Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
File: eAl9X3eghkNQCkNtDpjwM9D1SPk.mft (raw, json)
Hash identifier: Ee+MQlaSx54IVcAouAL2ZaTuMpLVwO4NDli92C86QVQ=
Subject key identifier: 0C:68:39:18:68:29:FB:65:AD:4C:E8:17:AA:83:62:40:18:B5:B4:54
Authority key identifier: 78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
Certificate issuer: /CN=78097d5f77a08643500a436d0e98f033d0f548f9
Certificate serial: 019EB80F19CD1D56B4B95D7206C33130E95C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
Manifest number: 1954
Signing time: Thu 11 Jun 2026 19:00:57 +0000
Manifest this update: Thu 11 Jun 2026 19:00:57 +0000
Manifest next update: Fri 12 Jun 2026 19:00:57 +0000
Files and hashes: 1: eAl9X3eghkNQCkNtDpjwM9D1SPk.crl (hash: gHBch29gXHKlkIqPmHcpGeEHT01de/O4rI5m0kjfW6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0f:19:cd:1d:56:b4:b9:5d:72:06:c3:31:30:e9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78097d5f77a08643500a436d0e98f033d0f548f9
Validity
Not Before: Jun 11 19:00:57 2026 GMT
Not After : Jun 12 19:00:57 2026 GMT
Subject: CN=0c6839186829fb65ad4ce817aa83624018b5b454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:40:17:68:75:4e:f6:ce:0d:52:3a:36:9c:
14:3f:12:7a:70:ec:2e:ef:61:fb:25:20:79:44:6c:
82:89:24:1b:57:7d:b1:5b:1a:ce:90:29:cd:e1:2a:
ee:b8:3a:cb:62:95:de:9b:4c:44:49:4f:dc:33:57:
4f:27:ab:9e:f9:ad:33:de:fa:a8:bc:bf:73:b2:38:
3f:3b:f9:be:b2:58:f5:b0:b8:f1:fb:44:f9:ef:83:
ce:48:6a:f5:97:8d:87:21:5f:c8:7e:9a:88:66:f5:
f8:d3:d6:bf:cb:21:f7:40:7c:e5:6f:5a:76:b3:91:
3f:28:cd:ad:4e:58:f5:01:c9:ec:ea:0f:5d:c8:8a:
93:4c:90:32:d5:56:8c:10:1b:eb:09:d5:ee:71:09:
2c:04:79:8d:d1:9e:d0:a5:79:f6:05:da:45:00:a1:
6a:20:d6:e0:9d:ad:ab:cb:cd:aa:54:c4:0f:f7:f3:
0e:12:ac:17:c2:fe:90:a3:d1:31:cf:ed:fe:f3:51:
d0:b8:9d:f1:45:b5:cc:40:07:c7:6b:74:d9:16:92:
62:b3:0a:77:9e:2f:10:73:89:0e:45:2b:01:eb:6e:
12:64:ca:de:40:47:aa:aa:5e:77:c0:77:d9:6c:70:
43:27:12:20:14:44:f9:92:49:d4:ee:0c:68:73:ba:
3c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:68:39:18:68:29:FB:65:AD:4C:E8:17:AA:83:62:40:18:B5:B4:54
X509v3 Authority Key Identifier:
keyid:78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:93:cb:d2:3f:86:a5:9c:de:67:89:0c:1c:d6:96:40:01:5e:
e1:0d:83:8a:51:70:ad:e4:0e:c6:23:19:ff:d6:67:cf:b1:4f:
8e:c3:41:da:90:1b:56:9e:75:9e:1d:c9:98:f2:cb:47:4e:ba:
f4:de:ab:a1:5e:45:ae:cd:9e:09:db:53:e1:e2:7a:72:1c:fe:
48:48:19:51:03:8d:ca:f2:31:b6:0d:d0:89:89:d7:68:87:65:
4b:09:86:e5:7c:de:9a:98:ce:1f:6e:f9:61:3e:6a:09:03:19:
5b:f1:65:b9:5e:4c:eb:3e:71:78:02:d9:ce:4b:06:34:d9:c6:
80:d8:af:e1:2d:a6:99:66:4e:99:82:6d:c9:d8:8a:ef:ee:7f:
d4:f0:34:11:d9:27:c1:35:4a:65:91:21:4a:34:ed:bc:5d:01:
b0:8f:4f:2d:48:64:08:0f:87:71:cd:7b:98:5a:a4:32:a5:cd:
55:19:a6:70:1e:fb:d1:11:c5:f9:c4:7b:10:ce:d5:b6:cf:f3:
a6:9d:f7:c5:13:8f:25:15:9d:46:25:95:72:19:12:11:bc:0b:
e7:99:17:9e:a1:31:50:91:41:3b:fe:dc:0a:82:0c:21:11:7a:
85:ef:d3:cf:62:2c:64:bf:0d:9b:fd:90:06:45:fa:59:cf:d8:
ff:09:25:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:29:46 2026 by rpki-client