Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
File: 1-99pi190ocbR4AmLIlGb3FgwBVo.mft (raw, json)
Hash identifier: sMHywfSG+L3RAMtUGrRkYMD3uusw9+LVBLadMFnxup4=
Subject key identifier: A9:5A:E7:38:19:98:CF:BE:8D:A7:33:5E:9C:96:9E:8B:4B:65:D9:03
Authority key identifier: FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A
Certificate issuer: /CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
Certificate serial: 019F8F4767BAF5D25617CF1F0034D0B07ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
Manifest number: 0DD6
Signing time: Thu 23 Jul 2026 14:00:49 +0000
Manifest this update: Thu 23 Jul 2026 14:00:49 +0000
Manifest next update: Fri 24 Jul 2026 14:00:49 +0000
Files and hashes: 1: 1-99pi190ocbR4AmLIlGb3FgwBVo.crl (hash: zsZ8Z25GFi7BQlA8eiGvXTvP9nWMKpGq18W/w3dfHmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:67:ba:f5:d2:56:17:cf:1f:00:34:d0:b0:7a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
Validity
Not Before: Jul 23 14:00:49 2026 GMT
Not After : Jul 24 14:00:49 2026 GMT
Subject: CN=a95ae7381998cfbe8da7335e9c969e8b4b65d903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:63:cf:ed:71:fd:df:b6:bd:e2:2d:9e:25:7b:
2f:6f:5e:8d:27:a7:9e:af:8f:3d:c5:56:a2:f0:77:
0c:a3:73:f7:7c:82:54:c2:ff:4a:2c:7b:79:27:b2:
3f:7b:51:1c:fe:0e:a5:0d:82:c9:4a:35:65:c7:f6:
fb:ac:95:89:84:fa:8c:71:7f:5f:fd:77:48:57:82:
b7:b2:ec:47:da:b8:44:9d:ec:58:e7:5a:69:3b:7c:
cf:3d:28:3b:6a:83:2b:4f:e2:49:7c:4d:37:20:64:
04:4b:20:61:b2:63:10:c7:e8:d6:68:b8:d0:04:6a:
cc:44:a1:1c:bf:f8:7e:47:73:c4:08:e0:d6:74:b2:
89:02:f8:a7:9a:47:a3:42:12:20:4a:fd:d4:53:86:
ea:18:d9:ec:10:87:56:ce:22:6d:1d:69:11:be:74:
6e:8b:29:1c:26:8d:1e:51:51:27:04:ce:1a:10:da:
7e:59:60:45:ca:ac:d9:4b:d6:6a:9b:ee:b5:4c:a4:
f5:a1:c8:78:1b:fb:df:78:ba:b5:8d:86:df:3d:10:
e5:04:1d:01:28:21:4a:0e:70:92:27:00:99:83:99:
3b:c3:62:9a:a0:d7:8f:5e:01:10:4f:49:1e:2f:40:
4e:4a:ec:be:cf:4c:51:93:e2:81:61:a8:97:18:b4:
49:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5A:E7:38:19:98:CF:BE:8D:A7:33:5E:9C:96:9E:8B:4B:65:D9:03
X509v3 Authority Key Identifier:
keyid:FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:42:67:6f:86:6a:53:5e:db:92:e9:0f:c4:7f:90:a4:b7:ed:
14:d9:ba:69:97:0a:cc:b7:60:80:85:95:97:1d:82:df:4b:07:
ed:5c:23:3f:5a:45:a0:b9:a8:8d:63:52:b4:1e:3d:d3:94:b5:
05:f7:b1:28:6b:26:b4:19:61:ed:9a:f5:d7:49:8d:57:42:30:
69:a4:e6:16:f8:14:1f:c2:0f:73:15:ed:8f:f2:05:0b:f6:59:
c1:d5:1e:e8:82:84:45:b1:fd:3f:b6:2e:fd:80:b7:c1:e5:06:
62:e1:ef:d4:9a:f4:1f:ea:da:3d:8b:3b:ac:ba:44:21:8d:55:
ec:e5:59:44:40:bb:be:d8:64:b1:27:1f:03:69:98:cc:7a:84:
ca:9b:a0:fd:94:88:28:ce:0b:7c:d4:33:51:b4:a0:cd:1a:f5:
87:11:31:62:49:75:19:5a:a8:a1:c7:27:6b:21:8c:a3:48:18:
02:4c:87:37:c5:8b:4b:dc:54:b0:31:0a:d3:8b:72:0c:77:3b:
2f:1e:fe:0a:9a:48:a6:12:7b:3a:b3:d7:78:bf:6c:91:1c:bd:
53:fd:19:8a:d2:a5:7a:66:66:cf:53:ad:24:63:53:b6:89:f6:
b3:7a:80:fb:23:c6:a6:30:a5:e8:3c:89:a9:ee:59:a7:78:0d:
55:c2:b3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:57 2026 by rpki-client