Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
File: 1-RCU3VhuycgtHBaTDK9rv-8htbU.mft (raw, json)
Hash identifier: yMfaKf3kTVTmU95LJFww+eVSH93clBLUVCYwJz3o/hg=
Subject key identifier: A6:C9:05:6A:40:10:D1:D4:EB:86:C5:BE:20:77:B5:24:73:69:2E:33
Authority key identifier: F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
Certificate issuer: /CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Certificate serial: 01A0E2F4CB4466524779E8A8FDC36B2E8921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
Manifest number: 15F3
Signing time: Sun 27 Sep 2026 13:01:28 +0000
Manifest this update: Sun 27 Sep 2026 13:01:28 +0000
Manifest next update: Mon 28 Sep 2026 13:01:28 +0000
Files and hashes: 1: 1-RCU3VhuycgtHBaTDK9rv-8htbU.crl (hash: e7cT9mTl2QW6cbY2KIlE9/tPFuCG34o5tSEu2WRNj0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:f4:cb:44:66:52:47:79:e8:a8:fd:c3:6b:2e:89:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Validity
Not Before: Sep 27 13:01:28 2026 GMT
Not After : Sep 28 13:01:28 2026 GMT
Subject: CN=a6c9056a4010d1d4eb86c5be2077b52473692e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:24:27:99:e6:52:fd:4c:f3:df:98:ad:04:d9:
47:b2:26:fd:35:89:c8:e0:97:a3:d7:0b:b1:13:12:
0b:16:9c:b5:a6:d3:d0:e3:98:bc:19:4e:d0:54:41:
17:4e:d0:3d:7b:91:aa:4f:f1:4b:34:b8:07:3d:b1:
c1:91:90:d8:a4:95:24:d4:69:9f:0a:84:40:b1:00:
6c:22:97:f5:ca:2f:9b:68:2b:5a:b0:c3:2f:55:99:
12:1e:8a:35:7d:68:90:1b:60:72:6d:58:7c:16:63:
43:d8:3b:f4:c3:6b:55:d2:ed:5c:21:a4:c6:87:cc:
ef:2f:12:6d:69:88:6a:9d:24:dd:ce:36:fb:7e:87:
25:4c:82:26:df:7e:f1:28:ba:5d:82:69:53:92:e5:
21:43:d5:2f:42:0c:55:dd:c5:bd:1d:a1:2f:1d:bb:
e0:19:8c:53:b9:54:13:68:a5:21:e8:6c:97:f6:16:
14:bb:45:a0:c8:5c:5e:10:68:b2:b7:55:81:c4:0e:
f7:c7:73:fb:ad:59:d2:6f:3d:ca:92:90:2c:d7:f7:
a9:d1:7c:9b:7a:b9:f7:9d:97:d1:f5:02:b0:c7:c5:
b9:1c:27:5b:e6:fd:da:26:e2:7d:8d:d6:e8:5a:74:
4a:a4:b3:07:c1:a3:88:30:09:ee:43:77:64:73:a3:
fa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C9:05:6A:40:10:D1:D4:EB:86:C5:BE:20:77:B5:24:73:69:2E:33
X509v3 Authority Key Identifier:
keyid:F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b5:70:b5:c6:ac:62:33:71:b6:50:ed:90:5c:62:f8:16:c5:
c4:d6:96:08:4e:29:d8:ba:60:a8:2a:80:e0:bc:3e:50:15:6f:
ab:92:23:93:59:3a:a1:2d:0a:09:85:41:15:8f:a1:78:52:f8:
ee:89:e2:3b:c0:ad:79:fd:fa:3e:24:22:f4:8d:f7:ea:eb:44:
10:c1:3c:e7:06:c4:fb:ab:dd:df:6e:8e:f4:c1:0a:23:10:aa:
ae:10:6d:72:34:d5:99:a2:53:6b:3d:43:e0:96:b5:a4:02:b3:
c9:ea:1b:45:9c:66:0b:bb:58:69:28:9c:aa:71:7d:b9:1a:44:
3b:b1:b2:f2:3a:3a:58:03:0e:ad:fd:f4:3c:60:b8:5b:05:6f:
0c:da:d5:b8:c5:e4:ff:e0:f1:6b:e3:f8:6e:cc:cd:79:0f:93:
ea:f7:6d:87:cc:60:a6:3d:68:60:6e:5b:4d:b3:a2:65:db:bc:
52:27:0d:49:2d:69:7c:05:20:89:78:02:d3:f4:45:84:af:c4:
21:2d:d2:08:3b:f5:9c:32:aa:1e:a8:96:f2:b7:29:69:ef:27:
da:b9:17:5b:79:81:e3:fe:bd:5e:51:37:04:bc:33:cb:59:be:
94:81:8a:17:f6:f6:f0:ed:29:94:5b:f4:ec:64:5f:29:68:aa:
3e:c9:53:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:07:41 2026 by rpki-client