Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
File: C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft (raw, json)
Hash identifier: Z+fO4FtLlAODqpdumo6NBwQASw0syBDN1nnTtt48ll0=
Subject key identifier: 31:DD:DA:B9:2F:B1:9D:DB:61:53:5D:65:20:76:1F:C9:90:E7:3E:F6
Authority key identifier: 0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
Certificate issuer: /CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Certificate serial: 019E2F96803ABE438AD9203DCCB326AE4231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
Manifest number: 189C
Signing time: Sat 16 May 2026 07:00:52 +0000
Manifest this update: Sat 16 May 2026 07:00:52 +0000
Manifest next update: Sun 17 May 2026 07:00:52 +0000
Files and hashes: 1: C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl (hash: T6SS7+Ofkmk3ZiuBPuMr2D/R9EQYqFuy4AwC7i1fASE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:80:3a:be:43:8a:d9:20:3d:cc:b3:26:ae:42:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Validity
Not Before: May 16 07:00:52 2026 GMT
Not After : May 17 07:00:52 2026 GMT
Subject: CN=31dddab92fb19ddb61535d6520761fc990e73ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c0:54:29:8d:32:4c:62:98:cb:47:bc:a2:52:
e9:89:23:d9:ee:2e:b2:21:b8:ee:9e:54:0d:06:83:
4e:b6:0f:b6:0a:e8:45:42:13:c6:8a:99:e8:0e:51:
95:50:62:b9:3b:5c:d6:f9:bd:7c:6e:9a:71:c7:6d:
26:3f:fc:d6:b0:b6:45:6d:34:c1:fb:f8:4d:c2:2f:
8f:18:c5:08:8d:ea:d2:37:bc:a5:92:69:76:0f:87:
54:8c:5f:c8:c5:9b:fb:cb:75:4e:99:82:25:50:86:
1f:a9:72:d8:8b:8d:dd:ec:be:6f:4b:8f:4b:ea:30:
0e:ef:6a:6f:a4:10:b4:00:fa:f7:83:11:52:7d:d8:
32:16:e5:9c:60:2e:02:26:b4:5a:01:13:8b:9b:5b:
4b:15:43:99:96:57:bb:42:3c:a7:10:7f:3f:05:e1:
67:2e:91:a8:47:5f:68:03:e9:a7:e1:49:42:5b:20:
3b:8f:ff:7c:20:81:e2:a4:66:ed:97:2c:a1:ac:be:
f4:0a:3a:34:4f:3b:03:dc:ed:57:28:bb:23:b2:f9:
ed:a2:6f:11:f0:99:00:87:c7:05:10:5c:90:05:e7:
07:7f:53:d1:6d:1b:75:e9:34:e7:cd:36:c3:1a:3d:
28:eb:27:06:d1:48:65:6e:c4:25:24:80:ad:cd:80:
3b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DD:DA:B9:2F:B1:9D:DB:61:53:5D:65:20:76:1F:C9:90:E7:3E:F6
X509v3 Authority Key Identifier:
keyid:0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:76:18:c0:bf:d7:c5:68:c8:16:c1:7b:22:8b:25:71:81:a4:
0d:7d:ba:90:ee:20:b1:98:ec:d1:f1:45:c1:9d:53:d9:b2:7a:
f7:60:e3:81:2e:7a:64:45:79:f8:b3:94:60:73:92:9e:e3:97:
2c:88:f1:1d:8f:5c:db:67:82:e3:57:0d:a5:2a:b5:55:d8:b3:
05:88:22:6b:3c:41:6c:de:38:a5:f9:1d:04:52:fe:9b:d3:61:
a7:22:35:c4:86:af:f1:d9:b7:25:2d:eb:9a:18:2a:59:23:11:
72:a9:36:a1:7e:1f:c0:a0:13:26:c3:bc:51:d1:38:1f:22:61:
16:1f:aa:73:cd:be:0b:1a:2d:d5:45:e2:1a:2a:39:8f:49:46:
0d:4f:fb:f6:46:62:dc:71:d8:f4:19:88:b1:66:51:3f:7f:99:
3e:63:0c:e9:5f:88:e1:80:a2:73:cb:6c:ab:63:29:d8:e8:9d:
f3:1e:14:f8:e3:86:b8:35:83:e4:c4:e9:a8:71:01:ce:12:b2:
d4:3c:4c:63:fe:35:50:26:98:72:0d:4e:4a:7f:77:c9:e0:0f:
4e:93:d6:8a:b6:0e:a9:34:e0:3a:49:40:e1:43:da:eb:ff:ee:
8b:a8:85:bf:9f:da:67:57:f9:86:53:94:b0:58:af:92:d3:17:
fc:2b:22:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:44 2026 by rpki-client