
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
File: 1-75S2DTiaNxpiDApL95LY8faOS4.mft (raw, json)
Hash identifier: uA8KuQNt27XsYeeTKZ6S1uVhv9EmVlK5vzyzl92+VdM=
Subject key identifier: 99:9C:8C:D5:34:17:8E:87:CB:FB:50:3A:96:AC:82:03:FA:46:AC:25
Authority key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
Certificate issuer: /CN=fbbe52d834e268dc698830292fde4b63c7da392e
Certificate serial: 01A1C4B0E8F280CC74BB82FA6B4A13A92888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
Manifest number: 106B
Signing time: Tue 10 Nov 2026 09:01:30 +0000
Manifest this update: Tue 10 Nov 2026 09:01:30 +0000
Manifest next update: Wed 11 Nov 2026 09:01:30 +0000
Files and hashes: 1: 1-75S2DTiaNxpiDApL95LY8faOS4.crl (hash: /5lNpLYR2sOvfQnmGsWV6XQjfQEgz/ZyhCzVLnnoXcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:b0:e8:f2:80:cc:74:bb:82:fa:6b:4a:13:a9:28:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe52d834e268dc698830292fde4b63c7da392e
Validity
Not Before: Nov 10 09:01:30 2026 GMT
Not After : Nov 11 09:01:30 2026 GMT
Subject: CN=999c8cd534178e87cbfb503a96ac8203fa46ac25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:1f:30:c1:e9:12:23:e1:c4:7d:45:44:9f:
a2:97:6b:e5:cf:5d:13:06:2a:1a:52:d1:8b:f7:e5:
f8:14:91:9a:6c:04:fa:50:00:6d:49:83:1c:b4:6c:
9d:78:0b:04:e9:f3:02:77:18:5e:04:7b:e5:39:9f:
5a:ab:9c:7b:37:2b:f1:73:69:9b:4e:0b:7a:99:9e:
d2:90:69:13:a1:1d:44:cf:d3:4e:b3:b6:db:63:13:
4e:e0:f3:80:d4:47:94:68:43:53:30:15:e9:75:54:
f6:04:bf:15:a6:d8:11:30:73:83:b6:2f:1a:83:f7:
ae:02:08:9b:89:88:3c:14:42:e1:9a:18:4a:66:28:
92:1f:25:da:77:16:0e:af:e8:69:90:84:68:25:5c:
8e:58:e0:91:4e:a2:c8:6f:43:75:9e:ca:c6:88:72:
42:5c:dc:1a:a3:9b:91:e0:36:e1:a9:04:7e:f4:88:
4b:f7:f0:53:5e:3c:ec:0b:b9:fe:bd:88:4e:a2:a6:
83:b2:c9:f2:6e:9f:dd:4c:4c:2c:1a:e8:16:18:45:
08:0e:56:42:fb:77:83:f4:09:a1:9d:33:93:25:a1:
9c:b6:62:02:ed:88:ee:91:7f:c8:69:63:a2:e6:11:
bc:81:ee:9f:17:76:34:28:7c:14:05:d8:a0:06:c4:
f8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9C:8C:D5:34:17:8E:87:CB:FB:50:3A:96:AC:82:03:FA:46:AC:25
X509v3 Authority Key Identifier:
keyid:FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ba:6c:43:0a:eb:37:36:cd:ca:94:96:94:d4:97:06:b8:cf:
df:d6:aa:a9:48:24:0b:d9:f5:10:be:a3:47:7f:57:4d:27:68:
26:a7:35:69:73:cd:3a:8c:ec:a4:3c:e4:55:94:fc:3b:dc:a6:
