Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
File: C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft (raw, json)
Hash identifier: GhixqEEBLvb0evt2S/Pj4J3/W5H2D7w9B5m/FLQ6PWc=
Subject key identifier: 5D:D7:29:C3:E5:3E:2B:E1:96:E0:45:09:3E:B6:57:96:E8:0C:3D:D1
Authority key identifier: 0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
Certificate issuer: /CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Certificate serial: 01A001014E0187BAF41BD08ECE1C3190D71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
Manifest number: 198D
Signing time: Fri 14 Aug 2026 16:00:57 +0000
Manifest this update: Fri 14 Aug 2026 16:00:57 +0000
Manifest next update: Sat 15 Aug 2026 16:00:57 +0000
Files and hashes: 1: C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl (hash: FdM+Q8pL9W0+6QzFms3ezFZFwdCOwBq7whQvwhRqPUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:4e:01:87:ba:f4:1b:d0:8e:ce:1c:31:90:d7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Validity
Not Before: Aug 14 16:00:57 2026 GMT
Not After : Aug 15 16:00:57 2026 GMT
Subject: CN=5dd729c3e53e2be196e045093eb65796e80c3dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:31:f5:63:67:94:85:7f:f8:14:96:7d:74:84:
c1:b5:66:82:24:f0:51:1f:55:0f:31:49:31:1a:6a:
79:f0:b5:aa:05:5d:33:24:31:97:f6:1f:8a:24:7b:
a4:04:8b:10:31:d0:a4:94:a9:ed:3c:57:a6:58:a6:
0f:1d:f7:63:c1:5f:c3:99:57:ed:3f:d4:e9:0f:09:
cf:b7:61:40:38:0b:fb:f5:05:85:2d:df:ba:08:97:
74:31:7c:14:76:4c:0d:29:3a:ff:2c:6b:a0:a9:d4:
87:da:dc:8a:4a:db:77:61:eb:56:b0:52:ce:2c:4c:
14:93:57:2c:da:16:2d:7f:f5:11:14:cc:39:ce:b5:
83:41:ad:7c:80:ac:62:88:cb:0c:b4:f3:83:2a:15:
45:d1:d9:7c:6b:12:e7:93:71:2f:4a:d7:22:54:90:
d3:3e:1e:10:87:b8:a2:58:fd:65:89:be:d1:e5:23:
3a:ac:15:68:f7:73:6f:ec:1a:ca:b3:6f:68:36:48:
69:ff:ff:58:11:3f:fe:5e:ec:6f:d4:5a:f8:1f:32:
08:2a:54:5c:3a:7a:aa:7a:3c:4a:dd:6a:37:1b:7e:
84:9e:af:5d:15:f0:cf:45:92:36:9c:d1:82:70:b6:
30:ad:62:8b:d7:86:6f:f3:af:c1:2a:81:6f:d3:8c:
58:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D7:29:C3:E5:3E:2B:E1:96:E0:45:09:3E:B6:57:96:E8:0C:3D:D1
X509v3 Authority Key Identifier:
keyid:0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6f:ad:5f:c2:d5:7b:fd:57:a5:5b:ce:83:9c:fe:92:ce:c9:
47:22:97:da:b9:c2:3f:9c:c1:88:f4:2e:17:6c:34:73:ce:3c:
f7:7a:fe:26:89:a9:e6:77:36:8a:7a:47:33:bb:1e:96:d3:d8:
91:4c:a6:21:b5:d8:b4:30:09:62:10:04:aa:19:8c:56:09:2c:
60:ac:3c:ab:9f:9d:18:e4:19:ce:af:dc:f6:10:f7:d7:78:3b:
7c:e7:30:7f:0f:42:c7:98:76:fb:fe:c8:df:43:26:65:b5:f2:
71:9f:e0:57:7c:ae:0c:e6:c4:ff:f0:83:d8:33:6f:68:7c:31:
04:4a:ae:02:74:9b:bc:64:50:8d:3f:6e:78:dc:7a:e4:f8:02:
ee:40:bb:ad:61:9e:ed:55:2f:d7:f5:54:27:16:d5:2a:1c:84:
f2:8e:50:95:b4:fd:8f:41:fa:33:62:84:47:aa:7a:e8:17:d8:
f7:e6:32:56:68:ef:82:14:8a:a1:57:ff:9b:3a:07:ce:94:ae:
bb:76:11:35:76:08:e3:10:21:98:0c:2e:68:b7:54:5a:6f:65:
12:80:a7:7f:26:5f:a4:20:dd:b3:24:8c:8f:c0:2e:76:28:39:
67:b6:99:80:8e:6b:f2:54:e9:58:b8:37:25:04:c7:e6:1f:96:
31:e7:c6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:37 2026 by rpki-client