft (raw, json)
Hash identifier: AhhSfG36ddfIiZJZfP/s0eNatDqFrdaP0dDSA6mI+go=
Subject key identifier: 91:D2:87:0E:53:3A:5A:FD:FD:DF:E9:C3:4D:94:39:B6:EE:59:55:2A
Authority key identifier: F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
Certificate issuer: /CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Certificate serial: 01A0005C7F75C43D5274712D6BE74C3C0955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
Manifest number: 09ED
Signing time: Fri 14 Aug 2026 13:00:56 +0000
Manifest this update: Fri 14 Aug 2026 13:00:56 +0000
Manifest next update: Sat 15 Aug 2026 13:00:56 +0000
Files and hashes: 1: 9fqTbNBbJl9g8zNAqMY952gvw18.crl (hash: FO61oJkmlTSBMlgxRZAc3XabKa3cBiLTP3KXOwsGeUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:7f:75:c4:3d:52:74:71:2d:6b:e7:4c:3c:09:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Validity
Not Before: Aug 14 13:00:56 2026 GMT
Not After : Aug 15 13:00:56 2026 GMT
Subject: CN=91d2870e533a5afdfddfe9c34d9439b6ee59552a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a2:19:88:19:20:35:2d:ca:c0:05:5e:52:a8:
ad:3f:c1:83:dc:5b:59:1c:d3:ae:8b:96:ae:10:39:
dd:57:1c:a8:bf:d9:14:c8:f4:eb:41:7f:af:da:f8:
3d:c9:84:9f:46:44:fd:d1:b4:34:4c:a6:72:a3:03:
40:dc:6e:73:96:62:26:d8:d5:0a:af:2d:dd:ff:3d:
4a:ca:a4:91:06:ba:fd:50:64:70:98:ee:6e:7b:45:
8e:42:02:44:50:65:47:0b:57:6d:96:23:13:47:c2:
44:94:2e:32:05:c9:53:34:6e:8e:0a:0b:41:74:6f:
1f:06:a3:b9:da:71:b9:a5:5e:14:98:eb:c0:78:e0:
72:3a:9b:03:c4:d2:bf:95:45:e5:d7:b6:9a:bd:75:
56:c6:f6:dd:dc:1a:1e:6d:83:47:02:b5:97:03:f3:
3d:4a:3d:da:4f:6f:51:6d:62:33:30:60:87:d4:56:
8b:25:85:13:a7:1b:fe:0b:75:6b:51:44:69:20:f7:
34:6c:fb:a9:a6:a1:86:0d:03:11:e4:32:cc:b1:d7:
0b:8e:d2:61:c6:83:1b:80:36:f0:f9:39:a7:1a:52:
dd:c1:3f:dc:7f:65:2a:3c:17:5d:55:ec:9b:2f:8a:
0e:65:44:07:80:7e:3d:bd:a9:6b:49:93:5f:e8:d6:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D2:87:0E:53:3A:5A:FD:FD:DF:E9:C3:4D:94:39:B6:EE:59:55:2A
X509v3 Authority Key Identifier:
keyid:F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:66:b9:15:67:5f:7b:6a:01:7e:ce:ad:6a:05:35:bf:dc:83:
69:d2:9e:27:52:ab:2c:38:17:00:5c:19:df:84:75:19:b8:b2:
f2:84:b1:31:d7:fe:e6:0e:c6:9f:81:8e:43:68:c0:e3:cb:7b:
6e:fe:ac:8c:44:85:57:62:21:54:2c:f7:39:6c:3e:f3:67:0e:
82:98:4b:e6:7e:94:bb:62:1f:91:8a:b5:b2:2e:a1:54:66:72:
d1:b6:55:1a:54:8d:a2:22:b3:44:45:75:4b:7e:39:35:ba:d8:
5a:a1:41:3d:03:2d:13:0b:30:ad:fe:08:b1:51:62:f9:5d:67:
9c:70:4e:53:86:63:17:c8:57:a0:d5:7a:30:f0:09:59:25:bc:
80:98:20:30:06:8a:a7:65:67:6e:b6:27:b4:f0:78:b7:9b:ff:
ca:44:8b:c2:20:72:ad:e2:98:07:a5:9a:21:75:e7:66:6e:2c:
c7:71:04:86:29:d9:31:03:b6:a5:89:a8:d3:c6:8e:8b:01:66:
04:5a:dc:ac:f0:e6:9a:ee:db:a4:fe:c9:4d:1e:e4:2d:05:27:
a7:8f:36:b3:3e:ab:24:49:c6:9d:31:f8:3a:f4:4b:74:e1:d4:
69:f6:fb:f4:b2:32:91:3b:7a:51:46:eb:15:99:d1:70:da:db:
f2:d5:7d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:47 2026 by rpki-client