Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
File: mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft (raw, json)
Hash identifier: 9f1HHqG5Z6cflj2jIvSIlP8rVCropL7HhfThfdAC1sA=
Subject key identifier: 4F:51:FD:19:58:CF:57:75:23:5F:98:8C:F0:A8:E3:D3:6E:1C:93:23
Authority key identifier: 99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31
Certificate issuer: /CN=9928b812e2e9f472eec7d233f604af263e850f31
Certificate serial: 019EB6C4E5CEB96059115B214FE664C20892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
Manifest number: 0E8D
Signing time: Thu 11 Jun 2026 13:00:17 +0000
Manifest this update: Thu 11 Jun 2026 13:00:17 +0000
Manifest next update: Fri 12 Jun 2026 13:00:17 +0000
Files and hashes: 1: mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl (hash: gto4cZWFzP0Y/r3JQV/iMjxFblYCBGs/aSRvqVslCBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c4:e5:ce:b9:60:59:11:5b:21:4f:e6:64:c2:08:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9928b812e2e9f472eec7d233f604af263e850f31
Validity
Not Before: Jun 11 13:00:17 2026 GMT
Not After : Jun 12 13:00:17 2026 GMT
Subject: CN=4f51fd1958cf5775235f988cf0a8e3d36e1c9323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3c:33:fb:08:d2:7f:b1:b4:18:1b:5f:34:36:
3a:4b:e6:ce:18:34:68:c6:14:74:71:a3:76:44:ed:
ae:d2:1f:5a:1b:6b:56:da:d5:e1:ee:47:7f:91:40:
06:96:62:db:4a:c8:fc:a5:17:45:bc:57:b8:09:e4:
f2:eb:fa:6f:08:37:9b:a7:44:6d:22:b9:7c:20:50:
3f:08:2e:50:ce:05:ea:95:ff:b1:8a:e8:49:c5:ea:
c7:56:d8:96:96:e4:4d:65:68:9a:b9:26:8b:19:ad:
3e:96:aa:0f:53:8b:80:f5:10:c3:a0:8e:60:b8:0e:
4c:c1:63:d8:c9:cd:bf:4b:dd:66:7b:ab:82:86:6e:
3b:df:ab:ad:dd:31:81:07:1e:aa:a2:11:46:eb:ad:
7e:e4:79:90:fc:29:72:43:d7:2d:7b:d4:10:91:c1:
ae:26:96:c7:59:df:56:98:8b:3e:2f:4d:12:d1:b1:
71:53:ff:c0:40:b6:64:6f:23:22:81:5d:67:4a:71:
ab:0b:d7:d2:e3:43:db:bb:c6:ec:c9:dc:fe:29:ad:
4e:c1:ad:ce:92:ca:47:24:4b:44:39:3a:cb:f1:1e:
55:c3:f6:63:07:d6:b5:3c:b3:e4:8e:61:12:c7:e8:
f2:dd:03:30:fc:77:a8:6b:82:ca:a2:bc:51:c1:68:
79:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:51:FD:19:58:CF:57:75:23:5F:98:8C:F0:A8:E3:D3:6E:1C:93:23
X509v3 Authority Key Identifier:
keyid:99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:74:a7:b2:1e:59:83:ed:eb:5c:67:92:05:b1:75:a8:04:31:
29:7c:ae:25:89:9e:5a:d9:55:88:a3:55:3f:2b:c4:04:14:36:
f6:37:bb:d5:5b:77:7f:f7:42:1e:49:71:e9:d7:e6:62:06:b5:
24:ed:dd:96:19:fc:72:f8:52:33:27:ae:fd:df:2d:36:db:cf:
8c:de:e8:ee:b3:95:71:93:7e:80:6c:27:a6:32:30:a1:a1:3f:
b6:e0:32:40:dc:f8:f9:29:48:e9:8d:91:0f:84:68:fe:1a:b1:
42:e5:62:0f:ca:95:a1:f2:db:f5:d3:3c:9d:17:cb:6e:21:22:
49:dd:9e:7c:26:45:ad:b7:a0:78:09:94:ed:f6:77:63:be:89:
de:bb:be:cd:04:4d:81:df:ce:cf:46:7a:6b:de:3e:f6:eb:2f:
80:7a:b7:2c:4c:cf:19:4f:7e:e0:bd:ca:06:8f:1c:7a:b3:14:
fe:bc:00:43:63:cb:a4:10:55:8e:a7:e0:32:de:08:30:5c:b8:
12:d6:70:c6:3e:58:54:05:d2:06:a4:03:11:37:0f:14:fb:a8:
21:24:64:66:20:8c:bb:24:21:45:13:68:cc:70:ba:f2:21:57:
73:f6:1a:32:ae:d3:3b:d6:49:bf:51:d0:6d:4d:12:69:81:a2:
44:a3:80:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:32:38 2026 by rpki-client