Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
File: 12UrrkezA7urED_3ukWgqQYMPcw.mft (raw, json)
Hash identifier: tYD8lcjzp3dwkHTk0osefx0lt/dxGpUb04sBEOui2m4=
Subject key identifier: B5:2B:5F:F2:CC:16:A2:52:DC:1C:18:4A:69:6C:3C:1B:D1:C2:E7:7B
Authority key identifier: D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
Certificate issuer: /CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Certificate serial: 019D397816129350728DC89A2C11F3A0D93F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 12:01:04 +0000
Manifest this update: Sun 29 Mar 2026 12:01:04 +0000
Manifest next update: Mon 30 Mar 2026 12:01:04 +0000
Files and hashes: 1: 12UrrkezA7urED_3ukWgqQYMPcw.crl (hash: 1BU2rmfIqLc6c/jDOTg9ddEfNoI4fhftTG3O5LMzbis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:16:12:93:50:72:8d:c8:9a:2c:11:f3:a0:d9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Validity
Not Before: Mar 29 12:01:04 2026 GMT
Not After : Mar 30 12:01:04 2026 GMT
Subject: CN=b52b5ff2cc16a252dc1c184a696c3c1bd1c2e77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:f9:e9:d6:f3:92:c2:94:21:b4:c3:fa:b9:
4b:a3:54:56:c2:27:8c:f9:ad:d5:28:54:80:0a:8f:
30:be:3c:22:21:2e:6c:f0:77:29:9e:27:89:53:c5:
5b:50:71:91:db:7f:46:78:bd:7f:a5:ef:a7:a7:ac:
06:dd:09:da:cd:af:59:49:5f:75:99:18:1d:88:cd:
2e:db:82:b0:be:31:55:3b:66:71:b2:35:f1:36:c4:
0e:92:42:cf:cd:1a:f0:10:92:5a:92:cc:5d:18:09:
de:01:42:cc:bb:3b:9b:c2:b4:a1:46:35:c7:76:1e:
03:27:4f:31:aa:07:78:f4:f6:f0:ea:c3:ad:c8:db:
a6:8a:ca:51:78:4f:96:7d:f5:bd:d8:f7:86:bf:7e:
26:06:75:40:f4:8f:2d:c9:b0:df:21:e6:ec:15:25:
1a:36:0b:29:ca:25:58:3b:fe:f6:1d:29:70:b0:7d:
f9:79:6e:50:44:01:62:c3:ec:8b:45:49:57:33:54:
4b:48:00:6d:fe:cb:55:af:04:c6:df:12:a8:ff:bd:
e8:d6:89:24:b1:d9:10:80:e3:2f:82:04:88:b8:01:
77:8b:af:93:db:ee:94:89:d4:84:6d:4a:2b:7c:ab:
57:b6:41:9f:b2:64:51:b7:89:a1:3f:b1:bb:b8:c8:
0f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2B:5F:F2:CC:16:A2:52:DC:1C:18:4A:69:6C:3C:1B:D1:C2:E7:7B
X509v3 Authority Key Identifier:
keyid:D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:65:6a:bd:27:74:d4:57:e4:3d:f4:ae:fb:2c:07:56:f5:0c:
48:b9:5f:5f:ee:c4:d3:db:1b:a4:88:86:67:59:af:50:bb:01:
bb:d6:03:83:4d:ef:ee:b8:81:47:bb:b4:e4:71:68:59:67:49:
ed:21:fc:5b:32:f0:1f:83:d9:c0:ee:3f:b2:36:f8:32:dd:b7:
5c:76:45:80:ed:dc:c2:35:1d:87:c0:1f:94:ac:af:96:90:d6:
a7:58:85:6d:c1:bd:65:00:ab:b3:87:32:49:39:6d:a4:ce:c0:
7b:f0:43:49:72:58:67:41:69:f8:b0:74:ec:c5:9b:a0:a3:63:
ed:e1:8b:6b:af:cb:15:fb:d0:cb:9c:a1:4b:d6:b1:a1:9f:f0:
32:c9:20:a7:5a:b7:22:60:1f:ba:73:51:b9:1d:90:0c:0c:28:
86:69:05:57:6f:22:c7:ae:3b:31:15:e4:4d:d6:de:31:40:ad:
ad:f1:0b:dc:89:01:9c:0b:ba:28:bf:7e:a9:23:50:ea:f7:24:
64:23:34:8a:f8:9d:8e:08:17:bc:b6:5e:a1:e3:37:ab:d7:d2:
c6:0c:7f:cb:03:e5:a5:a6:68:76:b1:44:3d:d5:58:13:f3:de:
55:8b:7b:d0:a9:45:5a:3d:b7:3c:58:2e:68:fe:ec:a0:ca:f4:
ac:fb:56:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:16 2026 by rpki-client