Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
File: fQ9TBOHZKWjpheNo6E833TZw71w.mft (raw, json)
Hash identifier: mIfsgvp1/5Xi7AXw8ZjaMgmECwCx0AU+7D31CYOsC0A=
Subject key identifier: 73:4B:09:8F:BF:69:2A:CA:3C:80:2B:7C:CD:0E:E0:DB:72:E7:9E:BE
Authority key identifier: 7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C
Certificate issuer: /CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c
Certificate serial: 019D98F49464BEC9BF2DCAA1F4804255F681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
Manifest number: 1005
Signing time: Fri 17 Apr 2026 01:00:58 +0000
Manifest this update: Fri 17 Apr 2026 01:00:58 +0000
Manifest next update: Sat 18 Apr 2026 01:00:58 +0000
Files and hashes: 1: fQ9TBOHZKWjpheNo6E833TZw71w.crl (hash: epWpLVAKK3sbyMETE7EGaKuTm5BMBNdJy4ofCcLSIWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:94:64:be:c9:bf:2d:ca:a1:f4:80:42:55:f6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c
Validity
Not Before: Apr 17 01:00:58 2026 GMT
Not After : Apr 18 01:00:58 2026 GMT
Subject: CN=734b098fbf692aca3c802b7ccd0ee0db72e79ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:18:73:b5:4b:56:ef:db:38:44:a4:71:6c:9f:
35:8a:5f:f8:eb:fe:e6:2e:84:f6:e1:ff:aa:95:40:
d0:43:89:95:dc:e3:45:de:f9:c7:48:e8:ef:3b:2a:
45:d9:50:e6:1c:97:dd:a6:db:5e:27:06:ca:a0:92:
0e:5d:7c:01:dd:1e:7f:ce:ff:8c:df:a0:36:f3:99:
13:1f:d3:ab:ee:c2:47:e1:e0:72:37:09:9e:0b:e4:
26:62:7f:0f:71:21:f8:90:2f:36:d7:4d:8a:8d:ba:
d3:e8:0a:d5:1f:d8:d3:e7:4f:8a:b3:25:3c:5a:d1:
c3:2c:4a:52:02:e4:f8:23:0c:a1:9a:64:0f:cf:06:
cc:ac:5b:ea:29:5d:75:05:ea:12:b2:59:7d:48:99:
e9:97:b3:86:a2:cf:9b:a1:07:63:7f:c5:99:5c:c3:
f5:ce:52:c3:ef:37:9b:52:ad:05:0a:15:5b:1e:71:
01:38:f7:47:a3:97:cf:21:a1:7f:f6:fb:90:39:78:
3f:67:06:7b:9c:d1:2d:de:1d:d7:84:d7:4a:ed:40:
61:30:d0:8a:67:69:27:d8:69:11:19:61:b7:b7:33:
f3:07:95:55:26:5d:6b:71:52:ba:22:db:79:65:25:
2c:3c:19:9c:cc:61:6c:2d:35:9d:26:43:d5:2c:a0:
23:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4B:09:8F:BF:69:2A:CA:3C:80:2B:7C:CD:0E:E0:DB:72:E7:9E:BE
X509v3 Authority Key Identifier:
keyid:7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6f:6a:77:21:9c:62:32:e5:dc:79:8c:70:21:f2:42:4d:74:
d0:3b:df:c0:b5:df:f4:4a:d9:8d:c5:8f:f8:3d:c0:4b:5b:e5:
dd:46:b6:e3:d5:68:8c:31:95:80:ff:7f:12:c0:cb:17:ec:88:
fd:49:90:27:7b:f4:a5:35:c5:f3:1f:aa:fc:8f:6e:5f:f6:3b:
83:29:c9:67:c4:b0:7e:b8:05:0f:57:d8:4c:0e:d6:8c:10:11:
f5:8f:b8:b6:49:b2:5b:5a:4e:30:ab:d3:5c:71:16:11:be:f6:
29:34:8a:c6:52:6f:2d:6a:df:bb:2a:0a:ef:85:b0:4d:de:d9:
54:fd:ef:ff:b9:b4:71:46:5f:cb:84:dd:53:47:69:ab:92:f5:
bf:fc:d5:5e:32:77:e8:49:b7:71:98:23:a7:55:96:f5:3c:84:
fd:5c:87:f2:2e:59:5f:d2:20:fa:90:1f:7c:cf:c6:64:ed:96:
18:b3:9a:83:81:62:d3:61:56:7d:63:75:42:c6:54:ae:cb:29:
a5:6d:11:66:13:0f:26:12:bf:ec:ca:a0:17:3a:87:e1:33:44:
fa:21:e7:f7:dd:be:05:8e:6d:74:b7:0a:ee:99:94:8d:69:74:
87:f6:c6:dc:26:e5:93:ab:1d:bb:79:61:19:f7:da:22:29:76:
d8:06:41:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:10 2026 by rpki-client