Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
File: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft (raw, json)
Hash identifier: Qt+K63xWt1V+ZkIf2GX5U6yYer2sBkDodmOfGrpdmik=
Subject key identifier: 4E:43:E5:69:92:C0:4E:04:7A:85:D9:BB:14:B2:87:AC:57:01:ED:EB
Authority key identifier: D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
Certificate issuer: /CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Certificate serial: 019F1943BD0B421AAEDFBB6EBEC1F4347734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
Manifest number: 1657
Signing time: Tue 30 Jun 2026 16:01:37 +0000
Manifest this update: Tue 30 Jun 2026 16:01:37 +0000
Manifest next update: Wed 01 Jul 2026 16:01:37 +0000
Files and hashes: 1: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl (hash: CM1q18uuqU4Pwms+t91IYxNeKlqMHhwukI5vvEf/Xi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:bd:0b:42:1a:ae:df:bb:6e:be:c1:f4:34:77:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Validity
Not Before: Jun 30 16:01:37 2026 GMT
Not After : Jul 1 16:01:37 2026 GMT
Subject: CN=4e43e56992c04e047a85d9bb14b287ac5701edeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:92:4b:54:2b:83:0a:1a:ee:f0:86:b1:61:
21:f7:cb:d5:9b:fa:50:87:db:92:1b:28:ad:dc:61:
0f:22:84:5a:15:64:6b:e0:da:f1:78:2e:96:76:92:
24:4e:72:52:c6:84:c5:63:fb:6c:c5:17:f6:bb:51:
f6:f3:b9:ec:7d:d7:6c:c1:ac:a3:56:1c:6d:8c:62:
88:53:19:a2:c8:89:11:d4:d8:ed:db:be:15:28:6d:
fa:a1:f3:6d:ff:c8:e2:7c:82:8d:0b:a2:6d:af:4f:
c0:24:98:c5:e7:98:2d:4c:8f:a2:28:57:6a:46:24:
cc:a4:8c:c4:a3:8b:7f:54:e8:b6:43:b5:dc:7a:b5:
f6:cb:73:52:bc:27:d5:06:ba:71:12:9f:e7:a6:05:
2f:4f:29:e2:07:60:07:9c:d3:ce:e4:32:ff:97:4a:
f9:ac:42:6d:48:f8:86:bf:9d:61:56:59:84:43:97:
53:1e:ac:25:4d:44:ae:99:cf:a0:c1:6d:d9:2e:ff:
34:c1:d6:31:69:c6:4e:af:2a:30:e8:d7:97:af:e2:
c5:a6:01:18:c2:70:54:60:08:4e:f9:68:0c:70:ec:
4f:3d:d5:ba:ac:05:03:5c:b3:29:d1:0e:b0:c4:2e:
17:c7:65:c9:ff:d5:e0:ae:af:24:0c:be:8d:34:11:
91:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:43:E5:69:92:C0:4E:04:7A:85:D9:BB:14:B2:87:AC:57:01:ED:EB
X509v3 Authority Key Identifier:
keyid:D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:db:7e:af:89:77:d8:fc:03:ae:b2:b2:5c:dd:67:ff:1e:af:
05:6b:d2:38:9f:56:1d:9d:62:46:1c:53:96:b2:e6:e8:15:14:
60:95:41:ec:a8:e8:6b:66:be:57:7c:dd:27:aa:fc:32:66:04:
60:03:e9:45:8e:12:6d:3f:90:95:c2:76:de:02:ee:86:03:fd:
d0:1d:63:70:30:b5:1f:ef:99:a6:75:a9:af:77:4d:b1:99:7c:
50:bd:78:14:05:90:63:60:0a:cc:98:e3:bb:4b:8a:17:14:8d:
a1:d1:32:f1:d0:90:6e:ac:81:23:0f:39:7d:77:12:e2:e2:86:
16:da:71:1a:d3:f2:3e:a7:81:13:99:c7:ed:84:b4:24:cc:55:
cd:7b:56:80:b4:f2:3f:9b:d6:4c:2d:ee:4e:64:e2:e4:ab:49:
9a:4a:55:85:df:ce:f1:df:46:a4:af:40:6b:27:d9:81:2a:a4:
52:91:ab:2a:a6:38:fb:4c:23:bc:41:58:16:40:55:a6:21:1c:
ba:4b:a3:8d:fd:8a:65:3e:fe:a1:1f:50:7d:c3:6d:5a:4d:6a:
3c:14:f6:dd:22:69:e7:0c:f0:58:61:76:1e:89:e5:01:cf:b9:
36:98:b8:50:d2:42:e8:91:68:b6:fd:84:b7:d8:05:81:9d:d6:
ec:00:0e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:32:23 2026 by rpki-client