Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
File: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft (raw, json)
Hash identifier: jOSeT+n2VaIonHAubI+fZoG0S0aWugesBE1TUMAo0R0=
Subject key identifier: 7F:57:18:F8:F8:DB:F4:3C:A6:44:8E:DE:98:3D:2C:EF:CD:15:4E:0D
Authority key identifier: D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
Certificate issuer: /CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Certificate serial: 019E1C46848E04B079CD1728EBD4F52DC15C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
Manifest number: 15D4
Signing time: Tue 12 May 2026 13:00:43 +0000
Manifest this update: Tue 12 May 2026 13:00:43 +0000
Manifest next update: Wed 13 May 2026 13:00:43 +0000
Files and hashes: 1: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl (hash: RJ5fSckQUiZj6AukfPYM0R7B++2bdBziO3xFoylWpcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:84:8e:04:b0:79:cd:17:28:eb:d4:f5:2d:c1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Validity
Not Before: May 12 13:00:43 2026 GMT
Not After : May 13 13:00:43 2026 GMT
Subject: CN=7f5718f8f8dbf43ca6448ede983d2cefcd154e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:60:63:9b:69:58:dd:40:1b:62:11:87:1e:6a:
dd:3e:07:e5:f9:d6:71:dc:a8:bb:2a:d6:6a:1d:29:
91:96:4d:59:7a:57:8b:7d:f8:de:d4:9e:98:e1:d4:
22:ee:79:4f:95:d7:a7:56:86:f6:85:76:32:27:1b:
16:7b:0b:84:65:86:69:ea:51:79:7a:fb:30:32:e6:
59:f8:9a:52:22:c2:c2:b2:db:2a:a7:98:c3:8e:2d:
36:b5:66:b7:b0:7d:18:6e:99:ea:6c:f5:69:b4:ec:
1c:0a:29:2b:28:72:8e:21:94:f0:08:c3:14:4c:ef:
05:cc:53:5f:4f:7c:ed:dc:fd:dc:e1:b0:88:ae:2c:
da:a7:f9:ce:18:63:05:20:08:b6:01:71:5c:63:57:
35:41:1f:e7:5f:87:8e:dc:d0:79:62:95:b0:93:59:
80:cd:c8:f4:7c:79:73:7a:bc:2e:36:7d:a3:6d:2c:
b7:66:c3:4c:12:da:b3:1b:d7:5c:f9:e1:b4:7e:22:
a0:74:b3:6d:34:fc:54:5c:88:df:ff:6f:ee:63:b5:
61:86:cb:2d:d9:8c:aa:98:fe:23:43:b5:6d:a8:3c:
49:86:b7:22:a7:c7:48:1f:df:58:f9:65:28:db:ab:
cf:f5:4e:b8:47:f4:e9:c1:d3:6b:50:2e:f0:5c:e7:
74:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:57:18:F8:F8:DB:F4:3C:A6:44:8E:DE:98:3D:2C:EF:CD:15:4E:0D
X509v3 Authority Key Identifier:
keyid:D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:af:f4:95:a4:c5:7d:09:03:a8:e4:5a:c1:c7:02:8e:0d:c5:
76:b1:46:70:8b:2a:31:21:fb:53:c1:a2:7f:27:cb:b2:ad:7d:
7e:ea:66:b8:8e:19:c7:b6:13:ed:6f:ac:0d:83:ff:1a:34:4c:
3e:ec:48:d9:69:ab:2b:4b:68:97:5c:10:78:51:09:df:09:88:
9d:b4:7b:a4:6e:83:87:89:13:94:48:e3:97:16:28:60:ed:df:
57:23:1f:35:d1:19:ca:e5:87:57:ef:0d:d2:c7:d3:2e:10:f9:
3d:db:14:0e:f0:ab:9b:73:77:2c:5a:d9:f8:c8:83:01:de:40:
e4:d6:5c:78:8e:14:bd:9c:52:7f:bd:dd:f6:82:ab:d2:b2:b1:
08:8f:c1:0f:29:08:53:db:e2:f9:99:fe:05:ba:9e:02:bd:4a:
d2:3e:92:00:74:c0:0a:a8:32:89:e4:83:b9:8e:ca:b9:3d:6a:
1e:fd:7a:9a:77:83:9d:34:b9:78:61:48:cc:6f:2a:0c:60:7d:
bc:df:ce:fd:8f:d6:2a:19:6c:bc:2a:bc:45:a8:8f:e3:f1:1f:
e7:32:34:52:4c:94:ec:71:a7:29:ac:75:c1:de:1a:52:34:3d:
da:41:c5:7e:57:55:a6:46:48:4b:53:2b:19:41:bb:d6:1b:94:
92:d9:4a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:55 2026 by rpki-client