Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
File: 1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json)
Hash identifier: itW3XjZ9oZ/L+Fs/caRjT0MP9WOVqO7HgBcbsmVw94Q=
Subject key identifier: D3:FC:E3:03:B7:B5:0B:F6:6C:9A:C2:0E:FC:FB:F0:89:C0:9F:AB:6E
Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
Certificate issuer: /CN=d4876414dc995d14ede3a01a323b62b906f83c57
Certificate serial: 019F17F9EE1717D542815D194E86FCD0E908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
Manifest number: 090E
Signing time: Tue 30 Jun 2026 10:01:23 +0000
Manifest this update: Tue 30 Jun 2026 10:01:23 +0000
Manifest next update: Wed 01 Jul 2026 10:01:23 +0000
Files and hashes: 1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: aX2Bkw7iohlXmssrWjorzqRiZSeVnKh3m4fr8NLLMcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:ee:17:17:d5:42:81:5d:19:4e:86:fc:d0:e9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57
Validity
Not Before: Jun 30 10:01:23 2026 GMT
Not After : Jul 1 10:01:23 2026 GMT
Subject: CN=d3fce303b7b50bf66c9ac20efcfbf089c09fab6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:9a:c2:f4:49:04:61:f0:8a:5d:85:da:fa:
d7:1c:44:52:32:c6:23:22:48:72:38:63:23:4e:2e:
ce:b1:1e:6d:7b:e6:1c:54:da:63:58:5b:3f:0d:55:
2d:2a:84:f5:54:01:7d:d4:90:e2:0e:2e:0b:5d:f9:
9d:81:0a:c9:75:2f:a9:de:59:61:6e:88:7b:c5:f8:
31:3a:aa:b8:cc:b6:19:66:6b:4c:bb:d6:70:bf:c5:
59:5f:64:e4:27:fa:b3:ae:3a:58:20:98:e3:86:ff:
12:3e:73:b9:24:bf:22:2d:05:f2:ce:50:36:4f:16:
d9:f7:a3:d9:97:93:33:b1:e0:ef:4d:24:e9:60:67:
c0:1b:27:da:75:0a:4d:e7:a1:34:86:be:dd:5e:7f:
50:fc:e7:ac:07:f9:8f:b0:10:82:35:9f:ba:e3:cc:
68:a0:37:bb:0f:be:f6:95:81:e6:f9:ab:ad:4c:27:
10:63:d5:9b:3b:66:13:5d:6a:e5:e7:c1:11:e7:bc:
e3:69:99:59:91:2d:ba:7d:e6:c6:bf:32:cd:20:8d:
d9:4d:3f:cb:35:c4:aa:96:5b:68:b7:a7:63:39:81:
b8:64:29:33:e8:d7:38:91:c4:05:55:a9:f4:13:63:
e3:92:25:db:80:78:c1:e3:62:04:97:ca:19:a3:c8:
56:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FC:E3:03:B7:B5:0B:F6:6C:9A:C2:0E:FC:FB:F0:89:C0:9F:AB:6E
X509v3 Authority Key Identifier:
keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c6:dc:98:2a:14:d4:e6:66:56:7d:3b:fa:67:40:d2:f5:e2:
f4:4c:6b:da:14:ba:a2:6a:c3:3b:bb:db:f0:d1:e5:d7:10:77:
0e:57:b9:4a:7a:5a:53:4d:51:fc:7f:b1:fa:e5:c4:7f:31:78:
b9:53:53:04:3b:86:73:57:85:dd:be:8e:c7:3a:a0:2d:48:40:
a8:62:30:73:44:98:28:5b:3a:f1:94:52:46:ce:54:ae:c4:0b:
88:dd:4d:4d:80:4f:5c:72:7d:5c:6b:21:b6:37:e4:e4:80:ba:
a4:13:a1:bc:f6:81:13:de:90:9c:31:e3:30:5a:0e:c2:e9:f0:
0e:28:ab:35:39:3e:da:48:ba:23:4a:fe:0d:c8:12:91:7f:02:
56:e4:d8:a6:cf:fc:f7:0e:ae:81:5c:f2:13:ad:4d:94:cb:6b:
24:5e:7e:35:7a:4b:49:07:b3:ee:07:53:0b:01:54:e2:66:9a:
af:7a:ee:a1:cd:f4:02:f1:01:e9:21:20:4e:bd:ea:ad:ce:bf:
a9:a1:2d:40:e3:46:4c:75:a7:f5:34:57:07:a2:75:6b:8e:1f:
f4:94:bc:ee:ab:98:77:0d:ce:af:fc:a5:79:66:a0:d1:7d:ff:
a3:9f:42:ff:5b:dd:43:99:89:32:89:0a:9f:a9:be:6b:8d:d1:
47:d6:a9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:30:20 2026 by rpki-client