bd:0e:b4:8e:bb:7e:98:cb:f1:13:37:f5:51:72:18:77:f8:50:
87:80:df:f5:93:77:ff:02:89:57:bd:92:79:ca:bd:eb:77:a9:
c3:c0:78:bc:3a:ac:c7:04:47:8b:79:31:b7:3a:c6:c2:1a:74:
20:98:1e:ae:e2:6d:44:1e:67:fc:a0:c3:da:47:97:43:26:53:
f6:6b:69:e0:97:4f:b8:c9:26:61:34:f3:d3:ea:eb:43:85:d0:
d2:2a:c5:53:ee:b1:6d:8b:c9:b5:3f:03:fe:ce:b0:7b:7b:39:
12:c9:dc:35:fa:e3:04:f4:bd:cc:08:61:b3:04:e5:dd:f7:cf:
44:3a:72:b5:33:27:f6:64:17:3d:6d:c0:fc:6a:ff:d7:82:35:
f0:3b:14:46:28:b1:d1:a7:ba:2c:20:c8:1b:96:14:03:5c:a5:
60:7b:62:15:b6:01:fd:bf:2e:72:94:f1:ac:07:ba:4e:90:91:
8f:a1:06:a1:70:83:31:d1:7e:84:ed:f8:c6:42:38:5d:7a:d9:
67:9e:a7:b7
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaHEsOjygMx0u4L6a0oTqSiIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYmU1MmQ4MzRlMjY4ZGM2OTg4MzAyOTJmZGU0YjYzYzdk
YTM5MmUwHhcNMjYxMTEwMDkwMTMwWhcNMjYxMTExMDkwMTMwWjAzMTEwLwYDVQQD
Eyg5OTljOGNkNTM0MTc4ZTg3Y2JmYjUwM2E5NmFjODIwM2ZhNDZhYzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4ofMMHpEiPhxH1FRJ+il2vlz10T
BioaUtGL9+X4FJGabAT6UABtSYMctGydeAsE6fMCdxheBHvlOZ9aq5x7Nyvxc2mb
Tgt6mZ7SkGkToR1Ez9NOs7bbYxNO4POA1EeUaENTMBXpdVT2BL8VptgRMHODti8a
g/euAgibiYg8FELhmhhKZiiSHyXadxYOr+hpkIRoJVyOWOCRTqLIb0N1nsrGiHJC
XNwao5uR4DbhqQR+9IhL9/BTXjzsC7n+vYhOoqaDssnybp/dTEwsGugWGEUIDlZC
+3eD9AmhnTOTJaGctmIC7YjukX/IaWOi5hG8ge6fF3Y0KHwUBdigBsT4OQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJmcjNU0F46Hy/tQOpasggP6RqwlMB8GA1UdIwQY
MBaAFPu+Utg04mjcaYgwKS/eS2PH2jkuMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS03NVMyRFRpYU54cGlEQXBMOTVMWThmYU9TNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvZDg0YjdhLTdlYjAtNDZhMi04YThh
LTAyNjYyNmFlMzFmNS8xLzEtNzVTMkRUaWFOeHBpREFwTDk1TFk4ZmFPUzQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M5L2Q4NGI3YS03ZWIwLTQ2YTItOGE4YS0wMjY2MjZhZTMx
ZjUvMS8xLTc1UzJEVGlhTnhwaURBcEw5NUxZOGZhT1M0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbps
QwrrNzbNypSWlNSXBrjP39aqqUgkC9n1EL6jR39XTSdoJqc1aXPNOozspDzkVZT8
O9ymvQ60jrt+mMvxEzf1UXIYd/hQh4Df9ZN3/wKJV72Secq963epw8B4vDqsxwRH
i3kxtzrGwhp0IJgeruJtRB5n/KDD2keXQyZT9mtp4JdPuMkmYTTz0+rrQ4XQ0irF
U+6xbYvJtT8D/s6we3s5EsncNfrjBPS9zAhhswTl3ffPRDpytTMn9mQXPW3A/Gr/
14I18DsURiix0ae6LCDIG5YUA1ylYHtiFbYB/b8ucpTxrAe6TpCRj6EGoXCDMdF+
hO34xkI4XXrZZ56ntw==
-----END CERTIFICATE-----
Generated at Tue Nov 10 15:23:25 2026 by rpki-client