Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
File: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft (raw, json)
Hash identifier: IXA0ERxSqX9nDcVpctf/llWgi1CYqLLKEWTNSgKDpKE=
Subject key identifier: 0A:7B:C7:0B:A5:19:48:D5:AF:EB:C0:E8:67:C8:50:29:98:F2:D1:F0
Authority key identifier: E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9
Certificate issuer: /CN=e7a3bd1708c65dea4ee941849c46db43e67912b9
Certificate serial: 01A0D1C94BB76C463AC45E86D8D9CCCEACD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
Manifest number: 0589
Signing time: Thu 24 Sep 2026 05:00:25 +0000
Manifest this update: Thu 24 Sep 2026 05:00:25 +0000
Manifest next update: Fri 25 Sep 2026 05:00:25 +0000
Files and hashes: 1: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl (hash: 7xtdcrYZvPgxDgGpqBMPp3KF1yQLPqrAwBnqxd07HWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:4b:b7:6c:46:3a:c4:5e:86:d8:d9:cc:ce:ac:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a3bd1708c65dea4ee941849c46db43e67912b9
Validity
Not Before: Sep 24 05:00:25 2026 GMT
Not After : Sep 25 05:00:25 2026 GMT
Subject: CN=0a7bc70ba51948d5afebc0e867c8502998f2d1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:47:f9:bc:84:e9:aa:1a:18:63:12:60:33:
30:fb:99:bf:4c:fd:5a:ef:eb:1a:e8:7b:14:eb:b1:
1f:4c:6f:19:1c:11:4e:02:8d:9d:7a:61:54:f7:90:
d5:a7:e1:0d:4e:f7:a2:d3:9d:22:a0:6c:05:46:90:
14:8e:0a:9e:8d:de:0d:27:19:75:e4:e8:96:58:e5:
2a:80:a5:35:d7:ba:bb:8d:b7:eb:69:76:e7:53:df:
f2:75:11:4d:61:10:f4:93:0d:81:db:0d:3f:54:6a:
e5:3e:c7:67:84:9b:64:9d:47:36:8b:88:80:a2:62:
32:82:86:3d:9b:c7:d6:e0:82:98:c9:d6:69:a2:ce:
04:aa:1e:f2:eb:cd:9e:4d:43:d9:c6:46:57:b2:cb:
c9:f0:d1:89:25:3c:51:7a:95:d5:4f:2c:43:a1:dc:
05:77:78:7f:01:a4:52:30:29:48:5c:e2:4c:67:26:
cf:08:78:be:54:0e:95:be:71:e9:1e:d5:4d:90:f3:
b1:35:82:15:13:78:6d:0c:db:13:bf:15:2e:64:d3:
5b:7c:8f:58:5f:3a:02:42:e0:c8:63:49:5f:a2:58:
2b:19:a1:b6:c1:65:0e:60:a3:91:d9:c4:e6:26:4a:
a2:57:c9:d7:ec:13:8d:ee:3e:d4:84:e7:f2:be:3f:
5e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7B:C7:0B:A5:19:48:D5:AF:EB:C0:E8:67:C8:50:29:98:F2:D1:F0
X509v3 Authority Key Identifier:
keyid:E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3b:33:b2:e8:3d:22:45:07:c0:ab:3f:71:d6:ab:97:ab:3e:
29:3a:ee:4a:2c:d8:3a:1d:6a:56:26:94:e2:a0:bc:ad:f6:2a:
87:3f:59:ff:29:39:c5:4e:de:26:f3:ca:96:db:71:f4:b0:ca:
6f:49:d7:94:64:9b:a7:54:55:6b:53:6c:ce:99:1b:10:e6:3a:
28:2a:a5:c9:a2:14:3b:0b:92:d3:23:db:52:dc:6e:f4:6a:1b:
2f:e9:9f:dd:41:4a:30:ea:1c:4c:61:33:4c:bb:43:28:67:d7:
fc:d3:02:27:be:0b:57:05:bf:cb:d4:f8:a6:12:f4:ea:e3:92:
57:b9:dc:44:97:d6:12:4c:b2:81:96:90:23:1e:f6:8e:8b:e9:
45:cd:cb:04:b4:e1:b8:94:a2:fe:8a:53:94:1d:be:1f:78:41:
00:3b:83:ae:52:c5:34:27:79:fc:a0:b0:55:f8:19:e6:75:8e:
d2:99:35:71:71:56:4a:47:12:75:09:4b:d4:7b:ba:22:c0:11:
ba:06:e5:3a:f6:44:81:ec:1f:d2:22:ee:69:9e:d9:b3:40:06:
b9:08:4f:2d:be:32:62:ba:00:85:bb:dc:2e:64:13:5c:52:e2:
ed:9e:1d:bc:79:b5:4d:6c:8d:5d:0b:07:c0:72:49:a3:44:6c:
f0:8e:8b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:49:56 2026 by rpki-client