Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
File: CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft (raw, json)
Hash identifier: Z++jayhYxMTWA6/9uJf0MvcI+pLKUHNxFzoaw4n8xus=
Subject key identifier: 8D:6F:F4:D6:30:36:8D:72:6B:2D:AB:83:3F:1C:AF:16:B5:7D:E3:3B
Authority key identifier: 09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75
Certificate issuer: /CN=0979f537b09ebeaddf9878749d1f88753c540c75
Certificate serial: 019E30724AE06308EEA533A3C8E8F2F398A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
Manifest number: 190C
Signing time: Sat 16 May 2026 11:00:56 +0000
Manifest this update: Sat 16 May 2026 11:00:56 +0000
Manifest next update: Sun 17 May 2026 11:00:56 +0000
Files and hashes: 1: CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl (hash: d1q0TZxvdbkW+ZAiKhcCMX2L9yFvhfQrYYrJNrNX5a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:4a:e0:63:08:ee:a5:33:a3:c8:e8:f2:f3:98:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0979f537b09ebeaddf9878749d1f88753c540c75
Validity
Not Before: May 16 11:00:56 2026 GMT
Not After : May 17 11:00:56 2026 GMT
Subject: CN=8d6ff4d630368d726b2dab833f1caf16b57de33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7d:5e:62:32:2a:da:49:28:06:28:5a:df:c0:
98:ca:29:73:bd:55:6b:44:0e:e9:82:1d:a5:90:35:
53:80:dd:a8:c3:a2:93:2b:fd:d0:eb:7c:7c:83:78:
6c:df:c0:bf:c3:c6:3c:c5:e0:6c:46:95:00:81:90:
9f:b9:df:5c:66:21:68:59:12:f9:cc:84:75:a4:36:
ba:3c:eb:0c:2f:67:d5:27:4b:35:36:a9:73:29:e9:
b6:31:0f:db:2f:d6:35:65:ec:60:c7:ad:29:29:ef:
94:ca:7a:df:74:86:44:cd:d8:9e:53:1f:eb:b9:1d:
8a:57:97:ed:c2:f9:02:fe:99:10:3b:c8:50:1e:68:
84:ce:d9:12:1d:0d:57:57:cc:0a:c7:be:87:f7:d4:
f3:a9:35:3f:1f:2a:c0:f5:ec:e4:2d:a1:2c:3a:ca:
81:e0:55:e8:20:31:91:b6:ec:4a:52:1a:c5:de:d0:
32:8b:6c:33:a1:bb:c9:cb:a8:63:bc:ed:59:75:18:
28:cc:fa:21:4c:7a:3b:f5:66:48:fc:07:ee:6d:42:
06:44:11:4b:01:9f:8f:39:d5:5c:96:d8:f2:83:d6:
81:9d:df:7a:46:09:01:b6:89:d4:bc:a3:62:88:ee:
b6:6d:a9:0b:1d:8f:fd:58:56:d2:57:33:7a:e9:70:
a6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6F:F4:D6:30:36:8D:72:6B:2D:AB:83:3F:1C:AF:16:B5:7D:E3:3B
X509v3 Authority Key Identifier:
keyid:09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:cc:88:31:eb:ec:a8:24:4d:33:ce:ad:a7:81:b2:1e:ce:c7:
c9:6b:b0:00:9c:19:ef:ad:1f:16:71:41:9a:3c:f2:b5:d4:af:
6f:ee:bc:7a:3a:26:5d:fd:c7:ec:10:9c:10:6b:e8:78:3f:5e:
a3:23:ec:d0:b7:fb:e6:cd:47:9c:39:d7:fd:fd:05:5c:ae:92:
9e:4d:a9:9c:6f:6a:8b:2a:68:ca:ae:fc:fe:ca:55:33:46:53:
21:4b:0c:9c:f6:49:b3:43:eb:f2:fa:1f:77:32:81:4b:24:72:
e0:27:e8:1c:ee:e3:39:63:03:aa:1d:8b:42:46:a5:53:56:d5:
0f:bf:68:23:89:b9:91:d9:f1:41:08:ca:cb:04:4f:cc:27:f3:
ad:f5:6a:c0:b2:a5:7d:6e:ca:dc:f1:80:71:eb:5d:9c:90:9c:
0d:8e:12:c6:a0:c4:74:06:dc:56:02:0d:27:a4:19:65:3d:fd:
b7:da:97:c3:74:22:ea:9d:da:c8:3c:8d:1e:b0:39:d5:d4:06:
30:b3:b6:24:e3:bb:da:3c:78:33:b9:39:a7:0f:ae:10:ce:c4:
d7:4b:c4:e8:b6:8b:09:31:89:9f:61:35:f0:75:f1:76:1d:70:
e2:bc:0d:a0:dd:aa:c2:f6:5d:c0:d1:a0:38:99:76:86:a6:57:
5b:5a:ba:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:55 2026 by rpki-client