Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
File: 15WKlFA6cEIXSd7wXv5joxfRisI.mft (raw, json)
Hash identifier: 7pe7r6ij3N+Pr9rCh+cHW2RZqBUjWCR7/nH7Fm38CkM=
Subject key identifier: B1:43:E3:4F:EF:41:15:57:CE:06:BC:DE:3A:FF:A5:81:57:9D:7C:EB
Authority key identifier: D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
Certificate issuer: /CN=d7958a94503a70421749def05efe63a317d18ac2
Certificate serial: 019E1D229D180D982D80B7CB647D04E60163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
Manifest number: 0A14
Signing time: Tue 12 May 2026 17:01:08 +0000
Manifest this update: Tue 12 May 2026 17:01:08 +0000
Manifest next update: Wed 13 May 2026 17:01:08 +0000
Files and hashes: 1: 15WKlFA6cEIXSd7wXv5joxfRisI.crl (hash: VsNU0fHY6JiEwfqty2ojMNW5ZW37Ep2emzFm8pb+1zM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:9d:18:0d:98:2d:80:b7:cb:64:7d:04:e6:01:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7958a94503a70421749def05efe63a317d18ac2
Validity
Not Before: May 12 17:01:08 2026 GMT
Not After : May 13 17:01:08 2026 GMT
Subject: CN=b143e34fef411557ce06bcde3affa581579d7ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cc:75:b8:1e:57:d0:93:68:0c:11:7d:af:b3:
58:57:42:57:0b:53:3d:66:59:bb:bd:93:0c:55:8e:
c6:2f:44:f8:68:52:e6:84:5d:29:a2:a3:92:94:9e:
64:fb:ea:4f:c2:3e:86:0f:34:46:03:33:dd:d4:d4:
36:10:34:d5:dd:88:c5:23:ce:7b:4c:84:e6:89:80:
bd:2a:08:87:bc:11:cb:48:59:53:b9:cd:a9:9a:76:
d0:3b:16:27:88:0c:5d:0a:fd:91:ec:2c:71:e6:04:
ad:27:2b:87:35:06:cf:68:2c:31:72:05:ce:48:90:
41:1a:46:51:ae:65:df:23:b6:33:78:51:7f:62:7c:
d7:f8:c7:ae:d6:c3:85:8d:86:c1:0d:d4:41:f8:f8:
5b:4d:32:9b:45:6c:8a:89:b4:3d:41:1f:a3:58:20:
f6:b6:7d:10:07:eb:20:b8:66:b6:0f:a5:e5:55:52:
50:38:46:c8:2b:6c:e3:1b:fc:42:5d:9e:c6:49:ab:
f9:aa:9c:56:52:0e:17:b3:a5:29:82:d7:05:26:0d:
a1:7d:56:3c:85:92:e0:48:2a:71:e4:c3:55:42:ac:
47:c3:57:22:d3:c0:24:2e:91:34:c3:ad:de:1e:a1:
d1:16:0a:80:a9:9c:0a:6a:e9:b9:e7:2f:e8:08:16:
b0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:43:E3:4F:EF:41:15:57:CE:06:BC:DE:3A:FF:A5:81:57:9D:7C:EB
X509v3 Authority Key Identifier:
keyid:D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a4:ad:fb:5f:0b:9c:c8:2a:f2:7d:2e:a5:a7:cc:11:9c:97:
84:be:fe:e2:1a:cd:4d:8b:09:a5:39:fb:93:20:c6:77:b9:a4:
e9:a2:68:2a:61:d7:2d:5e:7b:3e:e6:90:e8:5f:93:0d:46:08:
9c:11:2e:4c:de:65:4d:3c:b4:a5:90:6a:5e:f3:79:a3:1e:d4:
4b:80:8b:40:a4:bb:79:74:11:83:39:c9:72:d1:77:d4:fe:ff:
95:49:f8:73:41:dc:af:f2:26:6e:9f:a6:4b:fe:83:82:86:20:
70:2b:df:c2:80:af:85:54:02:92:77:03:b5:7a:a1:10:20:45:
f0:0d:68:6d:da:d8:fc:a6:f5:3b:99:0b:03:52:da:d1:a4:19:
e7:01:82:b7:a8:5c:a4:6b:48:bb:10:5c:f1:8d:5a:d1:b3:22:
79:81:a2:64:0c:14:ed:df:10:34:f4:4b:46:8a:f7:d8:cd:7b:
7b:f4:c5:b3:33:4e:51:94:e6:65:e9:2f:d8:fa:02:af:7a:0e:
25:8a:3f:84:e5:ac:ec:4e:df:76:50:20:f4:2e:cf:a0:54:0b:
ab:2c:36:3c:98:35:1c:0f:e5:e8:43:b5:7b:7b:fd:eb:10:73:
08:48:12:a6:c7:0d:23:b3:df:53:1f:56:1f:01:63:37:4e:f0:
af:e6:3a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:44:22 2026 by rpki-client