Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
File: 1-cEFknmJ7EHAiQOtjNVqidrovl0.mft (raw, json)
Hash identifier: 4EEaotVPXCtObfYojwb1hajaGyGUsDSHiT1M3ZhnGuA=
Subject key identifier: A3:2F:1E:04:EE:99:69:79:29:CB:6C:44:35:3E:D9:4F:DE:14:86:06
Authority key identifier: F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
Certificate issuer: /CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Certificate serial: 019F92ECC3B479597512BD4CE355F6C86013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
Manifest number: 19C4
Signing time: Fri 24 Jul 2026 07:00:17 +0000
Manifest this update: Fri 24 Jul 2026 07:00:17 +0000
Manifest next update: Sat 25 Jul 2026 07:00:17 +0000
Files and hashes: 1: 1-cEFknmJ7EHAiQOtjNVqidrovl0.crl (hash: bl5HnY0UMKdm5LNk/Z8KS5jC7FO4KXkH+wSEjNKzeWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:c3:b4:79:59:75:12:bd:4c:e3:55:f6:c8:60:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Validity
Not Before: Jul 24 07:00:17 2026 GMT
Not After : Jul 25 07:00:17 2026 GMT
Subject: CN=a32f1e04ee99697929cb6c44353ed94fde148606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:7f:50:53:f9:89:37:e5:5d:fd:4a:f3:21:
71:f7:45:7c:f5:a0:98:ef:f2:87:a7:d6:a6:4c:62:
46:99:ce:6b:8d:ce:05:24:c3:65:b9:0c:af:07:c8:
2c:7b:ae:e5:21:b9:ea:62:6f:79:01:1f:a2:43:12:
b1:d8:03:55:cb:c5:b2:34:80:76:73:28:ca:1c:20:
53:fb:6d:33:fe:e4:21:56:3c:95:f8:f4:14:b3:a8:
55:7a:96:21:16:2b:c5:6b:bc:f4:e1:13:ce:68:8b:
eb:13:9f:ae:ad:c3:1c:8e:cd:5d:f6:ba:a6:8a:43:
04:0f:ee:76:41:08:c8:0e:d2:e4:54:d5:de:69:0d:
55:f6:6d:ef:0e:60:74:18:11:6a:06:5e:e2:ae:cb:
5c:40:e2:22:81:35:60:75:17:eb:4a:e5:52:97:fd:
47:78:bb:5d:52:b1:d4:ef:b5:6f:e7:3b:db:cd:0c:
04:10:d7:73:63:1f:e4:18:cf:23:f1:a0:1f:17:8f:
68:9d:80:db:8b:b2:a4:74:17:1e:8c:69:c4:96:95:
b5:29:46:9c:48:f2:aa:6c:dd:ac:cc:40:a4:6e:12:
65:53:2c:45:84:e5:d8:e9:0e:bc:d7:b4:24:df:49:
10:d3:96:ee:e1:f6:1a:89:df:02:b5:17:0f:97:b0:
66:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2F:1E:04:EE:99:69:79:29:CB:6C:44:35:3E:D9:4F:DE:14:86:06
X509v3 Authority Key Identifier:
keyid:F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ed:3b:81:58:84:59:40:eb:6e:da:53:cd:6b:fe:8b:c7:43:
06:8f:a3:f2:c6:3d:eb:16:ac:8a:9b:2c:bc:28:d6:5d:14:04:
c4:18:91:32:29:c3:4d:de:df:e5:f4:3d:7b:a9:5a:8d:6a:3e:
8b:06:3c:a7:a8:b8:ad:2f:5b:d5:7c:ff:59:47:2b:c5:da:df:
d6:3b:8b:d3:04:2c:97:69:2c:59:4f:b1:18:ee:99:21:02:86:
74:b0:f2:71:be:46:d7:bf:48:76:3b:c2:f0:6a:44:34:ac:8e:
8a:3d:b9:83:7d:b2:8c:2a:e0:db:66:b1:0a:20:b9:3b:87:b3:
fe:b5:30:1e:b6:ac:0a:02:6e:10:c5:5f:1b:18:17:37:bf:42:
70:0b:68:68:d6:9c:81:d6:64:3f:53:3b:f2:1f:46:6b:cd:cc:
63:46:52:51:fb:ad:63:13:50:39:51:28:0b:c6:0a:61:4f:f6:
ce:ca:b6:bb:d3:61:58:aa:40:d1:9b:b9:2c:68:d1:10:c6:96:
fb:ab:88:45:c2:2e:06:be:f5:a1:7f:c2:15:09:02:e3:fd:4b:
e6:37:dc:52:36:33:68:d4:e0:18:07:d7:f9:58:4b:7c:43:77:
96:ca:a8:73:68:59:a6:5d:aa:3c:ff:87:50:e4:ec:4b:5b:84:
6f:09:bd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:28:55 2026 by rpki-client