Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft
File: De-ewcAwfGBzzor4PwmWjKt6u-8.mft (raw, json)
Hash identifier: SU+gso3sgOFiPJGCMi0Fy3PHOI7YQ29Qs66Ux3Xy7UA=
Subject key identifier: 4B:B8:76:3C:97:6A:D8:06:4E:02:7D:0C:4D:F4:D4:42:0A:5E:93:9C
Authority key identifier: 0D:EF:9E:C1:C0:30:7C:60:73:CE:8A:F8:3F:09:96:8C:AB:7A:BB:EF
Certificate issuer: /CN=0def9ec1c0307c6073ce8af83f09968cab7abbef
Certificate serial: 019E303BB7FE8BCC20FE1EE6D318527150D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De-ewcAwfGBzzor4PwmWjKt6u-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft
Manifest number: 1451
Signing time: Sat 16 May 2026 10:01:20 +0000
Manifest this update: Sat 16 May 2026 10:01:20 +0000
Manifest next update: Sun 17 May 2026 10:01:20 +0000
Files and hashes: 1: De-ewcAwfGBzzor4PwmWjKt6u-8.crl (hash: TQv/dkFRBZjGIjp3cTQTNa9uHWBD0cNMTkUpimCcK6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/De-ewcAwfGBzzor4PwmWjKt6u-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:b7:fe:8b:cc:20:fe:1e:e6:d3:18:52:71:50:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0def9ec1c0307c6073ce8af83f09968cab7abbef
Validity
Not Before: May 16 10:01:20 2026 GMT
Not After : May 17 10:01:20 2026 GMT
Subject: CN=4bb8763c976ad8064e027d0c4df4d4420a5e939c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fb:69:7a:58:cb:17:51:2d:7e:ee:cb:9b:1e:
a3:7f:6e:7b:12:d9:15:7f:10:6e:7c:bb:d8:52:a4:
43:86:ee:98:28:98:b5:f1:47:7d:a8:db:ae:d1:2e:
87:3a:0c:d4:05:c7:eb:9a:e1:17:28:af:fb:3e:38:
35:2e:92:7f:b9:f9:26:7e:b3:56:10:fe:67:bf:78:
25:d4:bc:1d:fe:38:e6:df:58:0c:b1:6b:b6:50:53:
11:c8:24:0c:a8:c7:aa:71:3b:3f:37:e1:a0:57:db:
29:73:03:cf:53:e2:19:27:85:c4:79:80:74:2f:02:
16:90:07:59:f7:62:c8:6b:f9:43:20:85:af:0e:1b:
3a:17:07:2b:62:51:fb:76:a2:fb:71:3b:9e:b9:63:
79:17:b8:9d:01:d0:d9:1b:13:79:c0:6a:47:22:df:
e0:7a:2f:54:05:18:e5:a4:2c:51:21:e8:ff:b1:23:
18:6f:8c:b7:e7:71:76:9f:2f:c1:f5:05:1b:a7:05:
a0:a8:5f:aa:4d:bb:bb:05:5d:e3:24:00:9e:d4:8a:
59:53:77:04:9c:81:13:02:0a:35:a3:b5:53:87:10:
39:f5:57:bf:9e:8a:62:4f:b0:77:d1:f4:56:0c:d2:
e1:77:d1:fa:7a:d7:be:f2:77:02:63:f7:f8:5f:3b:
44:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B8:76:3C:97:6A:D8:06:4E:02:7D:0C:4D:F4:D4:42:0A:5E:93:9C
X509v3 Authority Key Identifier:
keyid:0D:EF:9E:C1:C0:30:7C:60:73:CE:8A:F8:3F:09:96:8C:AB:7A:BB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De-ewcAwfGBzzor4PwmWjKt6u-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:51:a5:f8:29:c4:0b:07:c6:56:10:a7:c7:87:0f:bc:71:41:
19:13:5b:70:fc:48:c5:fd:a6:28:c8:82:9b:9a:89:a7:c6:b0:
30:f7:32:6c:e7:e0:37:6b:90:d9:f0:bb:b2:5d:0d:9a:83:40:
ad:ee:9d:26:62:cf:52:bd:e3:d6:9b:03:01:9a:bf:73:d1:22:
4f:1e:3b:a4:67:d9:05:0d:71:e9:44:7a:10:e5:2e:ea:f6:a0:
79:b9:c6:8d:aa:b3:ad:ff:81:be:e9:af:2f:c4:47:b0:02:f0:
41:c6:14:81:8b:97:34:73:ba:b6:39:fc:6c:9e:df:1e:bb:4a:
57:af:f6:e4:5f:57:f6:38:ab:57:79:b5:0d:53:a7:4b:65:60:
23:e4:3d:f7:8f:94:69:76:2d:26:84:08:8c:59:bc:7a:fb:d7:
71:08:0f:99:e7:71:cf:c7:e7:af:94:90:59:46:e5:6c:4d:b9:
70:bb:f0:53:37:f0:85:a5:eb:45:7b:13:0c:b4:68:d3:cc:90:
f9:91:c6:14:4a:4e:e6:ac:07:d9:00:7a:50:13:cf:da:92:ab:
ce:76:bb:74:f9:08:73:8f:1c:36:72:25:2c:74:72:bc:e2:9f:
cc:1b:0b:3f:c5:dd:d6:23:ac:7e:de:61:35:35:b9:f6:35:92:
d3:5d:9e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:53 2026 by rpki-client