Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
File: 9rES1L7bpvNYUoqDcUG3SwkphZM.mft (raw, json)
Hash identifier: vP9Cp5GFy7HAg+pHMu/tebpzOAWdM/uCBrRgMOR/9/8=
Subject key identifier: CA:45:4C:F1:B3:7F:69:BE:05:42:1E:8F:AA:FF:F8:41:C8:FB:CE:C2
Authority key identifier: F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
Certificate issuer: /CN=f6b112d4bedba6f358528a837141b74b09298593
Certificate serial: 019E1D9077FFDC11C8E1E7A0322DF6C67175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
Manifest number: 1855
Signing time: Tue 12 May 2026 19:01:07 +0000
Manifest this update: Tue 12 May 2026 19:01:07 +0000
Manifest next update: Wed 13 May 2026 19:01:07 +0000
Files and hashes: 1: 9rES1L7bpvNYUoqDcUG3SwkphZM.crl (hash: xay3WXmhZuBhy7eyc0Jo+yBDDJA9R7b5NIkdDS5i7Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:77:ff:dc:11:c8:e1:e7:a0:32:2d:f6:c6:71:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b112d4bedba6f358528a837141b74b09298593
Validity
Not Before: May 12 19:01:07 2026 GMT
Not After : May 13 19:01:07 2026 GMT
Subject: CN=ca454cf1b37f69be05421e8faafff841c8fbcec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:55:cc:3c:c8:6a:64:4f:21:39:84:54:bc:
b0:b4:a5:cd:52:8a:a0:c4:35:a4:44:eb:4b:ae:e5:
33:a0:4f:01:57:ce:bc:40:4f:42:7f:60:bd:41:7c:
fb:2f:d8:bd:9a:68:0b:58:28:e7:75:ae:86:b6:15:
3b:a7:b0:46:0e:4b:78:93:99:dc:11:32:2a:58:6d:
d8:9a:07:3e:6a:1b:d9:e6:7c:ea:a9:f3:bb:e3:26:
39:ea:f3:96:2c:20:73:c5:36:34:cc:75:18:86:b6:
ed:a3:da:ac:c3:e2:0a:e5:d0:22:76:85:ac:31:3c:
77:e6:93:34:64:57:56:f6:7e:17:10:8d:0d:4b:9f:
54:b1:03:50:a0:83:c4:00:63:b3:1d:ff:47:68:aa:
6e:6d:cb:2b:00:0e:ea:a0:7e:19:7c:99:e2:dc:c1:
c0:83:00:fa:c2:eb:3e:06:87:29:d4:9f:f0:a3:7e:
bb:12:4d:15:69:54:02:e7:06:20:86:c8:73:c4:a5:
eb:ea:c2:84:70:bf:09:33:b5:ad:3d:87:27:0e:fd:
75:65:d6:1a:98:4e:6e:72:d4:c0:3f:95:19:7e:f6:
3b:48:28:50:d3:d4:d2:d6:9c:4d:8c:6d:3c:d8:86:
30:08:66:ec:1c:9e:ea:a5:17:46:54:70:ff:3f:92:
f4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:45:4C:F1:B3:7F:69:BE:05:42:1E:8F:AA:FF:F8:41:C8:FB:CE:C2
X509v3 Authority Key Identifier:
keyid:F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:36:cf:45:70:ac:ce:91:0d:7d:1c:74:92:88:65:84:11:d1:
29:97:72:3f:a1:af:cc:51:2c:e2:4e:6a:14:d4:d5:57:16:86:
21:2c:4c:6b:3e:51:02:9c:2f:f8:75:90:8a:36:c7:5d:1c:56:
53:28:31:b6:e7:1a:5d:93:64:e5:ac:2d:83:20:15:7e:6e:b3:
03:d1:4e:44:d0:23:b7:31:7b:a4:a2:a9:41:0d:9d:8b:bf:f0:
28:20:b4:56:25:7a:f6:f5:e5:85:af:88:d2:af:38:95:c3:a0:
44:f6:8d:de:90:b6:45:06:c1:ee:7d:68:7a:17:68:95:b5:44:
c5:cb:a6:3c:1a:31:85:b5:33:0b:ef:5e:03:0b:f0:f3:d8:c8:
60:0a:fc:18:91:84:c6:e6:c0:39:b1:22:7a:c7:49:95:dd:cd:
b0:c0:11:16:c6:9a:af:db:66:b6:23:55:27:2a:27:cb:1c:29:
39:3d:25:c3:81:88:da:b6:8e:c8:e6:6a:5f:ab:2c:c5:98:a7:
80:73:9e:6d:58:0d:e8:a5:a9:ef:eb:8e:1d:07:46:3c:7a:cc:
7d:c7:01:0a:4f:d6:ab:07:45:f2:37:ef:2d:28:20:db:54:a0:
19:4d:dd:2f:28:6e:ff:7d:0c:a0:44:3f:6c:25:7c:b7:5f:36:
da:b1:1b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:21:52 2026 by rpki-client