Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
File: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft (raw, json)
Hash identifier: 9F1pkygJ27gz4ZMoyplT4/WgcK+LygcCzvMchCKZPx4=
Subject key identifier: CA:F2:8F:7F:6E:DB:AB:1E:DF:D8:C5:B0:63:8A:76:A5:F1:84:FE:F2
Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
Certificate issuer: /CN=f4272ac0423fb097583c6872567d84cae410c89b
Certificate serial: 019E1D22E65426A2E772EEF47B499A70E8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
Manifest number: 0C1C
Signing time: Tue 12 May 2026 17:01:26 +0000
Manifest this update: Tue 12 May 2026 17:01:26 +0000
Manifest next update: Wed 13 May 2026 17:01:26 +0000
Files and hashes: 1: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl (hash: xeQdz5OF/TWbmG5gk54M4F9GHYVIdfInuipnygtzkks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:e6:54:26:a2:e7:72:ee:f4:7b:49:9a:70:e8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b
Validity
Not Before: May 12 17:01:26 2026 GMT
Not After : May 13 17:01:26 2026 GMT
Subject: CN=caf28f7f6edbab1edfd8c5b0638a76a5f184fef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:af:aa:5e:05:e1:0b:18:14:cc:c7:20:3a:b1:
b7:e1:aa:0f:ed:64:2c:7e:b2:8f:d0:d7:ef:1b:30:
77:58:87:43:ba:56:d7:81:33:d8:6a:e6:4b:cc:ab:
fa:48:9f:6b:2d:66:f3:15:27:59:61:dd:27:61:10:
78:7d:ca:99:06:dc:b5:fc:a2:8f:a3:bd:72:7e:a6:
ff:07:37:5a:85:a9:df:3a:60:fa:87:eb:48:26:3d:
2b:f1:cb:60:97:ba:ff:2e:65:1e:9a:f0:53:56:40:
64:41:56:6f:e1:c3:ef:6f:d7:f9:1e:9f:98:bc:8b:
8c:91:ba:ca:ff:4d:8f:b7:ab:99:77:eb:10:70:33:
5d:e3:c8:ea:94:40:c9:4b:f4:62:1a:f2:46:fa:73:
87:39:e8:ff:37:61:45:d4:82:20:31:79:93:f2:39:
95:d3:91:99:a4:5c:9e:df:e6:ab:b7:ab:05:ab:b8:
03:5f:54:ee:8c:c7:19:58:46:97:e9:ee:e4:2a:27:
df:d1:67:de:4b:74:98:74:fc:d6:b7:43:42:97:e4:
20:28:80:59:4b:9a:be:c5:66:71:5d:fe:81:b4:d8:
2f:0b:75:a1:b5:a5:41:3f:73:3e:4a:24:39:9f:90:
48:6a:8c:be:97:c5:0f:11:40:9d:e9:e9:56:8c:cd:
f9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F2:8F:7F:6E:DB:AB:1E:DF:D8:C5:B0:63:8A:76:A5:F1:84:FE:F2
X509v3 Authority Key Identifier:
keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e6:00:f1:17:00:40:88:29:ed:90:bc:72:62:4f:8a:ea:3c:
8a:db:ed:37:c9:86:56:3f:d0:95:c1:39:6d:d6:8d:64:e4:a7:
c3:fa:47:d2:9e:5c:9d:93:4b:00:92:c8:9d:16:90:dc:95:38:
a5:0d:bc:68:12:28:dd:a0:8e:df:60:9e:db:84:3b:ff:47:49:
c8:cd:9e:75:0b:54:cc:85:04:88:e4:1e:63:9b:ff:7a:ea:be:
eb:5a:64:25:20:fa:89:56:df:4b:54:20:f0:05:de:95:5a:86:
7b:5d:01:11:67:f0:2a:3c:c3:36:59:e5:cb:3a:bb:67:65:32:
1e:77:c5:b7:45:8a:b0:b1:80:69:a9:05:9e:c8:ab:08:71:a9:
8f:61:bd:5f:60:55:8a:db:89:cd:39:1d:6f:91:52:64:06:ed:
18:d9:dc:f6:e0:1e:0c:6c:93:a2:19:d5:26:44:1f:a8:71:4c:
74:18:2d:4b:0b:72:35:49:02:66:f3:54:34:34:c6:70:5c:bb:
cd:2e:37:6f:66:76:3d:b3:35:5e:fd:8c:cd:1a:eb:47:8e:09:
d4:09:76:d6:18:cb:5e:e6:86:57:bb:2f:d6:dd:b9:62:b4:99:
1d:8b:ec:fc:35:fd:e2:34:9d:a8:d2:e8:87:b8:96:cb:08:b1:
d3:8c:cd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:37:24 2026 by rpki-client