Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
File: 12UrrkezA7urED_3ukWgqQYMPcw.mft (raw, json)
Hash identifier: x7WSwDSbB+3yfHRVEuIKs1uIJROr+DjeuVTazPTL4aw=
Subject key identifier: 80:7D:6E:C4:E1:44:05:30:A6:FF:19:8F:2B:CD:4B:39:33:7F:3C:77
Authority key identifier: D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
Certificate issuer: /CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Certificate serial: 019F18676DBF1E8E77AEDB63399540EE3F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
Manifest number: 1918
Signing time: Tue 30 Jun 2026 12:00:59 +0000
Manifest this update: Tue 30 Jun 2026 12:00:59 +0000
Manifest next update: Wed 01 Jul 2026 12:00:59 +0000
Files and hashes: 1: 12UrrkezA7urED_3ukWgqQYMPcw.crl (hash: w4n+lBLGveBCCgFTJ151qF8Eb+TzE6TUgitGxNb2CIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:6d:bf:1e:8e:77:ae:db:63:39:95:40:ee:3f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Validity
Not Before: Jun 30 12:00:59 2026 GMT
Not After : Jul 1 12:00:59 2026 GMT
Subject: CN=807d6ec4e1440530a6ff198f2bcd4b39337f3c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:14:21:63:bf:9b:a4:19:5a:37:09:32:31:3e:
1b:95:b3:cb:d2:ea:6a:6a:d8:a9:d8:ff:4d:4a:c0:
0f:28:af:69:ca:25:a3:b3:6e:6f:d4:53:46:ba:29:
46:70:83:8e:e0:e3:45:e1:27:88:07:c2:98:f2:6d:
8a:be:9d:83:93:cc:7f:33:03:e4:e6:f8:fa:89:12:
ab:1e:67:df:fe:d4:c0:c6:fb:16:0b:4d:de:26:f6:
8c:9b:60:85:fb:16:1a:70:ba:fc:08:1c:92:0f:91:
b1:48:df:d5:68:d0:7d:2e:c3:4b:a7:15:5b:da:e0:
2d:97:06:c7:ac:ec:08:da:c1:0f:72:ea:b6:1d:08:
ca:47:f9:9e:04:9b:cc:3e:f8:04:f8:7e:f3:aa:b7:
34:b5:99:48:8e:8e:e1:8c:6e:aa:0e:02:4d:e5:80:
c2:38:8b:2e:13:76:69:56:6e:85:7f:ad:d7:f1:0d:
ab:5b:2a:d9:95:69:71:4a:5f:81:6b:6a:6b:53:ae:
b9:a6:61:a8:9b:3e:37:e4:1b:02:40:b0:d4:49:3e:
94:82:43:f5:bd:c6:94:50:03:c3:ee:a1:c7:45:4e:
ee:9e:78:26:9e:f0:a2:6b:9a:5f:f6:b9:6d:4d:b7:
a6:1c:b7:35:8b:33:c6:00:e5:33:bd:c1:85:19:63:
0f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7D:6E:C4:E1:44:05:30:A6:FF:19:8F:2B:CD:4B:39:33:7F:3C:77
X509v3 Authority Key Identifier:
keyid:D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a5:4c:1a:2c:3a:6f:ca:ce:32:a2:1a:be:ed:79:fe:6a:23:
eb:eb:d3:b2:44:ea:93:5e:2d:04:9a:68:7d:59:67:40:fb:1e:
39:7f:c9:93:2b:07:f0:81:1f:9e:50:af:78:5c:ec:c1:f7:97:
ab:14:e2:d2:a3:45:e8:56:36:93:6f:0a:a0:d3:11:f9:c4:ea:
c0:8c:20:1b:e5:b6:5d:51:64:39:49:34:94:0a:03:76:a5:7a:
d9:e4:ac:06:86:f1:bc:32:d9:19:01:c7:22:ef:38:81:49:1d:
14:f7:6e:ca:7f:87:70:57:cb:7d:2b:52:39:0c:10:ee:1c:1e:
34:fa:4d:16:83:61:26:86:09:91:74:b2:f0:e5:5b:04:f6:41:
90:5b:57:4d:84:c0:e8:47:ea:f7:54:de:62:0b:a9:7c:f3:e3:
86:12:3c:e2:91:f6:72:fa:33:5f:4d:48:bd:e8:4c:22:d3:61:
80:06:bc:90:e1:5a:7e:08:e2:7f:11:f8:e2:d1:1f:69:6b:08:
58:c5:37:49:25:f8:54:42:2c:b9:1a:b7:c8:e0:b5:2a:9f:96:
da:8e:f8:6d:bf:72:99:2b:68:da:43:89:ab:1a:ba:eb:0e:fb:
2c:0b:c0:20:60:47:fe:17:2f:17:ab:0c:73:2d:f2:bc:cf:55:
5f:67:91:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:41 2026 by rpki-client