Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
File: 9rES1L7bpvNYUoqDcUG3SwkphZM.mft (raw, json)
Hash identifier: wso5EseoQlUxFyFSjrMrzDTUYm45FHjPHOxywm5aCNY=
Subject key identifier: 37:5C:49:47:6C:24:70:99:09:74:3D:EE:44:9F:56:C4:63:4E:21:6F
Authority key identifier: F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
Certificate issuer: /CN=f6b112d4bedba6f358528a837141b74b09298593
Certificate serial: 019F189E2283713BF8A5064ABA66614419FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
Manifest number: 18D7
Signing time: Tue 30 Jun 2026 13:00:44 +0000
Manifest this update: Tue 30 Jun 2026 13:00:44 +0000
Manifest next update: Wed 01 Jul 2026 13:00:44 +0000
Files and hashes: 1: 9rES1L7bpvNYUoqDcUG3SwkphZM.crl (hash: LPW1DnL2c0/4zvvdAidc/+cu1CenPmKw2l8zov1yKmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:22:83:71:3b:f8:a5:06:4a:ba:66:61:44:19:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b112d4bedba6f358528a837141b74b09298593
Validity
Not Before: Jun 30 13:00:44 2026 GMT
Not After : Jul 1 13:00:44 2026 GMT
Subject: CN=375c49476c24709909743dee449f56c4634e216f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:16:2e:b5:74:83:65:d5:f9:5e:62:c4:17:
93:42:e8:c5:8a:d8:92:25:99:3a:1a:90:f3:f7:5e:
e4:ee:28:f9:ea:f6:a6:5e:00:83:89:51:dd:1f:cc:
6f:7e:7d:fa:cd:7c:ea:9a:4e:9c:a7:93:31:39:32:
6b:f6:1e:f1:58:73:c9:ad:bd:47:51:d7:5c:44:35:
36:8f:5a:69:15:4a:fb:9a:28:fa:05:3c:05:60:ce:
18:b9:6c:31:99:e6:8f:c3:11:3a:99:a7:90:0a:35:
54:37:2a:8d:d2:f2:35:9f:84:fc:25:c7:a1:e8:ca:
5b:ba:1c:fd:68:c6:f9:52:2d:7b:f3:d4:fb:da:92:
d9:5c:9e:26:8b:a0:de:38:1e:db:94:15:05:64:6c:
43:72:30:55:b3:ae:68:ec:ac:93:6c:1d:89:43:75:
94:e3:75:16:10:54:7a:ef:22:be:8b:a4:ea:9a:26:
ce:c4:c5:35:e7:d9:5c:3c:cb:47:6c:a4:ef:c6:59:
4a:82:8e:7c:72:4a:40:47:c6:93:13:31:30:ee:6a:
ac:0e:d9:db:7f:f6:02:57:2e:25:e0:1b:f0:ff:ad:
bb:da:d5:8d:8d:fd:4c:15:9a:47:19:1a:2d:b0:ff:
b2:76:1d:e6:b0:8d:31:f3:68:aa:21:31:5f:2e:91:
11:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5C:49:47:6C:24:70:99:09:74:3D:EE:44:9F:56:C4:63:4E:21:6F
X509v3 Authority Key Identifier:
keyid:F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:83:04:f7:6b:5b:aa:a2:13:4f:dc:47:bf:6b:01:52:a3:a6:
79:c7:f1:70:1a:67:22:14:74:18:ff:57:73:35:fa:b5:72:2f:
0c:48:b8:1b:7b:b2:e4:02:45:64:3c:30:3f:c4:55:30:30:b7:
c5:97:d5:dc:5d:80:b8:54:25:60:e8:ad:71:5b:dd:a1:6b:69:
36:5a:7f:94:41:23:ca:9c:3c:09:fd:d0:48:a2:ce:2b:9f:38:
07:72:3c:7e:62:67:d9:d5:ca:4f:9c:dc:b2:5c:8f:28:f3:9c:
72:e4:d9:c7:e1:eb:0c:d8:47:08:40:f4:e9:a8:d7:29:5b:1e:
75:a4:6b:bc:02:f9:2f:96:89:5e:24:0b:91:fe:25:26:e7:33:
dd:b9:7b:6f:29:55:86:00:52:c1:dc:1e:29:1f:c2:f6:e2:8b:
7f:fe:98:0f:20:57:a1:9b:4e:86:43:ab:66:cf:92:e1:7a:19:
d4:13:58:63:64:fc:e6:1d:1f:05:90:b6:3e:89:de:ae:14:cf:
b1:fb:96:9d:31:43:78:65:a4:66:3f:c8:07:2c:e8:3c:d7:f2:
72:a0:68:9d:ff:56:66:eb:89:ba:71:46:b3:51:35:7b:45:d7:
99:0a:3e:5b:7f:18:06:91:90:75:2c:3c:9b:c0:a9:54:58:66:
ff:9d:d2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:42 2026 by rpki-client