Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
File: 9fqTbNBbJl9g8zNAqMY952gvw18.mft (raw, json)
Hash identifier: WYbhocVkM7rVOBxadhHDqJQ05ZrIxBhtse7KISOtP4I=
Subject key identifier: FF:F6:A1:4D:1D:43:B9:04:6E:A8:45:17:30:85:4A:5B:74:33:E4:B1
Authority key identifier: F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
Certificate issuer: /CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Certificate serial: 01A123F89AF44F311DC0BA1487188D33254D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
Manifest number: 0A84
Signing time: Sat 10 Oct 2026 04:00:57 +0000
Manifest this update: Sat 10 Oct 2026 04:00:57 +0000
Manifest next update: Sun 11 Oct 2026 04:00:57 +0000
Files and hashes: 1: 9fqTbNBbJl9g8zNAqMY952gvw18.crl (hash: xG220m01o2VHAwAitxsJanr3Dbx0fmp6rRYM79q5S5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:f8:9a:f4:4f:31:1d:c0:ba:14:87:18:8d:33:25:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Validity
Not Before: Oct 10 04:00:57 2026 GMT
Not After : Oct 11 04:00:57 2026 GMT
Subject: CN=fff6a14d1d43b9046ea8451730854a5b7433e4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:57:d0:c9:d1:fe:6b:d8:be:e9:b6:99:ea:bf:
b2:19:9d:e9:f8:f3:a2:4a:15:d3:63:8d:fd:95:f7:
38:d9:c5:fc:1e:9a:4f:e2:dd:1a:99:b3:e1:a0:7e:
da:a1:b4:2b:52:8c:2d:72:5d:05:12:1c:31:67:8c:
10:09:12:be:97:4f:4b:8f:6f:8f:6e:ae:45:30:a6:
0a:28:77:50:72:a1:10:f0:b3:97:7e:a0:61:d0:17:
31:97:16:4c:b5:c0:06:8c:f6:13:b7:0b:5a:02:7d:
85:60:ea:f7:9b:ec:48:a1:9a:0b:88:08:23:42:1b:
9c:91:d6:58:98:15:53:70:cf:00:b9:dc:45:b1:5f:
cf:07:5a:2a:73:22:cd:ce:e4:7e:b6:15:a2:d1:ca:
a5:5f:c6:11:0f:61:3d:11:28:af:51:b7:43:f3:cc:
71:45:00:2c:65:85:31:b5:9a:c7:b3:6d:bf:51:65:
a9:d9:e9:71:1d:5a:e7:a5:6f:c5:3e:2d:c0:cd:1c:
79:75:5b:ed:df:fe:46:31:41:07:e1:09:00:1d:b5:
69:35:f0:45:07:58:a1:f1:93:4d:d8:d1:77:01:eb:
81:fd:4a:af:79:16:15:f5:2b:01:75:cc:d8:c6:54:
2b:ea:7c:d1:df:71:6d:22:a0:31:f9:c3:67:80:dd:
ed:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F6:A1:4D:1D:43:B9:04:6E:A8:45:17:30:85:4A:5B:74:33:E4:B1
X509v3 Authority Key Identifier:
keyid:F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9e:90:25:53:da:0c:22:2b:41:ec:cc:0d:ab:ff:bf:84:f3:
fb:9d:86:86:06:ac:04:b5:d0:d7:6a:8a:fb:a7:cd:96:3c:f5:
45:8a:6a:b2:d7:48:34:bf:52:33:9e:13:29:ae:3e:19:19:ee:
d3:ae:5e:d1:31:8a:10:b2:ff:36:92:5a:3a:96:24:58:04:44:
ac:da:36:cc:a1:2e:5d:49:ea:43:a6:37:12:96:51:82:46:d6:
29:2f:91:c3:a9:85:0b:8b:5b:e0:9c:c5:2e:5d:02:52:a5:89:
88:00:8f:e6:6c:57:4a:26:fd:a0:f6:81:ff:82:6f:c9:af:32:
34:bc:89:d2:cc:63:1c:26:e8:e2:87:2a:cb:a4:fc:09:07:0e:
18:47:8d:62:f1:18:64:67:c4:a8:66:81:23:af:04:1d:df:69:
b0:1c:d5:c2:3b:27:f8:a4:5f:cd:cf:5c:08:0a:6e:16:01:c4:
80:08:1c:05:23:33:11:0d:0c:b4:be:04:28:4b:a1:cc:d5:37:
cd:bb:80:27:cb:42:5b:a2:bc:93:62:7f:8c:af:9d:ad:76:23:
91:b2:d7:71:96:7e:46:71:cc:b1:fe:35:c2:6b:8a:83:6c:a0:
07:d7:32:b5:f2:3c:c0:30:24:92:ea:0a:32:86:f4:9d:9d:e5:
b5:81:41:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:57:54 2026 by rpki-client