Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
File: 46GMDHrbmEtfd5d-CAComlHvu2M.mft (raw, json)
Hash identifier: Bd5O0JRWNRFHNNUaB2BDTuvMYsBj0lJRopVGNmq2+xY=
Subject key identifier: 65:3C:A1:CB:0A:C4:DE:90:FA:01:41:DB:87:36:F9:A1:1B:BB:67:0E
Authority key identifier: E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63
Certificate issuer: /CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63
Certificate serial: 019E1CEBD47E07BFFD73ECCA916819C1D251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
Manifest number: 09F1
Signing time: Tue 12 May 2026 16:01:17 +0000
Manifest this update: Tue 12 May 2026 16:01:17 +0000
Manifest next update: Wed 13 May 2026 16:01:17 +0000
Files and hashes: 1: 46GMDHrbmEtfd5d-CAComlHvu2M.crl (hash: jbsUydbHVsAARoHaz6PL+Xw6NRoKKivkO36G4+ufe6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:d4:7e:07:bf:fd:73:ec:ca:91:68:19:c1:d2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63
Validity
Not Before: May 12 16:01:17 2026 GMT
Not After : May 13 16:01:17 2026 GMT
Subject: CN=653ca1cb0ac4de90fa0141db8736f9a11bbb670e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:5c:a7:b7:2a:7e:35:81:7d:c2:7e:8f:f2:
dc:66:a1:f3:32:37:47:9e:a8:53:a8:49:b4:1e:94:
9c:f2:80:a4:11:0a:59:4d:66:fe:a5:cf:32:fb:a1:
10:43:c1:d1:fd:30:ec:32:88:dc:34:e5:5f:01:0f:
4d:8b:64:08:c4:38:2d:59:5a:fe:ba:c2:e4:e8:9d:
7e:3a:82:ae:44:a5:7d:a0:c2:af:c2:ab:1c:62:9b:
6e:bd:da:0e:64:a7:2e:37:4e:cf:b0:b9:5f:7b:49:
07:a8:19:98:d7:ca:98:5f:dc:5f:69:6f:5d:39:da:
c4:b2:ba:b3:37:eb:7e:16:95:7c:30:45:f4:64:f5:
df:2e:e7:91:13:11:82:7d:1a:50:2b:c0:d2:f0:3c:
8b:81:78:78:8d:49:72:5f:2f:c2:23:46:3f:b0:9b:
8c:34:bb:07:fd:a2:06:be:f1:e0:e3:66:52:a3:d2:
87:16:f7:61:24:e5:a0:e6:75:3a:5e:3f:69:10:ad:
3f:e7:5f:ee:bd:f5:6c:0d:46:80:a7:ec:5e:af:15:
e1:93:dd:dd:60:ae:40:3a:a8:9b:88:0a:5d:22:1c:
b4:84:14:69:f6:ae:9f:31:32:37:6d:87:c0:dd:aa:
d0:73:90:df:93:74:69:92:70:f3:9a:8b:19:7a:fa:
cc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3C:A1:CB:0A:C4:DE:90:FA:01:41:DB:87:36:F9:A1:1B:BB:67:0E
X509v3 Authority Key Identifier:
keyid:E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:6c:14:e0:1d:52:ed:60:44:b2:1b:6b:5a:f6:86:6b:1f:0a:
1a:c6:5f:86:d8:3c:c1:fc:48:55:95:4f:4c:87:a2:c2:9f:8a:
54:78:45:91:b3:71:83:60:77:8a:af:0c:9b:77:fd:4a:35:71:
7e:72:27:41:40:10:30:10:a0:0e:d8:16:9e:28:4e:2b:5e:e0:
d0:15:44:a8:37:e7:56:e9:74:56:3e:c6:4c:68:3d:1b:95:32:
97:8d:c0:0d:ab:6c:36:02:60:ed:88:8d:6f:f9:dd:f1:12:b5:
f6:ed:fe:cf:24:34:7e:dc:19:04:7e:f1:52:d4:b0:f5:6d:74:
cc:e3:98:a0:e7:bb:b2:cf:32:de:89:40:a9:b0:ab:25:b1:0b:
75:90:61:f9:f5:1b:df:e1:5c:80:77:0a:4b:88:73:94:71:a9:
a1:e9:fa:7b:b0:8d:97:3b:57:46:9a:e9:5c:06:1d:72:07:ed:
2b:90:0e:3c:d2:5b:2c:6a:35:85:c7:96:09:6d:56:6b:a1:49:
d2:a8:eb:ac:43:9f:f4:27:59:f4:6b:d8:08:61:de:4e:ed:c8:
69:8f:d8:9e:07:bb:39:51:2f:7d:dc:8f:02:be:be:03:7c:12:
b8:13:b2:87:27:5f:4f:15:bd:af:66:ed:34:d9:cd:11:f1:8d:
8b:3d:d3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:25:54 2026 by rpki-client