Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
File: 1-cEFknmJ7EHAiQOtjNVqidrovl0.mft (raw, json)
Hash identifier: LHVCYkKgJ/N6xx+ZT4zXTb+deYzkKD29wslT8ZwLP/w=
Subject key identifier: 97:AB:4C:CC:89:D9:D7:A0:C3:57:D4:2B:42:00:F5:DD:FB:68:7A:61
Authority key identifier: F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
Certificate issuer: /CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Certificate serial: 01A0E6D295074178AEA2A601EBB3E8402214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
Manifest number: 1A74
Signing time: Mon 28 Sep 2026 07:02:35 +0000
Manifest this update: Mon 28 Sep 2026 07:02:35 +0000
Manifest next update: Tue 29 Sep 2026 07:02:35 +0000
Files and hashes: 1: 1-cEFknmJ7EHAiQOtjNVqidrovl0.crl (hash: kPTapwWGVSmseDV6aFqaGsB7ocPW+llXFJOIdAX0T9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 07:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:d2:95:07:41:78:ae:a2:a6:01:eb:b3:e8:40:22:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Validity
Not Before: Sep 28 07:02:35 2026 GMT
Not After : Sep 29 07:02:35 2026 GMT
Subject: CN=97ab4ccc89d9d7a0c357d42b4200f5ddfb687a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:eb:14:0f:72:7c:cf:e5:76:8d:42:c1:b8:
be:ca:bd:3e:03:b6:5d:a6:e6:91:33:13:c7:9f:9a:
b8:63:ae:09:3e:db:1e:0d:43:22:df:e6:83:42:1a:
d8:21:91:84:4d:23:b6:90:e4:0b:5a:db:a4:17:f0:
f6:6a:55:37:c1:8b:a0:a6:4e:78:df:6e:6b:78:5d:
13:7d:63:23:b6:09:a2:5e:6f:01:e6:95:06:67:23:
ce:7d:20:91:57:04:4c:a1:76:6b:05:ad:92:20:f3:
16:6a:aa:7f:43:0f:05:71:0c:33:e2:9f:1c:87:e1:
02:3c:6d:d4:aa:82:77:83:d1:52:1f:2b:76:b1:5f:
8b:36:d3:67:6b:43:86:f1:4f:14:4d:fd:bf:e5:1b:
3c:88:7e:78:85:b7:3e:02:e4:2f:d0:48:d1:79:a6:
3d:2b:64:30:57:da:ba:a1:61:c0:27:46:0f:3a:a5:
2b:18:0e:a2:ba:96:fa:ce:c4:7a:e4:34:a8:5b:29:
9c:f6:fc:14:3e:ac:fb:f9:84:df:3c:e8:7b:44:38:
7f:54:79:6b:57:88:d8:69:48:38:80:6a:24:d7:29:
e8:f4:86:83:a5:aa:86:c2:b3:b4:7b:19:d9:31:1c:
5f:5b:eb:f0:bf:90:ff:ff:2c:83:3e:f4:1a:00:ec:
84:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AB:4C:CC:89:D9:D7:A0:C3:57:D4:2B:42:00:F5:DD:FB:68:7A:61
X509v3 Authority Key Identifier:
keyid:F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f9:d3:9d:de:5b:cc:65:59:de:65:64:84:54:64:e4:14:ea:
3a:b1:0e:96:04:9f:53:59:0e:f6:5a:1b:23:a1:94:59:5f:c6:
54:66:c4:a8:5e:0b:cb:f3:96:6e:c6:e9:fb:cd:d9:dd:97:69:
61:d9:a9:d7:c9:30:d2:74:fa:26:6a:15:77:1b:92:6e:68:06:
f8:43:66:aa:d6:44:80:5e:97:08:b5:fa:66:29:3c:86:d7:d3:
59:a5:7d:68:cf:44:e5:62:00:7c:47:8a:18:ac:57:0f:64:71:
f9:4d:eb:27:f6:57:5d:1e:b0:87:08:53:98:ce:df:8b:a8:56:
14:19:24:8d:fc:48:50:dd:b7:54:58:71:9d:ed:d4:f9:73:9b:
d1:53:70:6b:6b:a5:85:fb:b4:40:98:2a:1a:f4:1a:1e:6a:6a:
27:1e:f0:64:7c:2b:f2:37:67:db:17:72:c6:2d:aa:56:85:d9:
9b:94:59:d3:1a:10:a6:bd:e2:66:f0:b6:ca:1c:4d:2b:f6:97:
5a:f4:cf:b3:f5:2a:5f:bc:c1:8d:8b:71:1e:2e:ff:6a:b1:09:
5e:19:2b:f8:98:52:d3:d1:3f:f0:68:18:e7:75:70:8e:1f:d3:
e2:16:9c:38:cf:b5:97:79:a9:29:af:d7:bd:bb:e9:8f:aa:ce:
24:9e:4d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:12:48 2026 by rpki-client