Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
File: 249r9UNKqjLT5fETsAxbsUAvZ_Y.mft (raw, json)
Hash identifier: W7zM3XMBzYr2mJ4H8fsFbqeCS8pq4t/sGUTAzH+Cy8M=
Subject key identifier: 95:CD:4F:1F:AC:C8:6B:90:A6:84:EF:32:30:66:A4:A8:AA:8F:05:AA
Authority key identifier: DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6
Certificate issuer: /CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6
Certificate serial: 019E30E00BC0C0639F0C1366E9A608FD0150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
Manifest number: 0A04
Signing time: Sat 16 May 2026 13:00:49 +0000
Manifest this update: Sat 16 May 2026 13:00:49 +0000
Manifest next update: Sun 17 May 2026 13:00:49 +0000
Files and hashes: 1: 249r9UNKqjLT5fETsAxbsUAvZ_Y.crl (hash: P5BcfkBEEHqynNA0IE2PTX01yVhcamW85KPhwgzDYY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:0b:c0:c0:63:9f:0c:13:66:e9:a6:08:fd:01:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6
Validity
Not Before: May 16 13:00:49 2026 GMT
Not After : May 17 13:00:49 2026 GMT
Subject: CN=95cd4f1facc86b90a684ef323066a4a8aa8f05aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6e:7d:2b:88:d6:cb:93:d0:e9:e7:30:15:8a:
84:3e:dd:4c:a4:bd:dd:e8:6b:89:ad:c9:38:c4:fc:
0d:2b:c3:9e:d1:56:4b:24:a6:83:02:65:ff:33:d6:
0b:ff:e1:2d:be:24:02:bc:50:96:84:51:42:a4:c5:
71:b1:58:5e:eb:3b:f0:5a:6c:a2:cd:af:67:45:fc:
ad:cc:d7:88:4a:b3:bd:03:65:1c:c0:0b:5b:80:0a:
92:df:08:f4:08:55:45:e9:73:1c:38:9e:1a:8c:48:
6d:01:35:21:2b:15:c9:bc:a0:23:e4:6a:18:d4:a6:
be:4e:9d:41:ca:e9:3d:37:2e:6e:cd:58:8d:a6:bb:
55:da:1d:49:e3:48:e1:16:7b:4f:f5:30:f2:3d:bc:
90:ec:8b:51:8c:52:d5:e0:35:60:e1:a4:53:fb:67:
ba:f2:9d:3f:06:cd:15:45:5b:bf:1d:79:b8:cb:5a:
1b:1c:cb:4d:f8:fe:fe:d5:a2:69:7e:d4:ca:ec:fe:
8a:ea:59:69:a2:17:0b:d1:48:85:9d:13:44:96:1d:
be:11:47:95:3f:64:44:82:24:d4:6d:86:78:58:2d:
f6:34:1f:a7:4d:10:21:65:97:70:79:4a:8b:ca:74:
f6:99:3d:3f:73:9d:06:17:bd:5f:ee:a7:fd:f2:05:
ce:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CD:4F:1F:AC:C8:6B:90:A6:84:EF:32:30:66:A4:A8:AA:8F:05:AA
X509v3 Authority Key Identifier:
keyid:DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9e:7f:47:48:0b:f5:cd:c3:fe:fe:6a:6f:47:59:e6:39:96:
06:fd:23:11:bf:c2:ea:9d:69:a0:bf:38:71:d2:25:52:c3:a8:
d5:af:28:bf:d0:ad:ab:80:c4:5a:84:03:96:aa:49:9a:6e:08:
86:68:78:09:e4:d3:07:84:dc:bf:02:d2:e7:02:27:a7:e6:bd:
69:93:93:76:05:69:7e:8a:73:7c:2f:5e:32:64:5d:a2:40:2c:
ef:81:33:c8:0b:40:ed:25:08:81:a5:1d:e1:a8:e2:d6:81:33:
fb:3a:2e:87:21:d4:45:0b:c3:fb:ab:11:f6:1b:03:b7:35:2e:
9a:c1:7c:94:69:24:bf:02:8d:67:b6:7d:0a:48:56:e5:29:3f:
6d:7d:8c:74:b8:8d:17:5c:a5:02:99:72:53:9e:b1:d7:1c:c6:
36:2f:d2:68:c0:00:46:19:d2:4c:5a:00:52:57:0c:54:f7:4a:
3d:a4:13:d4:a1:88:12:dd:95:05:a7:af:c2:cd:d4:9a:a5:ef:
15:1a:74:ed:e6:96:72:70:d2:27:2d:87:15:ad:b0:bd:3d:19:
21:1e:39:0d:3d:ef:1e:c8:24:55:85:ab:71:f8:be:0b:04:5b:
70:cb:5c:4f:0d:c0:9c:86:3a:4b:63:89:8b:59:c2:51:10:45:
55:9c:27:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:47 2026 by rpki-client