Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
File: 249r9UNKqjLT5fETsAxbsUAvZ_Y.mft (raw, json)
Hash identifier: q3cZjshOSFGuI+q5CRJ0hFWK5I8+3RKnkWNWCmyuht8=
Subject key identifier: A7:E2:AD:A6:8A:AE:E5:AF:4F:A3:E4:A3:29:ED:A4:D2:F8:6D:3A:AF
Authority key identifier: DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6
Certificate issuer: /CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6
Certificate serial: 01A13D1387038A1AFED25563CDE2DE92939B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
Manifest number: 0B98
Signing time: Thu 15 Oct 2026 01:00:52 +0000
Manifest this update: Thu 15 Oct 2026 01:00:52 +0000
Manifest next update: Fri 16 Oct 2026 01:00:52 +0000
Files and hashes: 1: 249r9UNKqjLT5fETsAxbsUAvZ_Y.crl (hash: F1z8l74A0iRA3mHtryWj3U9xk3ek6b4uFiV8JpzdI08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:87:03:8a:1a:fe:d2:55:63:cd:e2:de:92:93:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6
Validity
Not Before: Oct 15 01:00:52 2026 GMT
Not After : Oct 16 01:00:52 2026 GMT
Subject: CN=a7e2ada68aaee5af4fa3e4a329eda4d2f86d3aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:74:f9:ca:d2:b9:ed:fe:9d:da:37:8e:ee:
9b:dc:a0:d8:dc:ef:d5:e2:a0:4f:44:0d:19:13:5d:
ab:b1:88:c6:f4:f3:8d:7a:a6:e4:6e:c7:2f:c9:1a:
a9:54:0f:40:fd:7e:ba:78:e8:ba:8e:6f:01:19:9e:
45:00:2b:17:58:6f:2a:4d:3e:f2:e0:6d:55:8a:a9:
e7:38:c1:69:67:8b:80:68:25:7e:9e:4d:7d:b9:10:
42:85:60:6e:f0:1c:c1:ec:45:cd:31:bf:e1:b3:9b:
cb:c7:50:a7:cf:96:90:43:86:62:d8:de:31:c2:60:
57:0f:47:ef:a6:42:03:f4:92:e9:15:0d:54:cc:fc:
99:36:91:02:fd:ef:40:84:4c:60:b2:82:a2:a2:99:
8c:6c:90:35:d1:98:b6:2d:28:ea:ac:3e:e8:56:f1:
20:44:34:1d:60:9e:46:1a:7d:06:2f:cd:09:b8:d5:
f8:aa:c8:9a:2a:18:fd:b9:a4:f2:ff:79:eb:28:f9:
e4:ae:bf:1d:53:99:24:65:1a:5e:ad:fa:7f:2c:91:
95:03:87:43:0f:11:72:a2:8c:64:48:33:f4:26:58:
f2:f6:40:2d:5b:77:ac:7f:26:a1:7b:4f:2d:8f:cc:
9d:24:f4:69:ed:c3:db:9e:85:ea:4f:ab:36:fb:51:
b2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E2:AD:A6:8A:AE:E5:AF:4F:A3:E4:A3:29:ED:A4:D2:F8:6D:3A:AF
X509v3 Authority Key Identifier:
keyid:DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:64:ff:ac:60:79:d9:36:c0:a3:dd:10:2f:51:b0:c4:2f:61:
ac:8a:2a:21:b7:6b:d4:35:0d:77:42:b8:14:d5:b0:76:94:cd:
77:19:65:7b:68:46:03:25:20:92:5d:f5:6c:3e:6b:5c:a3:26:
ee:26:11:46:62:30:7c:da:ed:61:1a:d0:f6:49:08:77:3b:49:
09:75:10:18:84:80:b7:9c:22:e4:0a:25:72:b6:1a:2c:f7:b9:
18:dd:5e:9d:e1:6f:f5:fe:66:8e:f0:93:6b:ab:cb:0b:7e:45:
44:0f:f4:ad:67:e9:9e:8a:4d:3a:63:9d:da:e2:9e:69:a1:23:
0c:4c:66:77:06:4f:d5:4e:6f:08:65:50:35:4e:cf:45:26:c8:
da:2e:18:0d:d8:20:11:ef:6a:8d:37:97:48:ee:9d:c4:b7:9c:
76:67:ff:54:07:c5:58:19:d7:fe:7a:64:01:7c:b6:df:a4:af:
39:4d:36:21:5d:98:3e:ef:d5:84:43:02:aa:95:9b:dc:36:80:
9a:55:8b:fa:7a:1e:1c:59:56:e0:1a:76:ef:26:3f:b6:8c:f4:
ff:cd:fa:d1:6c:d2:30:9e:12:f9:2c:65:23:74:83:c8:a0:9d:
7b:29:da:65:a6:1d:80:75:eb:54:99:04:2d:54:59:d4:c5:69:
f8:88:a0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:22 2026 by rpki-client