Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
File: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft (raw, json)
Hash identifier: W7dfvYPHf8HbQpgazmCH1/Yi2dCCxd5ZR9KVk7PmOYk=
Subject key identifier: 1C:24:20:EA:9D:3E:7B:2A:14:32:F2:CD:FF:C2:9E:89:C7:9C:A0:22
Authority key identifier: A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
Certificate issuer: /CN=a4c9f067007684facca9be8ce02da4676c09972a
Certificate serial: 019EB7335E5297558A87D56AC1975DE9C82B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
Manifest number: 098C
Signing time: Thu 11 Jun 2026 15:00:57 +0000
Manifest this update: Thu 11 Jun 2026 15:00:57 +0000
Manifest next update: Fri 12 Jun 2026 15:00:57 +0000
Files and hashes: 1: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl (hash: iv4Rs3jK0WHp5pe2ffe5zLUsAjrRhWdBgXPLghjowzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:5e:52:97:55:8a:87:d5:6a:c1:97:5d:e9:c8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c9f067007684facca9be8ce02da4676c09972a
Validity
Not Before: Jun 11 15:00:57 2026 GMT
Not After : Jun 12 15:00:57 2026 GMT
Subject: CN=1c2420ea9d3e7b2a1432f2cdffc29e89c79ca022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:78:67:01:f3:dc:dc:42:70:09:57:ee:54:88:
c7:de:c7:2b:49:e6:11:a4:28:b8:f7:23:c5:b7:02:
f9:e9:f5:20:a9:93:6b:f8:2a:53:3d:cd:e7:67:3c:
ba:c6:7c:63:b5:8e:fe:19:c6:0d:de:53:f2:4c:f4:
c7:cd:63:01:d8:90:ae:eb:27:c9:a4:db:02:d0:ae:
60:c2:64:73:89:75:0f:c5:c2:ca:fa:12:13:d8:b3:
5a:35:1e:4a:b6:81:ab:b9:65:e7:ae:16:b7:c3:4f:
b2:80:a9:2f:e7:30:7d:e9:0b:66:8f:ae:e6:e6:11:
a6:54:c3:7d:62:91:ab:a0:f9:4a:1f:54:69:23:86:
43:f0:e7:c0:a0:cd:48:71:15:e8:96:63:27:9d:b9:
94:cc:d6:b3:33:a1:d1:5a:14:49:a4:88:53:de:00:
20:de:5b:f5:6d:38:47:82:e3:10:72:09:2f:73:d5:
69:e6:f3:9a:44:74:6b:e8:ca:4f:20:c9:3b:c1:28:
64:2b:41:36:bf:34:48:23:1c:a6:1e:98:06:09:66:
84:09:49:d8:1a:e8:5a:6b:50:15:c2:39:f3:04:53:
04:0e:54:0f:08:94:90:b8:89:e7:eb:b8:e6:63:62:
83:5a:77:5a:95:9b:f5:22:06:e7:a0:54:f0:25:e0:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:24:20:EA:9D:3E:7B:2A:14:32:F2:CD:FF:C2:9E:89:C7:9C:A0:22
X509v3 Authority Key Identifier:
keyid:A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:05:e9:5d:17:fb:3c:0c:b8:aa:77:8f:4e:ea:4a:73:6a:a4:
1b:fb:ae:90:5b:b8:75:a8:cd:45:16:42:45:44:12:11:b1:15:
af:a3:ed:f8:38:87:92:be:0e:01:af:e1:9b:98:c3:8c:0d:10:
3f:c8:62:73:42:2e:9b:3a:f4:85:8d:d0:e3:3c:53:e7:00:6f:
e4:24:4e:31:7e:95:33:d3:ce:ac:c7:a5:ac:4a:2e:1c:b8:77:
ef:88:66:71:4d:dd:38:6f:e4:04:69:43:23:8e:69:86:c6:8b:
4b:7e:40:bc:8f:20:9f:b7:1d:b3:07:9c:39:dc:cf:3c:29:f2:
bc:eb:ac:db:5e:00:c2:f0:ef:c0:ce:c4:b5:81:d1:14:95:d3:
c5:07:cb:98:6f:7f:86:3e:7c:10:16:fd:59:ec:1f:a9:ca:50:
62:2d:c5:40:62:ad:31:5e:64:c3:f5:f8:f8:28:f2:8d:6e:4e:
bd:e9:3e:c3:a2:d7:0a:8f:6a:94:30:85:24:86:20:0c:8e:d6:
1b:b5:de:64:b6:34:a2:d1:f1:9c:2e:f4:11:6e:b1:da:fa:55:
d9:9a:02:0d:1b:7d:c8:4f:e9:c9:58:f2:b0:9a:6f:b7:6c:89:
00:52:22:64:b3:62:8d:be:f0:c8:d0:93:7f:00:79:12:c7:1f:
67:e2:9e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:12:44 2026 by rpki-client