Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
File: 65fOljUzDxRxFMZG72qTR9aJFjs.mft (raw, json)
Hash identifier: u0OIfG5woCWDWmcksEA4SvE5Q93bacv2F56WDuGkp/w=
Subject key identifier: DC:21:A9:C9:15:0F:4D:21:8C:78:4F:ED:5F:15:BA:83:2B:ED:D4:91
Authority key identifier: EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
Certificate issuer: /CN=eb97ce9635330f147114c646ef6a9347d689163b
Certificate serial: 01A0CE91E4CA44BDBE6D8EF4D784879FCA56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
Manifest number: 19F9
Signing time: Wed 23 Sep 2026 14:01:02 +0000
Manifest this update: Wed 23 Sep 2026 14:01:02 +0000
Manifest next update: Thu 24 Sep 2026 14:01:02 +0000
Files and hashes: 1: 65fOljUzDxRxFMZG72qTR9aJFjs.crl (hash: aoW4IevOIV+9pV7XpphYq2XZqdAlG++fh4mmZS7T53c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:e4:ca:44:bd:be:6d:8e:f4:d7:84:87:9f:ca:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb97ce9635330f147114c646ef6a9347d689163b
Validity
Not Before: Sep 23 14:01:02 2026 GMT
Not After : Sep 24 14:01:02 2026 GMT
Subject: CN=dc21a9c9150f4d218c784fed5f15ba832bedd491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1b:4e:5b:ce:d2:a5:9e:60:c6:f6:27:46:c8:
c8:ce:35:5d:ef:ef:d3:dd:61:fd:77:3f:0d:ad:2a:
26:56:bd:67:0b:b9:62:ef:61:4c:df:0b:10:e4:08:
c5:5e:d9:4e:bd:c8:87:32:d0:ab:35:a8:d4:16:ee:
23:d8:77:3e:cc:52:57:9d:6f:0f:c5:8d:7b:cc:e5:
b3:31:05:4f:24:18:c8:14:9d:df:0f:f1:3c:dd:c9:
5e:37:e6:16:4c:cd:7f:f4:3a:23:a8:ba:8a:cb:e2:
3b:e8:d7:b1:16:67:db:f5:c0:7a:76:0d:e9:14:5d:
98:7b:52:c4:40:6f:58:e6:8c:59:6a:f1:e5:8a:a8:
23:d3:7b:aa:10:dc:02:67:20:91:64:5e:2b:21:cd:
13:52:33:3c:0f:36:0c:86:2f:64:dd:a8:c2:61:28:
86:a8:21:50:8a:55:d6:f4:3a:bd:81:1e:7d:b2:3c:
9d:24:cf:32:28:8c:31:0a:e1:3a:41:63:c0:4a:76:
fe:cd:54:06:28:ea:b7:18:af:4c:3f:c1:80:7e:4c:
79:13:09:a0:57:05:04:69:f1:cb:3c:d8:f4:4d:93:
fd:b6:ba:82:44:ae:5d:d4:a0:a6:ad:e4:03:df:2b:
64:6d:5a:23:bf:6f:28:a7:bb:99:13:f9:32:09:41:
02:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:21:A9:C9:15:0F:4D:21:8C:78:4F:ED:5F:15:BA:83:2B:ED:D4:91
X509v3 Authority Key Identifier:
keyid:EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0e:cc:0c:ee:0d:13:8e:aa:bb:79:d6:9e:af:28:5a:b0:53:
12:bf:23:4f:ff:2d:fe:d8:48:00:30:f8:8f:20:6f:1c:73:e3:
4c:93:29:16:b0:ef:05:a4:4a:3d:ef:78:95:8c:a8:ff:3c:d7:
7c:2f:1f:eb:6c:8d:5e:73:f8:0c:ff:e0:46:07:d4:31:10:5d:
a4:2e:15:df:4d:4b:9d:fd:63:13:7d:57:de:1c:8d:f8:3f:8b:
2a:ba:ce:1c:09:e1:72:3c:e3:41:13:4e:a5:40:5c:73:c4:7c:
cc:0e:82:6c:9f:4f:eb:b4:65:04:3e:3b:58:3e:89:dd:6d:2e:
26:2f:8a:56:ad:b2:b4:90:e8:f3:22:6e:4c:95:c9:a0:cd:03:
cb:dd:67:3a:5a:fe:b6:33:be:75:5c:d0:58:79:c7:ad:cd:4a:
f9:a9:24:53:13:30:ad:25:65:f7:86:fe:8b:f3:c5:98:47:07:
f2:49:74:84:84:9d:82:dc:c3:64:8d:dd:2f:0e:ce:6e:34:26:
b6:ce:ab:75:42:01:75:33:8a:97:f4:3c:78:07:91:ca:b5:45:
4b:77:d5:0c:0e:46:47:13:0a:f3:b8:a8:ad:20:6e:b0:e1:45:
de:28:2b:73:af:7d:84:ee:90:12:c4:77:65:82:6a:8e:d9:3c:
bc:81:22:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:35:50 2026 by rpki-client