Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
File: 1-RCU3VhuycgtHBaTDK9rv-8htbU.mft (raw, json)
Hash identifier: xf2olHCt8tIyL5zyADGzkcnNwh2yxbd4ztvaomj8Etg=
Subject key identifier: E9:32:17:EE:46:66:AD:16:4C:1A:C5:C3:11:C9:78:2F:08:45:A1:EC
Authority key identifier: F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
Certificate issuer: /CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Certificate serial: 019F1942FA95723BF915A7B25B8E3EAC6582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
Manifest number: 1506
Signing time: Tue 30 Jun 2026 16:00:47 +0000
Manifest this update: Tue 30 Jun 2026 16:00:47 +0000
Manifest next update: Wed 01 Jul 2026 16:00:47 +0000
Files and hashes: 1: 1-RCU3VhuycgtHBaTDK9rv-8htbU.crl (hash: 72SfgJbCj3QmzaxzRS9k44NZ/Zo1/OpA8OXKn4NTTho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:42:fa:95:72:3b:f9:15:a7:b2:5b:8e:3e:ac:65:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Validity
Not Before: Jun 30 16:00:47 2026 GMT
Not After : Jul 1 16:00:47 2026 GMT
Subject: CN=e93217ee4666ad164c1ac5c311c9782f0845a1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:62:38:6e:93:91:8c:54:0c:e9:a5:e8:94:1e:
bb:51:88:e8:0b:fa:b4:f6:88:8b:4e:f6:c5:5a:05:
74:c4:8f:8d:a5:ef:78:15:a9:53:8e:d4:38:5a:72:
bc:e2:db:f0:65:69:98:32:be:67:be:35:e0:70:26:
4f:a8:7d:a6:dd:65:07:80:ee:b0:55:5c:77:fb:d0:
47:10:d3:0c:b0:a1:44:11:df:1f:e5:6d:38:84:57:
ab:9a:2f:e4:e5:0b:e5:19:b1:b0:6a:fb:0f:71:13:
db:ca:9c:63:7c:70:f0:2a:aa:56:73:e6:e4:66:71:
77:de:ec:49:96:f5:9d:d5:fe:8b:ac:48:e8:2f:70:
66:93:01:57:44:78:47:88:f4:a2:1f:39:76:8a:34:
2b:e4:dd:ce:df:ca:89:58:d5:f2:24:de:09:a5:56:
4c:39:0a:5e:4e:18:8d:5c:4c:a3:92:20:e4:f9:ab:
9e:de:00:f8:a9:40:02:cd:dc:43:72:28:4b:20:1d:
de:b2:c3:da:32:40:a8:d0:1f:2c:41:2b:0e:31:19:
27:22:f8:4b:49:a4:ca:bf:90:05:0b:f3:df:9a:4c:
fe:2c:3c:cf:62:0a:63:3e:a0:06:ce:d2:f8:a3:de:
c5:db:9b:ca:7f:c4:f3:59:c9:e1:5e:98:f0:bf:ff:
28:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:32:17:EE:46:66:AD:16:4C:1A:C5:C3:11:C9:78:2F:08:45:A1:EC
X509v3 Authority Key Identifier:
keyid:F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:67:e5:28:ff:90:9e:f4:8c:cd:ab:97:73:71:ad:e6:82:1b:
68:8e:50:72:f9:dc:5f:7d:3f:24:03:7d:cb:a9:9a:09:8b:5f:
ae:eb:f4:5a:1b:02:cc:82:46:0a:ff:e9:13:dd:ca:71:be:d8:
da:e9:74:6c:7a:65:d1:73:00:f3:be:48:8b:11:07:60:f2:49:
b9:61:df:fc:f8:23:b0:b4:75:70:08:be:67:af:24:49:42:e7:
6c:ac:7c:c1:7d:45:c3:ee:2f:98:17:48:de:3e:7d:11:83:5e:
48:5e:1c:55:0b:11:51:c8:16:5f:96:04:27:95:a8:27:46:74:
8f:7e:88:da:c5:cc:b9:30:66:f5:73:2a:d9:71:74:08:19:19:
5c:90:1c:3d:97:64:82:6a:b7:0d:53:ed:c4:b2:11:ca:70:10:
8c:64:f5:f3:14:00:aa:de:2c:2a:9e:56:fa:75:1f:f0:0e:95:
02:0d:60:c5:69:9d:bd:c4:19:4b:49:e7:87:6f:ce:fc:62:04:
d6:7b:3d:e6:27:b0:f5:9c:b2:d9:a0:d3:3f:27:87:93:5e:7f:
43:c6:51:e7:07:62:93:1f:16:56:a8:21:4a:1c:0f:63:b0:2a:
e6:4e:8c:26:44:41:d3:7a:73:6d:f5:7b:5a:ce:39:f6:25:4c:
b2:36:08:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:25 2026 by rpki-client