Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
File: C4K9iLuhoX0siu9h3sHaxmFe75A.mft (raw, json)
Hash identifier: qGtPVyFkjAGZ0pUndYcps/H8Ynairc8G3Y1/6pdO4ag=
Subject key identifier: 60:E3:4E:17:53:52:77:8C:F3:05:B7:16:0E:9D:47:7C:A8:24:43:1D
Authority key identifier: 0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90
Certificate issuer: /CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
Certificate serial: 019E1C46912F2DD509A3D7EB8A9FDE9A6043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
Manifest number: 1902
Signing time: Tue 12 May 2026 13:00:47 +0000
Manifest this update: Tue 12 May 2026 13:00:47 +0000
Manifest next update: Wed 13 May 2026 13:00:47 +0000
Files and hashes: 1: C4K9iLuhoX0siu9h3sHaxmFe75A.crl (hash: 9jdzRdGQSivBmRqh2x17vr3PDv4v7RmW7P7sy9q+7K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:91:2f:2d:d5:09:a3:d7:eb:8a:9f:de:9a:60:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
Validity
Not Before: May 12 13:00:47 2026 GMT
Not After : May 13 13:00:47 2026 GMT
Subject: CN=60e34e175352778cf305b7160e9d477ca824431d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c6:2e:34:41:77:42:b2:6f:37:05:20:57:61:
9f:3d:b6:5f:46:04:a6:32:d3:86:f9:a2:26:bd:7e:
83:87:fb:c5:6a:cf:9a:6a:71:e7:7d:8e:f7:b6:9c:
13:4b:0e:7a:9f:41:82:4d:6e:84:2e:d3:cb:2d:60:
8d:74:f2:e7:6a:58:8d:a3:17:a0:d7:2a:41:ea:2f:
0b:d7:d3:67:4a:7e:2f:20:7c:bc:40:7c:50:24:b2:
e5:12:97:0c:13:e0:ee:e9:36:b7:f6:e0:fa:e6:08:
74:47:a9:4f:99:c1:5b:bc:72:c3:17:03:a6:41:89:
f0:ea:1d:62:fe:08:94:49:b8:82:f9:71:7f:bc:2c:
8a:2e:66:4b:56:7b:60:70:11:b9:68:01:a0:df:05:
ea:2b:54:32:80:e8:8b:92:e6:ab:e3:17:a2:3e:21:
8f:ea:95:e0:fc:4a:a0:f6:9c:d6:3a:e8:7c:e7:4d:
09:0f:2b:75:21:c2:3c:86:eb:f8:d9:44:a6:42:31:
08:39:67:cf:e8:cb:30:90:f6:a8:1c:c8:57:2f:6d:
76:0a:f0:a4:fa:45:ec:92:b0:e0:21:a9:f3:9e:08:
7c:25:8d:20:68:1b:1b:f2:3d:49:db:ad:96:58:18:
e1:d9:ca:c0:fa:e4:cf:0e:e5:8f:83:4e:a6:ee:cd:
f7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E3:4E:17:53:52:77:8C:F3:05:B7:16:0E:9D:47:7C:A8:24:43:1D
X509v3 Authority Key Identifier:
keyid:0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:74:8c:12:49:1f:3f:29:d1:ca:17:2a:b5:25:bf:41:44:cf:
29:fe:61:33:a5:ba:b4:77:85:ed:21:3d:33:7d:5a:70:0c:d0:
be:16:af:4b:91:a2:c3:ae:79:16:eb:00:77:d0:7c:2a:eb:0d:
75:6f:d9:43:68:b9:a5:fe:55:1b:79:9e:6c:49:92:7f:02:86:
b0:f9:18:0e:47:24:ed:2a:fd:f7:4b:fb:ec:16:ca:d6:85:9b:
59:a8:4c:6d:39:cd:b8:d7:da:cf:16:54:fd:0a:10:fb:d3:9f:
52:83:2a:cb:08:fd:bc:d3:3b:f2:96:dc:3d:86:a8:96:85:2c:
b4:45:a4:de:90:20:1e:76:76:62:fe:93:ad:4b:b8:4f:b6:66:
9e:d0:4f:95:22:89:2d:18:78:83:16:a6:a9:7e:61:7f:1a:04:
9d:63:6b:e5:ed:f6:d4:63:7e:ca:3e:12:87:18:40:45:aa:88:
5b:31:4e:cf:b9:0a:a7:f2:6e:10:98:27:ab:99:30:16:b9:4b:
56:5d:6b:36:8b:7a:60:8e:35:10:39:92:33:fe:1e:0c:de:38:
12:f1:17:0b:8e:67:c2:b3:20:a4:17:1a:c9:41:87:8e:ef:3e:
d5:8a:5b:0e:90:88:80:78:1b:80:c0:ba:2a:83:9b:f0:48:9c:
f3:59:62:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:19 2026 by rpki-client