Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
File: 9WFTxQuIFb0o37sA4j5vJjIDFy4.mft (raw, json)
Hash identifier: j0Xmmuf5k2Xg4miKOfX5Q5eO7lOhMeK2Mr0rGOaBluI=
Subject key identifier: F9:E2:DE:4F:A1:E8:CA:E6:70:66:26:21:A6:22:5F:AF:AA:26:2A:B6
Authority key identifier: F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
Certificate issuer: /CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Certificate serial: 01A1DEDECE51652AB3CCBDCCDA209F8B6FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
Manifest number: 0FDA
Signing time: Sun 15 Nov 2026 11:01:46 +0000
Manifest this update: Sun 15 Nov 2026 11:01:46 +0000
Manifest next update: Mon 16 Nov 2026 11:01:46 +0000
Files and hashes: 1: 9WFTxQuIFb0o37sA4j5vJjIDFy4.crl (hash: 6TUp1t4nkbl8y/WmDbAany7cO8avuylAOrR5UnXM3Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:ce:51:65:2a:b3:cc:bd:cc:da:20:9f:8b:6f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Validity
Not Before: Nov 15 11:01:46 2026 GMT
Not After : Nov 16 11:01:46 2026 GMT
Subject: CN=f9e2de4fa1e8cae670662621a6225fafaa262ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:69:99:22:52:2a:79:3f:bc:6a:e1:04:cd:fd:
84:7d:a3:69:9a:bd:5a:49:4d:b6:c3:20:6a:5b:cc:
21:a0:ad:55:45:bf:16:0d:87:13:92:93:c0:98:14:
8c:30:01:02:bb:7d:3f:6c:f2:2f:db:ad:a2:06:93:
02:e9:16:17:10:99:9e:11:7a:26:15:f8:ad:b3:40:
b9:3b:95:39:57:a3:48:56:7d:9e:90:f9:49:59:e6:
cf:8f:21:03:bd:3c:7e:69:ef:3b:cf:a8:52:22:76:
76:fe:22:2c:db:46:68:df:79:66:cf:12:e2:43:75:
ea:c2:8b:65:55:09:6f:2f:b0:58:74:2e:80:20:14:
71:5e:0c:a7:97:f4:7c:8a:1b:2a:2d:24:41:37:9e:
eb:20:95:54:b9:13:66:6a:eb:7f:09:a5:6b:19:5a:
b3:c2:7a:fd:1a:d5:a1:5b:3d:33:c9:24:cd:e6:2c:
20:c3:a9:b3:ab:ef:5e:9e:e9:a8:fa:94:74:20:e2:
3e:ec:7e:45:c1:c6:18:d4:fd:db:4f:e0:f9:03:9d:
09:53:f5:5f:a2:cc:f8:cd:86:1e:93:7f:b2:20:82:
06:8f:b6:04:7a:0e:78:12:a0:d4:57:9a:ca:03:18:
2c:3c:ea:4a:a2:9b:e1:3f:81:b4:8b:80:8c:70:fc:
1f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E2:DE:4F:A1:E8:CA:E6:70:66:26:21:A6:22:5F:AF:AA:26:2A:B6
X509v3 Authority Key Identifier:
keyid:F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c7:8d:3f:df:e4:fc:76:b7:87:e5:5e:be:22:ea:13:c3:3a:
73:45:69:9e:f9:88:72:6c:29:02:24:b7:fb:b4:3f:78:db:e0:
ac:cd:1f:f1:9a:a1:7c:6f:ad:9f:32:18:d8:02:7d:01:0e:40:
ef:d8:90:13:58:7a:18:0b:6b:fe:cd:76:a6:48:35:21:27:28:
9e:28:48:21:55:00:42:80:56:ec:9e:76:3c:c5:11:44:d2:34:
ab:33:7c:f6:a1:36:fc:02:73:84:5b:08:6d:72:cc:54:95:0d:
5f:17:bb:bb:86:5c:be:6f:9b:ca:d3:f4:08:23:df:a2:9a:1d:
66:e2:da:a3:07:2b:d6:65:2f:28:3c:fe:dd:38:1e:08:e3:98:
22:b3:88:b5:bd:79:5a:c3:01:30:36:d3:3e:01:01:2e:1b:6f:
d9:67:5f:12:89:56:b4:53:3e:f3:c9:e2:fc:15:27:67:27:8f:
d5:c0:c3:f8:4a:a5:9f:d9:fd:59:21:d9:ae:e1:fd:31:8d:5f:
a1:10:53:a7:31:2b:b2:82:03:33:3e:11:a5:23:b5:89:92:07:
d7:0b:23:02:b8:9b:86:5a:3a:c1:de:79:a1:7c:a9:67:3e:0e:
d2:df:21:07:8f:10:39:a2:6c:72:28:88:da:de:10:a7:e2:ae:
8e:f8:ed:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:52:57 2026 by rpki-client