Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
File: rD5tWdR-c37cMaZfMQUUzUuV04c.mft (raw, json)
Hash identifier: SZm9NRMnx7qfcV7ilgHzw8Ouxc7fJ1KerIAvxXZU3XU=
Subject key identifier: C8:D1:78:16:A6:07:BA:14:AA:B8:50:36:49:43:11:D3:8D:3E:90:A1
Authority key identifier: AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87
Certificate issuer: /CN=ac3e6d59d47e737edc31a65f310514cd4b95d387
Certificate serial: 019EB7334A2D867D20AC4E3A1A6D28BB43D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
Manifest number: 1950
Signing time: Thu 11 Jun 2026 15:00:52 +0000
Manifest this update: Thu 11 Jun 2026 15:00:52 +0000
Manifest next update: Fri 12 Jun 2026 15:00:52 +0000
Files and hashes: 1: rD5tWdR-c37cMaZfMQUUzUuV04c.crl (hash: ISETVsmtXK15Qy0mpJOng1IIagpWjmVig/UVgGoJUzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:4a:2d:86:7d:20:ac:4e:3a:1a:6d:28:bb:43:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac3e6d59d47e737edc31a65f310514cd4b95d387
Validity
Not Before: Jun 11 15:00:52 2026 GMT
Not After : Jun 12 15:00:52 2026 GMT
Subject: CN=c8d17816a607ba14aab85036494311d38d3e90a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:bc:d7:01:e0:32:5c:7e:b8:b1:2a:c8:ff:
b2:9c:9f:3c:4c:1f:9f:09:09:21:1d:79:9c:2a:1e:
5b:df:12:2b:a7:04:6d:b1:2a:79:50:b8:38:aa:b5:
ec:95:85:a0:fe:6a:f5:e9:22:6a:4d:3f:d3:0a:20:
e6:7d:4b:aa:97:69:11:c5:5e:51:4b:f0:92:87:b7:
e8:bf:c6:e3:b5:79:0c:e5:35:9d:44:43:26:58:71:
64:3f:2a:72:24:bd:c9:02:80:33:f1:ce:bf:59:c2:
20:f7:10:4e:a9:05:77:10:3d:31:cd:ba:27:ed:0f:
71:71:2c:63:cf:93:e8:4b:38:ad:32:47:a3:13:0d:
17:ee:71:3f:31:35:2f:5a:00:15:4c:c9:b2:04:b2:
51:7f:9f:e1:8c:fc:b6:47:5d:1b:03:48:cb:de:6b:
52:bb:55:4a:71:a1:8c:3b:a9:3e:61:e2:f7:87:f0:
c2:14:4c:83:21:4d:de:7e:3d:f5:b4:5a:ec:b4:9a:
eb:9b:4c:68:f7:da:08:d7:f4:a6:26:bd:51:b9:46:
db:5c:24:1d:52:ad:90:49:6a:a2:a5:ea:62:81:c3:
ad:ac:ac:06:6a:b7:83:eb:b1:a1:01:c9:fc:39:4f:
ad:a1:32:2e:4c:33:f4:29:c0:40:50:22:41:c4:d8:
03:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D1:78:16:A6:07:BA:14:AA:B8:50:36:49:43:11:D3:8D:3E:90:A1
X509v3 Authority Key Identifier:
keyid:AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:51:32:a9:e4:39:1b:a9:81:5b:70:63:ed:8f:94:a4:65:a9:
13:af:7c:35:12:78:9e:0e:8a:2b:93:fc:8f:2c:06:94:c2:81:
29:57:4c:aa:f5:3b:e2:8f:f9:9e:3a:8d:0a:b7:bf:da:02:d1:
28:13:d2:94:42:49:f0:7f:d0:15:d7:24:c8:52:db:5e:e3:84:
74:68:6c:8a:43:37:6d:94:d7:33:d8:6e:da:f5:cf:95:8a:f2:
a0:01:a0:fe:01:92:d0:b1:fa:c8:62:bb:09:ad:2c:a5:c5:fe:
28:0d:b7:30:c6:9e:d0:45:00:77:b2:f5:5b:83:d2:6a:68:5a:
cb:13:9e:f0:f2:f7:08:4c:da:99:41:32:d8:5f:54:c6:e9:e0:
83:4f:03:d8:51:58:fa:83:a1:65:43:b9:ee:6a:f5:fd:8c:83:
20:8b:09:c5:d4:97:c0:ec:3d:0d:66:f2:87:f7:a7:09:93:f0:
00:ce:34:32:15:90:4f:c2:e1:c6:dd:d8:84:40:da:cd:47:fe:
c6:43:c1:1e:d3:25:43:b8:3e:29:ad:2f:8c:06:8a:b8:b5:cd:
33:55:a0:76:15:19:07:57:81:d8:f1:72:6d:e5:fe:69:1f:41:
d4:1b:49:2c:de:1e:bc:7a:6f:fa:1c:9a:8b:54:5e:90:9a:4e:
b1:58:1e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:37:21 2026 by rpki-client