Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
File: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft (raw, json)
Hash identifier: 9T113ay+zAfuU0WaG9xBJPU/gldOBxDWUsbC6OIL3dM=
Subject key identifier: 88:73:06:BC:AB:DB:0B:7B:EA:AA:15:EC:46:F5:5F:7C:4D:7B:E3:90
Authority key identifier: E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9
Certificate issuer: /CN=e7a3bd1708c65dea4ee941849c46db43e67912b9
Certificate serial: 019E1E6C5A5E3536A58EB5B6165FFAC76951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
Manifest number: 0423
Signing time: Tue 12 May 2026 23:01:17 +0000
Manifest this update: Tue 12 May 2026 23:01:17 +0000
Manifest next update: Wed 13 May 2026 23:01:17 +0000
Files and hashes: 1: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl (hash: RRhd+3dha8hiaXElesZkLrWgAjym53WJUNzqPDheRmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:5a:5e:35:36:a5:8e:b5:b6:16:5f:fa:c7:69:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a3bd1708c65dea4ee941849c46db43e67912b9
Validity
Not Before: May 12 23:01:17 2026 GMT
Not After : May 13 23:01:17 2026 GMT
Subject: CN=887306bcabdb0b7beaaa15ec46f55f7c4d7be390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e9:0e:f7:1b:56:b8:7a:11:bc:9f:4b:24:8c:
1b:4c:06:39:92:6b:91:7a:f0:ed:a0:d8:39:8a:10:
72:94:6e:63:45:90:d9:8b:e7:cb:8d:e9:1b:02:3c:
de:1c:a3:b4:43:de:0d:97:56:5a:68:cc:ac:5a:5b:
2d:e3:4b:8e:79:ae:d4:cd:ae:19:15:d4:64:f5:71:
33:b5:9b:83:3b:ed:d7:85:f8:8a:31:50:49:60:1e:
72:41:93:02:a5:91:02:ad:2a:5b:b3:86:5e:a8:98:
98:ce:99:6e:78:cc:6b:2e:d9:38:19:0b:13:b1:a7:
97:18:25:45:33:41:19:34:d5:0e:75:c8:1c:5b:72:
5b:db:1a:eb:43:6f:3a:5c:97:e0:e3:a4:19:24:8f:
61:fd:51:9e:3c:eb:18:b2:4b:26:2e:66:38:4e:a5:
ef:8f:c1:99:c1:9d:e7:16:ad:58:14:0f:57:30:a5:
22:56:d9:6c:b1:15:a7:94:72:70:99:d0:52:f0:6d:
a0:23:e3:a2:b6:18:f5:c4:bb:4f:6c:b6:16:77:14:
ec:c7:86:74:f4:19:aa:f3:ee:4d:6b:ad:ce:1f:4c:
dc:29:26:ee:3c:37:9b:48:57:2e:f4:8a:50:4e:64:
89:da:c4:f6:36:27:18:76:5b:dd:47:1b:b7:f4:d0:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:73:06:BC:AB:DB:0B:7B:EA:AA:15:EC:46:F5:5F:7C:4D:7B:E3:90
X509v3 Authority Key Identifier:
keyid:E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:41:82:4e:e9:19:39:97:fd:63:2a:22:73:12:4c:ad:0b:8f:
55:33:34:52:cc:12:53:6d:e2:bb:ed:b3:10:b2:af:fc:a7:d4:
