Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
File: 639rU_mItXcyDvKJM4Cl6oJLauQ.mft (raw, json)
Hash identifier: lkd7eBuZbEf0Kq5eavKwQ0kiHHdS+a13NjG4eic1Li8=
Subject key identifier: 10:E0:CD:99:73:C9:2A:2E:6D:67:FC:EF:59:65:D1:6C:E5:1A:B8:DA
Authority key identifier: EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4
Certificate issuer: /CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
Certificate serial: 019E1C4668872ADAD31B7C02BEAD09D92ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
Manifest number: 1902
Signing time: Tue 12 May 2026 13:00:36 +0000
Manifest this update: Tue 12 May 2026 13:00:36 +0000
Manifest next update: Wed 13 May 2026 13:00:36 +0000
Files and hashes: 1: 639rU_mItXcyDvKJM4Cl6oJLauQ.crl (hash: kWdkZqe0HMLbuS1A4B8xQb7Y5EDsxxO86SAVGit9U8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:68:87:2a:da:d3:1b:7c:02:be:ad:09:d9:2a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
Validity
Not Before: May 12 13:00:36 2026 GMT
Not After : May 13 13:00:36 2026 GMT
Subject: CN=10e0cd9973c92a2e6d67fcef5965d16ce51ab8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:1c:cc:71:fe:81:5b:27:67:5a:19:83:cf:
91:bc:28:6c:d8:44:8f:68:f4:7b:0e:57:af:de:6f:
ff:1e:02:0b:39:ae:76:e9:69:e6:7b:d0:ed:21:d5:
2b:7e:f2:1f:d8:67:2c:35:4f:9f:46:ed:bf:94:b4:
2d:62:fa:5f:78:22:c8:ef:da:17:ae:7d:a4:6a:f2:
e7:a9:d7:e1:e3:45:2e:fd:b8:d9:3a:f8:e4:db:2d:
f7:fc:63:d5:c5:cf:3d:2e:4b:a8:54:26:b9:99:ca:
1d:cc:ea:24:f8:7c:2f:90:13:42:0a:0b:91:89:95:
df:ec:f7:ac:29:27:fe:d5:95:92:24:f4:e9:22:a2:
7b:b4:cb:77:09:10:58:85:f9:b0:43:80:1e:8d:cc:
b7:11:a0:19:e7:1c:b4:1d:d4:5d:11:08:ff:b4:8a:
28:59:02:53:a4:f5:5b:2c:70:b0:98:b4:37:4f:0b:
8d:ed:60:dd:1a:f8:01:8d:91:e3:1f:56:a9:ac:c5:
d6:b6:fa:bf:46:f4:59:f5:8a:84:81:66:df:fd:26:
d0:00:92:56:b6:c1:24:af:c6:82:3d:72:25:f4:fd:
32:14:bb:10:2c:7c:98:a7:d9:aa:8e:cd:fc:4e:7e:
60:c6:86:53:30:8d:57:00:3d:a9:29:a5:db:d7:8b:
72:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E0:CD:99:73:C9:2A:2E:6D:67:FC:EF:59:65:D1:6C:E5:1A:B8:DA
X509v3 Authority Key Identifier:
keyid:EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1f:f9:95:cc:d4:49:97:56:91:04:ab:9f:87:98:10:df:55:
5c:31:37:dc:f6:34:5d:5a:94:ac:c7:d8:2c:42:1e:3c:ff:34:
00:9f:19:1d:c7:fb:91:61:0b:7a:ea:a3:d5:2c:99:45:fc:27:
fc:27:66:36:3f:fa:8e:5e:37:5c:5e:98:d7:d5:99:48:85:7a:
4b:0b:e8:7f:8f:df:84:5d:52:5d:3c:d1:33:7f:fd:a7:fc:00:
cb:4d:12:fc:3e:53:43:f0:07:c2:8a:ae:67:0a:16:98:e6:6d:
f4:a8:bc:65:6f:ce:41:71:ec:f3:1c:33:b2:07:70:6f:ee:09:
fa:74:c4:28:1d:7f:3c:58:61:04:15:d5:3f:1a:2a:40:79:cb:
63:ff:ce:f9:0b:b6:46:46:8f:eb:63:a9:5e:18:90:12:e1:1c:
83:3f:f6:ea:ba:fa:b9:8d:9f:41:a2:7f:56:73:c5:3a:85:85:
93:c2:ea:39:a3:71:7c:57:a8:3a:15:16:43:15:f7:bd:e6:7c:
64:5b:f8:23:16:cc:06:a4:90:59:06:1a:1d:a7:7e:3a:50:e3:
6e:0a:53:c5:c7:77:44:84:7d:b8:eb:f5:70:ba:ed:a4:6c:dd:
c5:be:d8:f1:a0:7b:63:f6:09:64:ae:f9:c3:2b:5b:e5:dd:b9:
b8:36:51:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:34 2026 by rpki-client