Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
File: 65fOljUzDxRxFMZG72qTR9aJFjs.mft (raw, json)
Hash identifier: wob84DMKH/2+CD5Bodlf64cUvA8wVJREeH51xyOm9a0=
Subject key identifier: CA:AA:03:58:7C:96:E5:4E:16:9C:05:66:4A:CA:6B:6A:D1:2A:F7:A2
Authority key identifier: EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
Certificate issuer: /CN=eb97ce9635330f147114c646ef6a9347d689163b
Certificate serial: 019E1D2233F1FCDAF7ADF7935E003CBBF220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
Manifest number: 1894
Signing time: Tue 12 May 2026 17:00:41 +0000
Manifest this update: Tue 12 May 2026 17:00:41 +0000
Manifest next update: Wed 13 May 2026 17:00:41 +0000
Files and hashes: 1: 65fOljUzDxRxFMZG72qTR9aJFjs.crl (hash: sgQFTlsSB95fej5cIAHzhNY+jhfc/WhwKNLZTo4FWCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:33:f1:fc:da:f7:ad:f7:93:5e:00:3c:bb:f2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb97ce9635330f147114c646ef6a9347d689163b
Validity
Not Before: May 12 17:00:41 2026 GMT
Not After : May 13 17:00:41 2026 GMT
Subject: CN=caaa03587c96e54e169c05664aca6b6ad12af7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:39:f2:28:09:b4:90:f5:18:c3:5e:d1:26:
22:d5:87:86:ad:db:1d:54:8b:8b:9a:02:db:dc:2b:
c7:4d:f8:30:08:85:e8:0c:fd:9c:37:2c:b0:ad:83:
cb:70:b6:dd:7f:51:eb:be:08:53:a4:b9:ea:fb:38:
78:c5:14:7e:25:ba:d4:cf:8a:51:73:f2:8b:61:37:
10:55:01:6b:07:35:ab:cc:67:3f:f1:a5:04:0d:bb:
b4:ff:57:66:a5:b7:dc:1f:5a:00:81:bf:41:a7:13:
2a:dc:d6:c2:6e:45:97:76:0a:54:e9:70:49:4d:b5:
b7:b9:72:7b:f4:eb:c7:fe:4e:ee:f8:09:db:8c:fd:
2f:78:67:7a:3f:3e:63:1e:11:c1:f4:5e:41:58:99:
2f:cf:7e:e0:da:f0:34:4f:93:ba:48:b2:eb:a0:76:
1a:c3:89:11:be:73:53:fb:dc:1a:89:64:18:e7:85:
aa:20:3d:c7:fd:c0:69:ef:3e:9c:eb:98:6d:47:60:
9e:21:52:54:f9:60:b0:f0:3c:f4:c2:8b:b6:c9:56:
07:ad:6e:00:d7:3f:df:86:9e:58:ce:ec:04:71:7b:
f5:54:91:e1:97:80:a2:19:91:e1:28:2e:14:8f:cc:
ba:d3:e0:22:e4:98:20:14:5a:1f:ac:ae:ff:27:d8:
f6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AA:03:58:7C:96:E5:4E:16:9C:05:66:4A:CA:6B:6A:D1:2A:F7:A2
X509v3 Authority Key Identifier:
keyid:EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:69:55:ba:c4:84:ef:0b:9b:cb:a3:69:cc:14:1d:a7:75:5b:
91:df:cd:ee:1e:2c:8c:91:40:24:f5:10:fb:04:0f:6e:ba:5a:
88:ca:b4:27:f7:7f:5d:cf:23:0f:7c:af:6f:a1:00:6e:05:1d:
01:18:dc:9d:e4:16:2f:f9:4c:f4:d2:30:48:aa:95:8b:2b:87:
26:7f:6d:fb:2a:a2:54:f8:2a:96:b0:d6:66:b3:8a:fc:f6:82:
d0:2a:b9:62:d6:1d:2e:24:96:2a:f9:ca:87:86:f8:95:0f:9b:
2f:2f:b0:c1:c9:a6:cf:a0:f8:0b:4c:56:28:7f:f4:eb:d2:39:
3d:61:b2:ee:36:82:7d:9c:83:51:84:a5:ad:5f:88:ff:d1:79:
2f:ab:51:43:a2:ea:95:28:cc:78:4d:88:1a:a0:77:7f:b8:7b:
62:0d:05:05:fa:35:08:19:c4:b8:85:ab:04:24:33:b8:81:cd:
82:f6:24:a7:c7:32:6a:02:a2:27:ea:5b:5a:5d:67:52:d6:e9:
e1:a9:88:22:2a:9c:c9:10:13:05:6d:a2:15:08:f1:cf:e3:0d:
c9:65:ef:90:f6:fb:48:2b:3f:61:01:d4:13:79:79:32:a6:3c:
a9:72:11:69:3c:bc:a2:9e:7a:e2:d7:5a:2b:fb:9d:ba:be:39:
3f:de:fb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:07 2026 by rpki-client