Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
File: 1-cEFknmJ7EHAiQOtjNVqidrovl0.mft (raw, json)
Hash identifier: ir+EmoS5g2DUL0t2NpFhbfQ0f83VZFktpRKyPS383+0=
Subject key identifier: 55:10:48:C8:69:C8:52:2D:2D:08:B5:A2:F4:E6:8B:B1:9F:0B:36:1E
Authority key identifier: F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
Certificate issuer: /CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Certificate serial: 019D2703C2D12403DF1996D8770F6F8739F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:00:50 +0000
Manifest this update: Wed 25 Mar 2026 22:00:50 +0000
Manifest next update: Thu 26 Mar 2026 22:00:50 +0000
Files and hashes: 1: 1-cEFknmJ7EHAiQOtjNVqidrovl0.crl (hash: 6Nf2iZlcc2yaWu+kXXrPYYtxd6/V9FnfDZpyhSz6PPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:c2:d1:24:03:df:19:96:d8:77:0f:6f:87:39:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Validity
Not Before: Mar 25 22:00:50 2026 GMT
Not After : Mar 26 22:00:50 2026 GMT
Subject: CN=551048c869c8522d2d08b5a2f4e68bb19f0b361e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:d5:a5:5c:4c:45:1e:ad:a6:50:5b:8a:07:
bb:15:78:8b:bc:cb:5a:c3:8f:a9:92:20:ce:3c:b4:
81:f2:f6:0f:f3:29:7d:81:54:d7:28:df:8c:a9:13:
52:71:5c:f1:f5:9f:81:ea:ea:6b:1b:c0:d5:69:df:
0a:9b:67:2f:8a:e5:ae:4c:86:e9:0e:ea:dc:13:6f:
df:90:fb:48:cd:cf:c9:fb:e5:e3:a7:87:09:36:41:
36:a7:0b:d8:1d:05:ef:5f:d4:bf:c5:e1:54:f4:29:
3d:53:81:85:e7:7c:bd:c6:ac:fa:01:e6:08:a7:d8:
e0:db:82:3f:de:7a:5c:c8:5e:12:81:1b:38:02:5a:
f2:36:4b:4c:d3:ac:17:65:14:ec:65:50:4f:d3:f5:
bf:95:32:8a:68:6f:ab:40:a9:4a:bc:fa:7d:31:83:
5e:5a:5e:d7:5d:0b:f6:b2:10:3e:4c:eb:52:b0:10:
fe:46:a9:a9:99:c8:30:09:9f:4e:7b:3f:83:92:74:
06:18:33:9b:ba:3c:98:07:8b:6b:88:15:e6:3d:bc:
0d:87:18:1a:fd:fd:51:6b:5f:6f:d7:a6:29:86:e2:
03:dd:a2:da:be:67:47:a1:2b:ac:43:ff:5f:5e:d0:
5a:cd:fa:19:52:68:09:4c:28:5b:bb:99:65:fd:b2:
9d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:10:48:C8:69:C8:52:2D:2D:08:B5:A2:F4:E6:8B:B1:9F:0B:36:1E
X509v3 Authority Key Identifier:
keyid:F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0b:ad:5e:c8:58:14:cb:ab:34:5f:4d:9f:f1:46:8a:e8:ba:
a5:62:0a:be:e3:5a:dc:84:64:46:40:5d:53:c0:96:00:b3:18:
bf:de:5c:ea:b7:ac:42:04:7b:89:14:1e:af:15:60:45:98:ac:
86:35:1f:dd:14:73:34:98:96:81:ca:3f:61:ad:af:5b:c2:ea:
fe:aa:db:75:24:a0:99:ba:78:77:16:d7:fb:cb:65:8a:df:e6:
d1:34:58:d5:87:28:01:04:c9:41:a2:9f:09:bf:f3:6a:ef:42:
92:96:d9:34:11:dd:88:01:8a:02:9f:35:3d:8a:b7:e8:69:0f:
ef:d1:97:bc:78:cb:3e:a9:5a:12:d6:38:6d:de:22:b7:29:0b:
24:5b:25:1e:4f:65:fc:52:c5:e8:75:f4:b5:27:5a:d2:ec:54:
b6:7a:3f:2e:84:80:45:87:94:74:a2:be:6e:af:53:94:1e:61:
4b:0b:4f:e2:fb:b8:f4:3f:9e:b8:71:dd:ea:6a:36:92:6b:bd:
23:38:97:e7:8b:99:11:4b:f4:94:4d:1b:56:9a:38:db:55:df:
b6:5b:be:d4:9c:2c:46:0e:5c:0a:c7:bd:23:06:6f:cc:7c:b2:
d6:03:fe:2a:d4:5b:d8:da:c1:33:fe:d0:5f:5f:dc:ba:28:8c:
90:00:3b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:56 2026 by rpki-client