Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
File: 1-99pi190ocbR4AmLIlGb3FgwBVo.mft (raw, json)
Hash identifier: 7s40fXMTIQduDMzA3GKKiSxt9yQ+28re7fCKwN0bLz4=
Subject key identifier: DE:8B:31:04:C7:88:D5:86:F2:D0:48:CA:F7:9C:C5:1C:D0:60:50:39
Authority key identifier: FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A
Certificate issuer: /CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
Certificate serial: 019E1E6C3AC0623D5C497E7BEB94B846A549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
Manifest number: 0D17
Signing time: Tue 12 May 2026 23:01:09 +0000
Manifest this update: Tue 12 May 2026 23:01:09 +0000
Manifest next update: Wed 13 May 2026 23:01:09 +0000
Files and hashes: 1: 1-99pi190ocbR4AmLIlGb3FgwBVo.crl (hash: 25Kn8DEvNUcdu7gDnJpj4ldVM6rorflxX7fQz0kCQlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:3a:c0:62:3d:5c:49:7e:7b:eb:94:b8:46:a5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
Validity
Not Before: May 12 23:01:09 2026 GMT
Not After : May 13 23:01:09 2026 GMT
Subject: CN=de8b3104c788d586f2d048caf79cc51cd0605039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:22:ab:4b:e5:e1:65:26:9d:7e:f7:b3:07:
55:90:78:f8:cf:ca:91:28:04:69:fd:ff:de:73:54:
c5:63:d5:95:bd:e4:0b:9e:32:d3:53:a9:93:d0:ab:
9a:1a:ba:bb:f7:f2:c1:71:45:94:86:17:0b:7c:75:
79:68:e9:9e:7b:6b:29:9d:44:d1:1c:ff:ba:73:93:
eb:55:8c:e3:e6:64:d7:42:24:7d:9c:07:4d:1d:d0:
c1:2f:1b:28:fb:eb:8b:4b:9d:a6:98:bb:3b:8d:5d:
58:8d:cc:c6:9c:13:ee:e2:6c:25:8c:2e:1a:c7:2a:
e9:10:8f:b7:04:b7:d0:51:0e:1d:6c:f6:d6:15:97:
9a:37:4a:37:2c:05:d5:aa:c2:db:9f:47:76:dd:53:
b2:c4:9d:8f:65:84:6d:64:3e:10:e3:10:c6:29:69:
dd:01:19:d4:0b:cb:b9:43:c5:dd:c2:48:f1:b6:57:
fd:77:ab:09:9b:01:c2:81:a7:86:53:ce:56:e7:f6:
e5:c9:35:02:0b:99:9f:97:f3:17:fe:3d:3c:d5:e3:
a4:1c:46:77:ac:0f:1d:70:be:ac:7f:b2:c9:0c:4f:
c1:cc:7d:6b:75:da:7b:6d:6c:4b:29:dc:e3:d8:eb:
c9:46:32:79:aa:dd:5c:da:7c:52:48:06:c0:1c:56:
24:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8B:31:04:C7:88:D5:86:F2:D0:48:CA:F7:9C:C5:1C:D0:60:50:39
X509v3 Authority Key Identifier:
keyid:FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:42:fb:b3:df:e9:b5:be:e3:c6:fb:b5:5d:90:8c:8f:6f:a1:
4c:23:5d:a6:47:d3:ca:5b:c0:27:cd:77:ae:f5:41:fc:de:61:
db:01:07:02:f0:7a:12:73:a1:5f:f7:21:37:ee:b3:8e:e9:26:
7f:c7:73:49:cf:ee:90:ad:52:5b:40:42:67:7a:b3:40:e2:65:
72:e6:68:75:59:51:3e:79:fd:d1:0a:cf:dc:9f:e4:54:fb:f2:
93:50:33:af:38:01:30:03:c3:5f:2d:bd:e2:26:df:58:1d:5e:
89:20:48:65:c7:8b:3b:51:ad:6e:1b:52:8d:0b:9d:55:e3:b9:
cd:c3:93:3a:78:92:7c:5a:50:bc:75:93:97:96:92:8c:96:6e:
58:65:7d:cb:d2:ca:b3:56:d7:37:42:e9:13:28:0a:13:f3:65:
2e:af:52:3f:c3:83:e0:96:e8:3a:88:1d:ae:f8:42:44:b1:1e:
fb:a8:93:39:e0:de:99:da:e9:23:27:8d:a9:72:10:24:ad:d6:
54:de:80:9f:46:7a:f1:cd:16:d0:a3:dd:c1:c1:f4:8d:b5:fd:
42:6e:3d:00:dd:06:2f:b3:0c:77:c5:d7:58:e4:d1:68:8a:f2:
0d:3d:b2:1f:b1:fc:91:f7:dc:a7:a2:df:a6:45:51:1a:65:93:
be:1b:3b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:13:49 2026 by rpki-client