Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
File: 1-muQgEgTpldoh5it3nvb0ObQ5T4.mft (raw, json)
Hash identifier: C/fI/uwL3pS7CWYdJ1i+4W8BBws/tWNQL0eDaF0VfwY=
Subject key identifier: 40:3E:0B:53:ED:98:48:E5:A4:4C:6A:54:E3:66:E3:2C:43:05:E5:95
Authority key identifier: FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
Certificate issuer: /CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
Certificate serial: 01A0D2A5BB8AB887D75375DFC609FDEEB7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
Manifest number: 0991
Signing time: Thu 24 Sep 2026 09:01:11 +0000
Manifest this update: Thu 24 Sep 2026 09:01:11 +0000
Manifest next update: Fri 25 Sep 2026 09:01:11 +0000
Files and hashes: 1: 1-muQgEgTpldoh5it3nvb0ObQ5T4.crl (hash: y8rh3wjep6oZKCTbkQs04BltQlAjeWhqc170Iqw6t3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a5:bb:8a:b8:87:d7:53:75:df:c6:09:fd:ee:b7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
Validity
Not Before: Sep 24 09:01:11 2026 GMT
Not After : Sep 25 09:01:11 2026 GMT
Subject: CN=403e0b53ed9848e5a44c6a54e366e32c4305e595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:07:80:f9:6f:e2:c7:a2:d8:f2:5d:ee:1a:a6:
1f:4b:59:6f:97:0c:05:af:65:c8:3a:54:b6:a9:af:
67:d7:02:12:2b:35:bf:c8:7c:16:ab:0e:fe:d4:72:
07:1c:5b:0b:89:26:65:27:59:9c:33:e5:8b:f6:44:
68:ff:5c:0a:ec:fc:5a:22:c1:ce:35:3f:16:87:c5:
35:df:2f:70:b1:68:56:7c:fb:f9:37:44:55:38:29:
bf:1d:8d:d2:04:30:0c:19:c0:b1:a9:d4:b6:4a:69:
4c:5e:d1:a3:b1:21:7b:f8:f0:b9:7c:98:f4:8a:1c:
5d:7f:fc:57:ea:a5:60:1c:de:d9:dd:10:b5:b6:28:
c6:80:33:29:c2:50:e4:7f:b8:98:d0:8e:4a:98:ac:
d0:83:d2:f7:0d:74:58:a2:b5:07:7d:eb:e1:5c:c6:
52:79:e1:30:f1:34:00:93:42:ec:60:dc:33:49:39:
bd:e9:f4:31:8c:dd:00:71:8e:20:f1:7e:22:44:65:
fb:80:f2:a5:ab:13:23:21:3c:49:eb:7c:63:b2:1b:
8a:72:2c:90:98:f3:03:5b:da:f9:e6:ff:f2:57:a3:
57:25:1d:96:33:34:e8:e6:91:de:42:2d:70:4e:0f:
0c:00:a3:e4:9c:77:04:fe:a8:52:56:0e:52:81:77:
cb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3E:0B:53:ED:98:48:E5:A4:4C:6A:54:E3:66:E3:2C:43:05:E5:95
X509v3 Authority Key Identifier:
keyid:FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2c:e7:a1:1b:8b:3a:4b:15:89:86:22:48:a8:50:b1:2d:9a:
f3:ed:57:1b:e9:4d:47:eb:ed:dd:a2:f0:c2:d6:fa:4d:5d:84:
21:b2:bb:d1:8d:66:08:16:1b:f2:d5:8b:1a:bb:2a:6b:3b:d8:
e8:c4:61:be:07:c4:8c:17:4c:e0:d4:1b:42:00:b1:54:e8:32:
96:1c:10:ad:3e:95:71:15:61:45:14:51:32:f1:15:33:70:db:
0b:55:e4:b3:2e:9e:9d:25:9d:e1:80:dc:b3:c0:ac:42:b3:7f:
dd:42:59:24:e2:cc:4d:14:da:be:72:f9:b8:17:96:0f:34:ee:
fc:0d:9d:0c:6b:7e:96:7e:2c:36:c3:e0:e9:fc:b9:6b:43:2d:
1a:36:e0:53:d5:1b:d0:3f:88:6e:5d:74:10:0b:2e:52:cb:37:
62:c1:24:f0:ce:65:1e:6d:24:88:b4:41:c7:8b:20:49:60:8f:
ed:66:ea:4e:72:9e:b7:0f:05:52:2d:74:a4:d6:c6:eb:f0:09:
50:87:b7:ee:50:73:20:70:56:59:1c:0d:f2:ec:7b:f5:85:0a:
95:e5:69:79:d6:90:81:0d:e1:01:d1:53:bd:53:14:60:8b:63:
13:92:a2:f7:c4:8a:9a:c6:94:a7:1f:f3:03:e4:de:8f:ee:3c:
23:5d:40:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:26:21 2026 by rpki-client