Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
File: 1-75S2DTiaNxpiDApL95LY8faOS4.mft (raw, json)
Hash identifier: 7i0u5v4fFk63Sv5hE21NYbYSNyIiF841EfsVFz1SK3k=
Subject key identifier: AF:2F:25:91:5D:DC:A5:B0:88:D2:CD:25:02:75:9E:0E:5F:8A:9E:30
Authority key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
Certificate issuer: /CN=fbbe52d834e268dc698830292fde4b63c7da392e
Certificate serial: 019E1C0F9C46FDEFA5F114FC5A3C1B2636BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
Manifest number: 0E86
Signing time: Tue 12 May 2026 12:00:45 +0000
Manifest this update: Tue 12 May 2026 12:00:45 +0000
Manifest next update: Wed 13 May 2026 12:00:45 +0000
Files and hashes: 1: 1-75S2DTiaNxpiDApL95LY8faOS4.crl (hash: sJLuR3+VGTzuwvKuL581CrTpeNaAW7LGsDLzSG9cS+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:9c:46:fd:ef:a5:f1:14:fc:5a:3c:1b:26:36:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe52d834e268dc698830292fde4b63c7da392e
Validity
Not Before: May 12 12:00:45 2026 GMT
Not After : May 13 12:00:45 2026 GMT
Subject: CN=af2f25915ddca5b088d2cd2502759e0e5f8a9e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:a7:64:8d:5f:40:71:21:db:b4:db:f6:86:
75:9c:3d:77:bd:c7:51:38:3c:75:b2:e4:8b:79:21:
f7:5a:38:c2:ac:73:27:31:34:d0:1b:e8:2f:3d:99:
0d:e1:8b:de:35:4d:30:d9:cb:a3:b3:7c:29:45:d5:
4f:91:df:cf:47:ae:49:db:1f:76:f5:7b:86:aa:4e:
fe:7e:ab:a3:84:7d:dd:9f:a4:63:33:12:6f:78:2f:
c2:c1:18:d9:bb:1c:5f:33:63:58:57:b4:34:da:5c:
76:0d:20:a3:0c:fe:7c:b9:a4:e7:f2:20:93:2e:4a:
33:13:0e:22:f3:2c:28:62:65:ed:c1:5e:a2:41:7d:
bd:87:a8:ec:ee:a8:db:0a:c3:76:64:ce:2b:42:a6:
07:9b:6a:84:d8:cc:40:6a:04:3b:7b:40:9c:f4:73:
b1:2a:ae:51:f3:de:62:ea:05:60:24:ce:b4:32:b1:
df:df:d8:08:b6:e5:64:78:99:83:22:50:6d:b8:91:
e4:63:cc:52:67:89:77:02:e5:bb:bd:41:cd:60:9e:
95:17:df:9c:d0:74:a5:a3:c8:b5:96:dd:c8:8a:f7:
e8:e0:1b:f5:a3:1b:c4:75:0f:75:4c:99:12:92:28:
1b:d8:eb:99:92:55:eb:b8:b1:74:e9:d9:48:bd:c0:
37:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2F:25:91:5D:DC:A5:B0:88:D2:CD:25:02:75:9E:0E:5F:8A:9E:30
X509v3 Authority Key Identifier:
keyid:FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5e:94:d7:63:a0:97:e0:93:12:ef:9a:22:ae:d0:04:cd:8f:
91:db:61:19:e1:64:b6:cd:a9:b1:ab:fc:44:9f:b2:ba:60:b6:
16:94:b3:11:95:d4:15:c5:7a:dd:17:0a:54:20:a1:e6:d6:29:
b4:34:a3:36:14:7f:dd:86:c5:81:c0:b3:dc:4c:f2:32:89:6c:
02:6f:0d:ef:1c:1e:d6:cd:cd:28:24:4a:db:9a:82:ca:71:74:
49:35:27:05:65:b7:92:dc:05:0a:d4:fc:01:96:e4:92:71:e6:
1a:d7:ae:96:1f:42:5e:3b:37:f2:47:b0:64:19:cb:e2:92:29:
7b:3d:4c:bb:00:f8:f1:13:fe:50:1d:73:91:fb:c6:24:4c:6a:
22:b4:9b:15:fb:27:ee:d3:6f:3e:c1:95:47:48:77:62:b1:35:
52:4b:77:f0:54:9b:5c:6b:32:8a:46:a6:4c:15:d3:45:cb:89:
77:b9:1d:29:fb:d6:77:ee:d0:e7:c6:6c:c8:b5:ec:da:65:ef:
42:80:e9:25:1e:9b:11:94:af:26:18:a2:5b:d3:83:8e:7a:ea:
aa:5b:fc:e6:32:e3:41:ff:7e:36:b1:59:0b:a1:27:0e:25:60:
70:60:07:5a:13:ec:6f:2a:17:b1:be:10:48:94:a6:4d:ef:e1:
27:5c:40:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:31:13 2026 by rpki-client