4d:2d:1d:9e:be:67:01:47:61:a0:b6:dd:f2:cd:d3:61:34:36:
11:6e:41:5a:f4:14:1d:4d:0e:1a:e5:8a:5a:57:48:a1:40:f6:
bb:b3:46:2a:d3:b6:76:35:54:23:9b:71:46:c3:8e:17:6a:d3:
ba:ef:35:22:91:b6:9c:c0:b6:2c:ed:30:34:96:ec:3f:1b:67:
67:31:df:a4:71:d3:5e:a8:0a:f3:0a:b4:64:f9:44:d3:f0:a7:
79:5e:4d:58:14:5c:15:3b:3c:aa:ad:b8:0d:12:2c:52:3a:a6:
a8:6c:1a:c3:da:5b:88:6f:10:44:5c:fe:56:45:56:81:0b:f6:
73:72:cd:2b:9b:97:cb:6d:cd:72:5e:b7:21:7b:94:8d:40:65:
b5:11:11:e0:68:fe:0d:a0:56:96:8a:41:42:57:f0:61:a0:9c:
5b:78:d0:72:87:d1:1a:49:b0:7f:3a:cc:e4:54:3c:fa:fa:a0:
7a:e6:a3:0d:bb:48:f8:31:d7:06:0e:30:4e:f9:a9:c0:35:0d:
36:d4:d6:7e:d9:7b:77:58:73:a9:4d:9c:ea:3e:9a:42:8f:43:
a9:fa:d4:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebFpeNTaljrW2Fl/6x2lRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YTNiZDE3MDhjNjVkZWE0ZWU5NDE4NDljNDZkYjQzZTY3
OTEyYjkwHhcNMjYwNTEyMjMwMTE3WhcNMjYwNTEzMjMwMTE3WjAzMTEwLwYDVQQD
Eyg4ODczMDZiY2FiZGIwYjdiZWFhYTE1ZWM0NmY1NWY3YzRkN2JlMzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ekO9xtWuHoRvJ9LJIwbTAY5kmuR
evDtoNg5ihBylG5jRZDZi+fLjekbAjzeHKO0Q94Nl1ZaaMysWlst40uOea7Uza4Z
FdRk9XEztZuDO+3XhfiKMVBJYB5yQZMCpZECrSpbs4ZeqJiYzplueMxrLtk4GQsT
saeXGCVFM0EZNNUOdcgcW3Jb2xrrQ286XJfg46QZJI9h/VGePOsYsksmLmY4TqXv
j8GZwZ3nFq1YFA9XMKUiVtlssRWnlHJwmdBS8G2gI+Oithj1xLtPbLYWdxTsx4Z0
9Bmq8+5Na63OH0zcKSbuPDebSFcu9IpQTmSJ2sT2NicYdlvdRxu39NCjUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhzBryr2wt76qoV7Eb1X3xNe+OQMB8GA1UdIwQY
MBaAFOejvRcIxl3qTulBhJxG20PmeRK5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTZPOUZ3akdYZXBPNlVHRW5FYmJRLVo1RXJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jZTM2NjctNDdkNC00NTE4LWJmOTQt
NzQ0MGFkMmNlN2E0LzEvNTZPOUZ3akdYZXBPNlVHRW5FYmJRLVo1RXJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9jZTM2NjctNDdkNC00NTE4LWJmOTQtNzQ0MGFkMmNlN2E0
LzEvNTZPOUZ3akdYZXBPNlVHRW5FYmJRLVo1RXJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXEGCTukZ
OZf9YyoicxJMrQuPVTM0UswSU23iu+2zELKv/KfUTS0dnr5nAUdhoLbd8s3TYTQ2
EW5BWvQUHU0OGuWKWldIoUD2u7NGKtO2djVUI5txRsOOF2rTuu81IpG2nMC2LO0w
NJbsPxtnZzHfpHHTXqgK8wq0ZPlE0/CneV5NWBRcFTs8qq24DRIsUjqmqGwaw9pb
iG8QRFz+VkVWgQv2c3LNK5uXy23Ncl63IXuUjUBltRER4Gj+DaBWlopBQlfwYaCc
W3jQcofRGkmwfzrM5FQ8+vqgeuajDbtI+DHXBg4wTvmpwDUNNtTWftl7d1hzqU2c
6j6aQo9DqfrUXg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:08:20 2026 by rpki-client