Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
File: 1-75S2DTiaNxpiDApL95LY8faOS4.mft (raw, json)
Hash identifier: 42EYDa17OYjFoLgLQ1PA0Z4B4yaXgn0Yi1E7bpMN4D4=
Subject key identifier: E7:98:60:44:77:6D:CA:16:8A:AA:17:34:C3:15:BE:9C:B9:40:FD:E3
Authority key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
Certificate issuer: /CN=fbbe52d834e268dc698830292fde4b63c7da392e
Certificate serial: 019E314E2E3A2CA15C2E2327D442B9B2E5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
Manifest number: 0E91
Signing time: Sat 16 May 2026 15:01:07 +0000
Manifest this update: Sat 16 May 2026 15:01:07 +0000
Manifest next update: Sun 17 May 2026 15:01:07 +0000
Files and hashes: 1: 1-75S2DTiaNxpiDApL95LY8faOS4.crl (hash: r+NpD93DyLtscfYHM1mXdj+9/h1so9Xr5HVcq/sZ/E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:2e:3a:2c:a1:5c:2e:23:27:d4:42:b9:b2:e5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe52d834e268dc698830292fde4b63c7da392e
Validity
Not Before: May 16 15:01:07 2026 GMT
Not After : May 17 15:01:07 2026 GMT
Subject: CN=e7986044776dca168aaa1734c315be9cb940fde3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:83:87:3b:7f:52:55:74:e9:45:1e:11:e4:
b2:5c:2d:f2:da:75:5a:90:3c:96:81:38:07:d0:80:
ad:c0:7e:15:69:04:d3:b0:83:5f:ca:00:41:06:ff:
e6:11:f5:f9:aa:db:b2:8d:0c:ee:2e:b3:cf:89:50:
d7:20:76:7c:ac:37:6b:63:64:1a:82:92:e8:93:39:
90:a8:26:de:8c:0d:2a:be:02:70:9f:28:94:66:56:
af:40:a1:37:f2:e8:2f:60:a3:ea:29:f5:d4:36:c6:
93:03:4d:e7:05:0b:1c:54:19:39:d8:15:8c:cf:47:
a9:ac:84:48:b0:8f:fe:8c:50:e9:b5:04:13:e9:c4:
fc:87:00:84:9b:82:4d:1d:86:09:25:61:d5:b6:4f:
b5:f4:ab:d7:9d:8f:b0:4b:04:e3:23:f2:51:ad:7a:
43:a2:bd:ea:f8:db:58:8d:a4:8c:9d:37:fc:d2:4b:
55:59:e5:79:9e:f1:05:48:10:38:eb:7d:d4:75:46:
3b:18:52:c5:2a:40:d3:25:21:a0:95:89:37:a8:24:
f4:01:6d:25:57:b5:d3:55:d0:fb:55:b2:ba:42:f0:
bb:c0:3b:f9:3f:53:d9:b1:ab:16:89:ab:f6:16:77:
80:ca:bb:51:8f:f2:5d:13:07:1c:1e:b8:93:58:32:
99:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:98:60:44:77:6D:CA:16:8A:AA:17:34:C3:15:BE:9C:B9:40:FD:E3
X509v3 Authority Key Identifier:
keyid:FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e9:88:c3:73:64:47:cd:5f:4f:48:dc:df:6e:5c:bf:47:16:
fb:1b:51:f2:39:c1:10:a4:62:15:a1:23:79:b3:2a:3b:3f:3d:
c8:dc:5a:20:c4:ed:da:84:92:b1:46:54:94:6a:98:a9:f6:d4:
ce:c5:9d:51:fc:87:6e:57:5f:a0:e5:b4:12:89:fa:f7:a9:ac:
be:d0:98:b5:00:e2:69:4a:09:9b:92:66:06:32:d0:ae:87:8d:
6f:0b:38:1a:04:ec:16:96:a4:b4:73:51:1e:b3:7d:83:86:ac:
d5:18:ab:7e:8d:0f:bd:9b:97:81:46:71:ca:99:8a:b0:75:25:
6c:9e:07:f8:c9:4e:54:19:89:91:b0:08:5a:6a:a8:a3:79:dd:
d1:1b:cc:94:42:65:ce:7b:ac:06:e7:40:44:ed:2d:2f:ed:3b:
c8:8f:d4:cd:05:65:49:15:17:ac:98:12:61:59:9e:c9:f4:74:
50:8c:76:9f:2a:e0:57:3a:4c:2c:1f:8d:48:46:a7:51:e4:bc:
33:79:98:bc:fb:13:f2:9f:b4:5d:fb:73:cf:d3:d5:0d:94:a0:
5b:83:eb:b9:8f:b4:51:b9:16:58:e1:f7:91:6f:1f:3c:cf:6d:
5f:5d:c6:8d:1e:f3:cd:4e:8f:9a:ba:21:a6:71:3f:9a:2c:76:
76:ee:24:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:10:58 2026 by rpki-client