Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
File: 1-RCU3VhuycgtHBaTDK9rv-8htbU.mft (raw, json)
Hash identifier: NNrXySvTF9hbCsFOtguq3HgAwqwDLUNnTmc3KuoFWiA=
Subject key identifier: 3E:CA:DC:83:87:47:38:3D:41:67:0A:89:26:B4:D2:A0:CA:D1:4A:58
Authority key identifier: F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
Certificate issuer: /CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Certificate serial: 01A13DB7CBDD0B1E3DA71D1955E923375419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
Manifest number: 1622
Signing time: Thu 15 Oct 2026 04:00:17 +0000
Manifest this update: Thu 15 Oct 2026 04:00:17 +0000
Manifest next update: Fri 16 Oct 2026 04:00:17 +0000
Files and hashes: 1: 1-RCU3VhuycgtHBaTDK9rv-8htbU.crl (hash: pQFO9RzDjzvk5r3f7prRobWhyj4kMFqs2oi3eTfXoMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:cb:dd:0b:1e:3d:a7:1d:19:55:e9:23:37:54:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Validity
Not Before: Oct 15 04:00:17 2026 GMT
Not After : Oct 16 04:00:17 2026 GMT
Subject: CN=3ecadc838747383d41670a8926b4d2a0cad14a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ff:ef:6f:a7:37:aa:62:08:17:76:bd:19:45:
27:6a:d9:66:91:2f:bd:df:b9:25:b9:9c:24:17:9a:
7e:ef:86:64:4d:6b:fe:b1:7e:e8:51:22:31:a3:e2:
90:b2:74:55:78:35:0c:2c:32:5a:de:81:9f:28:38:
ae:78:5f:8a:c5:d1:1c:61:5f:33:ad:b4:f7:5f:77:
bc:18:74:62:c4:ba:81:53:cd:6f:63:a6:9e:37:54:
12:ac:bc:2b:fa:cd:68:51:78:fe:ec:5e:8b:a5:0b:
23:f0:9d:86:16:bb:a9:c0:1c:89:f5:e0:54:0f:e8:
e6:70:33:d3:47:96:17:04:96:76:28:54:cc:95:f9:
7a:d9:e8:91:60:a5:ce:46:da:7e:58:fb:54:f3:8e:
08:6a:a8:74:86:a0:e7:3e:da:9c:e6:13:b2:85:c0:
a2:da:84:45:3f:f4:e5:46:10:0a:4f:82:9d:52:f6:
bd:82:5e:4c:92:bc:3d:73:7b:50:e0:60:03:bf:ce:
f9:e8:86:8e:32:60:fc:0d:d5:b7:52:a6:6e:60:3a:
d0:8b:40:29:43:8e:98:74:3f:61:8a:a3:25:1b:62:
7b:85:b0:70:21:ad:f3:cf:d2:7c:fb:f5:32:99:4d:
4f:71:98:69:86:e3:b7:e2:37:6e:ef:65:80:ae:7c:
ca:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CA:DC:83:87:47:38:3D:41:67:0A:89:26:B4:D2:A0:CA:D1:4A:58
X509v3 Authority Key Identifier:
keyid:F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:3b:a1:aa:59:62:b9:f8:65:94:47:8c:07:ae:88:9b:a2:76:
86:bb:3d:aa:c7:10:a1:c2:4f:0c:59:01:b3:da:2a:d6:85:d7:
52:12:b5:54:83:9c:cc:fe:34:fe:e1:50:91:c2:29:9b:4a:83:
6c:0d:90:c9:0a:86:fc:0e:b1:a5:7e:eb:a0:8a:6f:8d:22:3f:
33:2e:a8:7c:5c:9b:2d:34:84:22:ec:db:39:e9:9c:43:cf:92:
ea:c1:fd:6f:3a:4b:5a:84:44:67:8f:00:bd:cc:c4:65:2f:2e:
f7:1e:57:db:b7:94:b2:0d:a6:68:71:8e:a8:40:7c:76:5b:bb:
c3:1a:31:ba:1c:07:a2:e4:ff:7e:bb:bb:6c:4c:0c:49:54:4d:
ad:89:d8:5d:40:ff:a3:de:48:df:3f:fc:de:5e:f6:78:1e:5b:
92:da:3a:c4:d2:22:c2:67:98:6b:8a:7d:c6:6a:62:f5:f3:d8:
ee:28:ae:3b:c3:2a:6e:30:c5:57:ae:f1:34:39:38:2d:b8:6e:
41:20:77:dc:88:fe:f0:5e:38:13:ba:78:11:c4:66:e7:e9:bf:
2c:26:09:7e:30:96:19:f6:6f:0c:db:00:50:40:61:24:ec:85:
e3:1c:c2:cb:05:55:f9:33:05:12:82:a6:60:37:62:6e:30:43:
bc:b6:c6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:17:18 2026 by rpki-client