Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
File: 94hH4ENTVu5e8IbBIEhAigQZG3g.mft (raw, json)
Hash identifier: dL//rD+Ndn2P47mfTKYdkWyYu6CwpDRsdyl3y4Q6POE=
Subject key identifier: BF:E0:9E:19:B1:BD:09:C3:2F:34:0C:58:0F:41:39:70:9C:4C:91:62
Authority key identifier: F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78
Certificate issuer: /CN=f78847e0435356ee5ef086c12048408a04191b78
Certificate serial: 019F17C224C1F8327749366E6EBF21E2F109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
Manifest number: 1985
Signing time: Tue 30 Jun 2026 09:00:27 +0000
Manifest this update: Tue 30 Jun 2026 09:00:27 +0000
Manifest next update: Wed 01 Jul 2026 09:00:27 +0000
Files and hashes: 1: 94hH4ENTVu5e8IbBIEhAigQZG3g.crl (hash: gwGwKtafnKyXvTX/B2OcQceanIOSDIOKzHi3pkcpZ7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:24:c1:f8:32:77:49:36:6e:6e:bf:21:e2:f1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78847e0435356ee5ef086c12048408a04191b78
Validity
Not Before: Jun 30 09:00:27 2026 GMT
Not After : Jul 1 09:00:27 2026 GMT
Subject: CN=bfe09e19b1bd09c32f340c580f4139709c4c9162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:17:28:2b:7f:ab:c6:50:c4:77:04:ba:fb:73:
25:0e:e4:2e:d1:1a:d2:c7:d4:03:69:f7:a6:d6:b4:
85:9b:49:b4:bd:bd:e2:4e:cc:aa:c4:1c:5b:5c:32:
47:3e:36:3c:59:8e:be:92:4a:e9:c1:e3:00:44:0c:
ee:5a:5b:29:0b:a2:fa:24:c0:53:24:ef:b2:64:c7:
64:86:3b:d1:96:60:83:3f:b5:d8:87:2e:0a:b3:8c:
a1:04:21:eb:b8:4b:d0:0a:59:1e:f1:b9:c0:54:72:
f7:dc:94:49:60:4d:47:77:bc:4d:a0:84:69:17:7f:
45:0b:66:f4:4e:e1:0a:65:f5:d0:11:d8:0f:69:b6:
da:4f:d9:6e:8c:1c:17:97:a7:59:28:0a:de:81:4f:
78:e6:5e:9d:c3:f3:b5:f2:d3:a5:aa:7d:9a:6a:fa:
d5:dd:ed:56:03:c5:0f:38:e4:2c:a7:06:52:65:33:
05:3b:88:35:05:0b:a9:de:c5:21:23:97:78:4a:07:
b0:ac:31:37:0f:2c:51:9a:a7:77:16:c6:56:85:bf:
4d:3a:05:a9:79:32:eb:11:96:75:c3:59:f8:32:19:
30:05:d7:62:16:da:9f:60:47:75:a4:86:77:d7:4b:
41:ea:72:14:1a:3a:ed:ff:59:ca:f0:18:fa:5c:1e:
69:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E0:9E:19:B1:BD:09:C3:2F:34:0C:58:0F:41:39:70:9C:4C:91:62
X509v3 Authority Key Identifier:
keyid:F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:25:01:25:ff:d8:ec:0a:80:b0:33:9d:26:11:be:4a:0b:84:
e7:cd:09:ce:f1:cd:5c:a7:34:37:ef:59:a9:53:83:10:38:34:
fa:dd:82:55:25:2c:35:a4:58:94:e4:3c:86:de:25:c1:6e:41:
86:76:e4:51:77:10:df:a2:6d:2e:46:df:32:59:b9:c8:49:4a:
e9:cb:15:90:f1:39:b2:47:4e:5b:5e:e0:15:6f:ae:cc:6e:86:
19:e7:30:40:46:de:b5:91:d4:9a:57:a4:00:25:84:85:21:33:
d6:a2:ef:1d:05:a9:ad:1c:43:83:b5:ac:e3:7a:18:4c:66:46:
e2:b3:d0:64:1b:b5:82:a5:53:c8:c0:55:2a:d7:ba:99:e0:fe:
8c:f3:d0:9d:df:9b:13:18:61:a7:c5:56:b4:85:c0:27:ee:76:
bd:7d:39:28:f0:c6:73:bd:ba:ce:0f:af:c2:8b:56:13:ba:5e:
2e:b2:22:66:ab:60:bf:45:96:91:d7:94:e5:b9:eb:73:82:a2:
54:57:4a:be:5e:99:9b:c4:83:2d:c2:11:ea:af:e9:37:0c:89:
f1:6c:dc:10:aa:ee:f2:9f:59:74:ae:72:38:c3:8e:a7:a9:b3:
21:b8:ab:56:49:11:2f:21:83:08:e7:ae:64:1d:16:52:b0:51:
08:b7:62:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:47 2026 by rpki-client