Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
File: 0ur89N6SC5zmRdbmlt8IqosFUZs.mft (raw, json)
Hash identifier: x2FA3I29HqgKonq08qKvRsdmGV52avTlEbpErTrdIZY=
Subject key identifier: 69:40:70:6C:17:D6:4D:8A:FC:6A:48:F6:18:02:BB:64:78:5F:48:31
Authority key identifier: D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
Certificate issuer: /CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Certificate serial: 019E1D228AE28427C2D83D4338A69C2CF154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
Manifest number: 1607
Signing time: Tue 12 May 2026 17:01:03 +0000
Manifest this update: Tue 12 May 2026 17:01:03 +0000
Manifest next update: Wed 13 May 2026 17:01:03 +0000
Files and hashes: 1: 0ur89N6SC5zmRdbmlt8IqosFUZs.crl (hash: PLzf+CJ7dW2hpANIXrwhuVN76SrnDx5geD6rdV634IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:8a:e2:84:27:c2:d8:3d:43:38:a6:9c:2c:f1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Validity
Not Before: May 12 17:01:03 2026 GMT
Not After : May 13 17:01:03 2026 GMT
Subject: CN=6940706c17d64d8afc6a48f61802bb64785f4831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:69:8e:10:f9:b7:53:4d:20:44:59:c2:0f:
82:bc:a1:74:68:30:ee:c5:20:4b:13:68:d6:97:09:
ae:e9:5c:50:db:86:87:1f:e1:cb:0e:62:53:cf:20:
f6:d5:f0:7a:96:ab:55:d6:a2:8e:fa:56:c9:0d:3e:
c8:ed:a3:2e:61:1c:19:4b:b6:ba:84:82:0f:7d:19:
99:7a:3c:13:96:2e:b3:50:0d:bf:57:87:cd:75:9e:
1d:5d:22:ad:27:00:8d:22:72:18:56:ce:b2:bb:6b:
7b:b7:61:38:52:fb:62:12:b0:d4:c9:89:3e:e6:eb:
c8:e8:d4:77:1f:b4:8b:e1:bc:45:ce:78:21:61:ca:
b7:06:ee:df:cb:a6:32:f3:a4:86:b5:07:91:c1:cb:
35:ad:fc:87:09:87:75:17:cc:60:29:7e:61:0f:08:
cc:18:f0:1b:47:07:05:fc:ae:56:c8:69:2c:b3:f1:
44:45:0e:a6:53:b3:36:08:da:a1:0b:64:93:ad:be:
5f:01:ac:6b:aa:d7:9a:73:05:d1:fe:eb:6b:ca:f1:
29:47:16:7b:69:f6:bd:b3:f9:08:ad:00:51:95:f6:
ce:0c:bc:b5:05:66:63:57:8a:23:a9:33:3a:74:39:
96:29:80:fe:78:8e:99:5b:b8:9f:37:46:e2:27:61:
f1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:40:70:6C:17:D6:4D:8A:FC:6A:48:F6:18:02:BB:64:78:5F:48:31
X509v3 Authority Key Identifier:
keyid:D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e9:0d:80:ef:22:fd:ba:90:8d:2c:7e:be:69:02:88:68:25:
35:66:f4:c6:ac:b6:6e:e7:e5:40:b8:67:1c:2f:01:99:46:d1:
f7:61:96:89:b9:25:93:bb:22:2f:e5:03:d5:f0:27:05:7a:96:
f1:8f:c3:26:c7:47:fe:33:51:b7:17:66:6b:c3:0e:ad:3a:ce:
e7:b9:ec:2b:da:91:9a:63:89:81:1c:e4:c3:33:e0:4b:e6:b6:
d7:af:a7:84:92:60:82:ba:6f:ec:17:14:d0:89:52:4d:25:51:
90:89:8d:53:26:2e:7e:f5:ef:99:26:a9:4e:cf:df:10:e0:54:
eb:e1:94:ac:91:30:39:5e:40:6b:02:ae:d2:11:dd:7d:08:6a:
ed:5e:58:dd:0a:50:7f:05:b5:a2:0d:80:42:d4:1b:ac:f7:3e:
73:d0:e6:f1:ca:99:41:b5:b1:d4:e9:ff:e5:3f:96:4d:48:d2:
c0:b3:40:45:50:98:b7:cc:6a:60:43:a7:d9:e5:fb:3e:55:1a:
3d:f0:be:aa:6f:b6:3b:26:ae:24:52:61:68:7e:5f:75:9e:11:
d7:38:75:9b:eb:3b:30:a7:15:02:61:f2:42:e4:4e:95:8d:36:
b3:0f:2d:95:ef:7f:0d:49:52:09:7a:f4:97:27:1d:71:96:36:
cb:fd:4f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:08:53 2026 by rpki-client