Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
File: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft (raw, json)
Hash identifier: flR2jB9PHGdcU5LaUfMM/4xmNf+ndVFxXafm5492gQs=
Subject key identifier: 06:83:0C:AB:37:02:90:3D:A3:10:84:D1:AC:67:3A:60:D7:36:7E:4F
Authority key identifier: F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB
Certificate issuer: /CN=f91084f454139347933876d52634b41a1dd099db
Certificate serial: 019F189DFA3870E8ED2BD8398530E3A77700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
Manifest number: 1383
Signing time: Tue 30 Jun 2026 13:00:34 +0000
Manifest this update: Tue 30 Jun 2026 13:00:34 +0000
Manifest next update: Wed 01 Jul 2026 13:00:34 +0000
Files and hashes: 1: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl (hash: Z6zBC/d8in2CA5kTgx7Lm9o3KUQQcXqA4089ydpkXEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9d:fa:38:70:e8:ed:2b:d8:39:85:30:e3:a7:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91084f454139347933876d52634b41a1dd099db
Validity
Not Before: Jun 30 13:00:34 2026 GMT
Not After : Jul 1 13:00:34 2026 GMT
Subject: CN=06830cab3702903da31084d1ac673a60d7367e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:89:42:d1:e8:05:34:a9:25:65:62:c5:36:
2b:e8:00:59:92:25:a3:6d:02:6a:7b:00:14:2e:aa:
e5:7e:f3:11:e3:62:08:ec:ac:fa:b6:b3:f1:05:1c:
ac:07:4d:6e:26:f2:ce:54:8b:d3:fd:97:d7:c3:70:
71:0f:a1:52:e2:ef:dd:61:05:7c:da:b7:84:2c:6f:
c3:b5:91:c5:9d:87:df:fe:4f:86:a5:c0:07:10:4f:
b3:75:50:89:66:1e:92:6c:2a:d2:04:a9:ab:87:95:
c4:9b:3d:65:ba:fe:ed:0e:f0:77:8d:c0:a8:cc:ea:
1a:91:b1:73:be:74:02:01:50:e8:ad:cf:d2:07:a3:
42:45:47:71:2f:63:16:c9:4c:21:d9:60:83:ff:7c:
a0:ad:81:78:28:3f:1f:34:a3:59:fd:64:fc:c1:1e:
8f:1f:e4:9d:77:4e:fd:b6:96:5d:4e:5d:3b:4c:5f:
a3:d3:3d:be:bf:31:cd:3b:56:15:49:7b:7e:f1:4f:
dc:28:d5:2c:43:12:44:aa:c7:e6:7c:26:3b:5f:5b:
53:88:5a:b2:bc:54:9c:dd:77:d5:a3:a6:fc:bd:9c:
8e:65:6e:83:62:d1:e7:4a:c5:e6:f3:b2:f1:a5:9c:
9a:1d:f5:c0:a9:f5:7b:7d:b3:23:6f:9e:27:30:36:
13:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:83:0C:AB:37:02:90:3D:A3:10:84:D1:AC:67:3A:60:D7:36:7E:4F
X509v3 Authority Key Identifier:
keyid:F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:26:fd:c7:18:34:c1:a0:f1:0a:e3:70:e2:79:53:3f:a1:7e:
ba:86:4f:7f:c5:5e:68:23:c0:8e:13:fc:4b:84:98:d4:b6:73:
58:64:75:d6:f1:e1:f2:02:b0:f8:a4:fa:e8:11:82:84:a4:e7:
b8:cd:ae:dc:95:86:45:32:a8:c9:cc:c2:1c:cf:de:1b:bc:51:
8e:27:71:ed:ab:9e:ab:fc:20:0d:37:c7:2f:00:3d:51:b9:7d:
9f:1f:cf:aa:6e:35:b6:3d:a4:56:5b:9b:1f:b1:e2:47:d7:27:
95:54:2b:78:85:3c:1a:d6:49:34:4b:7a:d9:32:d0:9b:8b:4e:
e4:13:85:b3:cd:8e:b7:2c:87:b3:66:af:09:c1:8f:a9:aa:0d:
10:c6:8b:c4:a5:b1:32:3e:ec:48:1a:a9:b1:e3:75:f3:e1:76:
40:19:a1:70:02:20:b1:ac:2d:49:86:ee:f9:fe:0c:ea:e6:5d:
b3:fa:20:63:1c:58:d5:ff:66:e7:2d:a9:32:31:31:9a:90:e7:
27:ab:fb:ce:bb:fa:eb:11:c5:e5:04:f7:07:90:c0:27:8e:32:
61:fb:99:d3:b0:31:9d:1c:19:ce:90:a7:c0:b4:84:1a:50:6e:
8a:ec:7f:99:bb:76:ee:ae:24:f9:27:e4:49:cb:14:a0:05:13:
d2:f8:2c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:09:20 2026 by rpki-client