Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
File: 1-cEFknmJ7EHAiQOtjNVqidrovl0.mft (raw, json)
Hash identifier: vz+Ih70t3JMTCFWYpazG2gGiV0fK/WNHMbFoqVYe9pE=
Subject key identifier: CC:28:44:D0:9A:9E:E1:EF:3F:E7:FD:1E:3E:DB:6B:2C:0E:E7:4E:41
Authority key identifier: F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
Certificate issuer: /CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Certificate serial: 019D3A5385F3457305E2E63D58DE63AC72C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 16:00:45 +0000
Manifest this update: Sun 29 Mar 2026 16:00:45 +0000
Manifest next update: Mon 30 Mar 2026 16:00:45 +0000
Files and hashes: 1: 1-cEFknmJ7EHAiQOtjNVqidrovl0.crl (hash: 8FlyNi7OQbtthNPdkeTYw6ezUtHjTsD7XdyBcuDSnEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:85:f3:45:73:05:e2:e6:3d:58:de:63:ac:72:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Validity
Not Before: Mar 29 16:00:45 2026 GMT
Not After : Mar 30 16:00:45 2026 GMT
Subject: CN=cc2844d09a9ee1ef3fe7fd1e3edb6b2c0ee74e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:42:55:05:9e:04:e7:1d:4e:19:4e:4c:a7:4c:
78:4b:d6:d0:66:3b:5b:6b:92:27:24:28:85:f1:f6:
b0:ac:4c:f4:fe:85:ed:49:58:42:f3:bc:64:9c:e8:
30:b0:95:5d:10:d5:5c:d1:4b:d7:fa:f1:fe:47:e5:
95:6b:fd:ce:60:19:14:ee:bf:8a:4b:e3:97:57:e9:
c4:57:69:33:a9:d1:4f:3a:e5:91:12:e5:ad:b2:7f:
0d:74:04:a9:2a:23:ec:8b:a1:3d:dd:d6:af:99:84:
bc:75:b1:6a:d1:80:e4:f5:7e:00:14:58:eb:47:6f:
fc:18:5d:ff:8b:12:4b:f5:10:b7:64:1a:8f:aa:d5:
37:a0:99:33:1d:65:3f:59:bb:ae:b6:f0:9a:66:39:
d6:ff:4b:a4:6a:12:4a:2a:69:47:3a:7f:91:a8:3e:
57:e7:37:8a:cb:f9:9b:4d:74:1b:5d:fc:53:39:9f:
a3:b3:83:0d:93:47:6c:38:f6:de:f5:25:1a:f0:33:
78:e0:56:49:1d:db:51:df:8c:c5:f4:92:fe:3e:c3:
4c:3b:fa:e3:07:f9:4d:b9:0c:30:01:ec:72:41:8c:
59:36:66:5a:ec:19:ba:33:c6:0a:a1:18:d8:cd:cd:
e4:62:b3:49:1a:92:9d:bd:f3:0f:c0:61:71:a4:b4:
9b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:28:44:D0:9A:9E:E1:EF:3F:E7:FD:1E:3E:DB:6B:2C:0E:E7:4E:41
X509v3 Authority Key Identifier:
keyid:F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4d:b5:88:ef:75:60:37:0b:03:96:14:d4:b2:09:3a:5b:c4:
5a:f3:91:8c:dc:b3:6c:69:63:7d:e1:e9:7e:ac:2d:a0:77:76:
3d:d2:6d:6e:ef:41:45:08:6c:82:c2:19:1a:14:9b:a3:c1:d2:
2b:93:33:c0:19:ea:af:b6:27:e5:1b:8c:0f:f2:69:59:63:3c:
01:47:89:06:f3:cc:01:e2:3c:73:27:7d:05:2b:5b:79:d6:57:
2a:82:ef:63:12:5e:bf:cc:e3:f5:e8:a3:f4:2f:a0:11:f0:c0:
2b:7b:87:a6:39:87:eb:91:a3:c0:25:6a:a8:09:34:25:c1:09:
61:66:50:c3:df:55:65:36:09:ad:ed:4d:e3:c0:91:07:20:82:
6e:41:1e:36:a7:5c:ce:83:48:a3:61:39:25:20:3c:6f:97:e7:
fe:31:87:c1:f5:9e:c9:55:bf:a5:d2:9c:50:0f:ea:12:5c:80:
5d:92:da:cc:57:2b:47:e3:34:85:9a:a1:74:c8:52:af:d1:e2:
a6:05:04:37:b5:61:a0:67:02:a8:41:5b:81:97:df:5c:09:58:
ac:12:30:b3:1c:4e:19:f5:5d:06:64:39:fd:46:18:98:41:ff:
20:5f:70:0f:d3:51:73:ef:ab:b0:02:2f:28:8e:fa:c3:87:92:
82:61:74:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:23:16 2026 by rpki-client