Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
File: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft (raw, json)
Hash identifier: y3YhEvdbQt10ja0Wid0vgDvcMLmBKL8MSP46voqSr1Y=
Subject key identifier: 2F:AE:55:D1:47:72:47:85:EA:A3:14:27:CE:FE:4E:33:B3:CE:E7:52
Authority key identifier: F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB
Certificate issuer: /CN=f91084f454139347933876d52634b41a1dd099db
Certificate serial: 019E1D903FE8E295B36915071BEBDB46300A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
Manifest number: 1301
Signing time: Tue 12 May 2026 19:00:53 +0000
Manifest this update: Tue 12 May 2026 19:00:53 +0000
Manifest next update: Wed 13 May 2026 19:00:53 +0000
Files and hashes: 1: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl (hash: QBYhYYpGyNyeQ/tWVdMQRqYfZVDVaq+gg78qOb5wC0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:3f:e8:e2:95:b3:69:15:07:1b:eb:db:46:30:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91084f454139347933876d52634b41a1dd099db
Validity
Not Before: May 12 19:00:53 2026 GMT
Not After : May 13 19:00:53 2026 GMT
Subject: CN=2fae55d147724785eaa31427cefe4e33b3cee752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:b6:4d:f9:15:bf:04:34:11:7f:96:93:f6:
20:06:bf:03:77:84:d6:21:5d:4c:47:32:9a:e9:53:
fb:6c:49:74:5d:44:29:bc:0b:0e:c9:95:21:e4:04:
8e:be:e0:82:39:49:33:20:5e:17:88:de:98:d8:de:
38:9e:b2:b5:ff:20:31:75:fe:c2:fe:5b:fc:eb:df:
5a:d8:3c:80:0e:2d:63:ed:04:f1:4a:f9:b4:15:3d:
ea:5b:80:91:a0:e4:94:96:fe:c6:22:1a:fc:c3:a9:
a2:9d:19:dc:2b:48:ff:84:ce:89:6e:2d:90:85:c5:
9e:5b:82:4c:94:2c:0e:28:8b:19:5f:c3:77:c3:39:
bc:2d:f3:06:56:a8:c6:93:71:1b:0b:65:7c:f8:e7:
da:24:11:ae:5e:a2:ea:1f:7d:6a:c5:c5:0f:7a:0f:
4b:31:36:f8:99:77:11:85:56:71:66:5a:16:21:24:
41:f1:98:5f:2f:39:c9:3c:82:29:1f:17:55:13:68:
5e:be:f9:61:bc:a1:aa:70:45:c0:ff:5a:53:aa:b2:
d2:e2:5e:46:34:e1:0a:77:74:73:f2:30:b8:13:76:
e4:df:7f:36:0a:49:3d:4e:a4:fd:41:23:85:7b:0d:
6a:0a:de:da:b5:ee:9e:ad:1d:b2:6b:1b:50:bd:82:
77:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AE:55:D1:47:72:47:85:EA:A3:14:27:CE:FE:4E:33:B3:CE:E7:52
X509v3 Authority Key Identifier:
keyid:F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a9:14:aa:1e:a3:e6:1a:ae:8b:7c:7a:5b:72:1a:44:a0:a5:
14:c9:45:e8:cb:ad:e2:6c:05:5b:b6:c9:cc:da:16:e6:4b:4f:
3d:7c:ad:81:72:94:ee:2e:a1:c7:a0:d8:50:58:47:93:a5:96:
6e:4a:04:c3:f5:8b:63:91:75:c3:43:31:19:a1:7b:b0:34:bb:
a0:14:74:aa:e5:df:3d:c5:60:bd:93:0a:26:34:76:68:b2:ba:
e8:5f:79:71:29:3d:17:fb:80:7c:da:ee:dc:03:18:8c:1f:8b:
35:a8:f0:b0:12:a9:76:27:58:8a:e2:05:91:00:80:bb:d0:ef:
89:49:cc:60:8c:f2:7e:d1:40:a3:0e:53:2d:83:78:4c:32:82:
b7:35:38:e7:0c:51:67:2b:24:c1:65:6b:4d:ff:12:e1:a4:21:
44:c0:40:0c:21:ab:3d:17:6a:8b:48:45:e5:f8:2b:73:06:da:
fb:67:b1:09:de:3c:4f:27:f1:a3:7f:64:9f:14:30:04:10:36:
c6:29:24:60:44:0b:22:6d:bf:48:9a:ca:44:14:4f:20:c3:b1:
9d:40:fe:56:bf:61:66:5a:1c:0b:1c:fb:67:75:32:2f:de:9e:
af:a6:8d:0e:df:45:de:34:8c:ff:d1:57:4c:b4:dd:49:f3:b6:
14:d5:af:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:26 2026 by rpki-client