Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
File: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft (raw, json)
Hash identifier: WhqWIwVwOac4opns2bONXmDbtCJGjNOx11lZ/T+Eyiw=
Subject key identifier: EE:57:54:6F:95:D9:FE:FD:76:26:E8:D1:B8:3E:80:B2:A4:99:20:A3
Authority key identifier: F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB
Certificate issuer: /CN=f91084f454139347933876d52634b41a1dd099db
Certificate serial: 01A1CBFC64671D332971C6D95AD44C3C2D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
Manifest number: 14E9
Signing time: Wed 11 Nov 2026 19:01:17 +0000
Manifest this update: Wed 11 Nov 2026 19:01:17 +0000
Manifest next update: Thu 12 Nov 2026 19:01:17 +0000
Files and hashes: 1: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl (hash: 6M0RZVLRu3fncgESlBpWISIH3I4NrnkObHaseXf+xpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:fc:64:67:1d:33:29:71:c6:d9:5a:d4:4c:3c:2d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91084f454139347933876d52634b41a1dd099db
Validity
Not Before: Nov 11 19:01:17 2026 GMT
Not After : Nov 12 19:01:17 2026 GMT
Subject: CN=ee57546f95d9fefd7626e8d1b83e80b2a49920a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a9:0b:91:f5:a2:dc:52:fe:54:41:47:c2:35:
83:38:c9:13:74:c7:e2:08:74:c1:6a:1a:fd:2a:5c:
0a:2e:ca:e3:53:a7:c5:03:f4:7f:bf:09:56:fe:db:
8b:61:5b:d0:16:32:9e:e7:bc:d6:bf:ce:79:af:13:
36:b4:c9:7f:3b:d4:a0:57:7d:3c:7b:5a:19:d6:46:
93:4d:26:a7:f2:3d:b8:7c:c8:63:cb:66:15:39:54:
aa:e6:d8:2e:cf:2c:6a:76:bb:ce:78:a9:b8:c5:f6:
27:fc:ff:9d:ae:8a:41:92:f1:ac:2e:7d:65:b5:a6:
9d:ea:58:09:74:53:3b:64:92:43:78:65:db:06:88:
a6:9c:b1:1f:29:67:3c:7f:ab:d0:94:76:32:d9:74:
b9:d7:52:8f:20:22:69:31:ca:ce:5d:8a:af:11:2b:
91:1b:76:ea:c7:39:a1:ba:80:94:5d:2c:92:30:21:
da:5f:24:b3:ca:2d:2d:be:78:05:82:19:00:2b:39:
2c:ca:bb:19:b0:b5:15:01:ea:c3:12:b4:7d:46:1d:
70:d7:95:26:ce:7b:81:ab:d0:09:ed:27:be:3c:fb:
5c:1f:95:15:c3:16:1f:34:2b:07:93:70:c9:46:40:
c4:6c:cd:5b:c0:13:04:c5:7d:61:f8:b7:1c:bf:aa:
c4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:57:54:6F:95:D9:FE:FD:76:26:E8:D1:B8:3E:80:B2:A4:99:20:A3
X509v3 Authority Key Identifier:
keyid:F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a8:fc:e9:86:f9:94:6e:47:9d:3c:f8:00:b1:da:85:d0:45:
0c:65:67:18:28:16:5c:a5:1c:c4:4b:2a:da:8f:24:03:16:a8:
05:a0:df:03:5a:5f:a8:57:95:d6:a0:7f:dd:eb:60:fd:7c:f6:
1c:33:9f:05:8c:f1:31:31:32:0d:df:85:be:9e:9b:2d:02:7c:
78:fc:23:23:1d:c6:e3:68:bd:20:6c:a2:dc:53:58:88:2e:ab:
30:83:ed:00:d5:43:52:17:0e:7a:ca:30:90:da:09:25:20:29:
71:12:6f:a5:05:fd:f5:51:1c:ed:77:8b:af:8f:af:82:cf:8b:
04:b5:b5:74:9f:33:43:8f:29:63:1b:65:fb:27:93:26:be:9b:
ad:f4:61:8f:f4:bf:ef:50:02:42:83:24:99:73:79:fc:2c:93:
fd:bb:00:74:f7:39:4f:66:6f:95:f0:64:0a:0c:e0:61:0d:15:
84:e1:60:e6:07:62:19:72:20:81:da:26:aa:ca:35:39:cf:f9:
95:b3:1b:a1:ec:47:98:ec:8a:9e:4d:8f:f8:f0:09:71:bf:cf:
b9:bc:14:05:d0:ce:e9:bd:b4:f7:30:2d:82:bb:9f:79:5a:ef:
0e:80:f1:33:f6:a9:e0:29:3b:e7:f8:2e:44:0d:14:f9:76:97:
95:7d:9e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 21:35:45 2026 by rpki-client