Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
File: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft (raw, json)
Hash identifier: ld13/+exx0EZWBLQd1r8InUi547mBUiieDL5NfRwhGY=
Subject key identifier: 73:34:F6:F8:71:F8:2B:D7:37:16:8D:09:40:CA:95:87:4C:3D:58:0E
Authority key identifier: D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
Certificate issuer: /CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Certificate serial: 019E1E35EC0246672B2E6263D7CE7A96EA2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
Manifest number: 07DC
Signing time: Tue 12 May 2026 22:01:50 +0000
Manifest this update: Tue 12 May 2026 22:01:50 +0000
Manifest next update: Wed 13 May 2026 22:01:50 +0000
Files and hashes: 1: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl (hash: SBmFYpUo1sFEhsffGIwcpbM4938aIjh/T2HSgdOcpeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:ec:02:46:67:2b:2e:62:63:d7:ce:7a:96:ea:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Validity
Not Before: May 12 22:01:50 2026 GMT
Not After : May 13 22:01:50 2026 GMT
Subject: CN=7334f6f871f82bd737168d0940ca95874c3d580e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:c4:d0:0a:61:c4:6b:15:8d:27:a3:f1:ad:
fb:9e:07:cf:49:bd:ed:64:60:79:b5:9c:3b:10:11:
29:2f:12:63:ff:b6:62:13:6b:9b:55:a5:ab:e2:94:
36:69:fa:96:e0:ca:13:02:79:dd:93:1f:21:df:d4:
09:ea:8c:6f:47:17:22:a8:3a:c1:21:19:52:c7:72:
5c:c9:f1:b6:30:8c:f6:d9:9a:17:83:97:80:b1:1d:
a7:d2:31:29:3e:19:0e:1a:6a:71:75:0b:e5:95:52:
aa:a3:4b:2f:0b:ac:32:dd:48:0b:07:bb:8c:51:d9:
5b:37:ac:b3:eb:8c:01:3b:f2:9f:ed:ce:43:52:6a:
6c:c5:0e:75:19:53:a2:f7:31:0b:94:59:6e:7b:60:
6f:57:d0:eb:4b:07:db:d3:c2:b7:87:c7:48:19:3d:
97:27:67:90:1e:74:5a:19:65:17:8f:52:c3:a2:5a:
97:cc:75:81:20:ea:22:bf:2d:f4:36:78:57:e6:dc:
8e:f7:61:94:1a:16:13:e4:07:e2:27:88:af:6a:aa:
43:0b:95:d9:a6:48:2e:21:b4:a1:75:ed:8d:5f:f1:
a5:ee:ca:89:4f:62:d5:8f:7b:6c:e6:0f:5f:f8:bc:
56:16:87:31:70:b5:61:cf:ad:f3:4e:ba:7e:ad:94:
5e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:34:F6:F8:71:F8:2B:D7:37:16:8D:09:40:CA:95:87:4C:3D:58:0E
X509v3 Authority Key Identifier:
keyid:D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:28:b3:e9:69:7a:48:17:0e:ee:2b:39:b6:e3:90:cd:e2:0a:
db:ca:a6:5f:72:f4:ee:1a:cd:b6:ee:73:97:4a:1f:e0:44:20:
da:36:32:40:16:29:cd:e8:eb:ca:12:07:ca:43:82:43:87:8e:
b9:6a:f8:32:31:36:0f:f0:fc:68:25:11:76:c3:01:df:50:51:
cb:4d:dc:69:56:a0:e8:be:82:14:52:58:b9:72:0d:e7:78:0f:
47:7f:4f:be:14:0a:c0:a7:67:66:7e:e4:89:59:c7:0b:1b:27:
99:df:c4:4a:ce:b5:56:d4:23:26:8b:91:f8:20:8c:32:37:82:
99:f5:37:c6:2d:2d:d4:f1:ff:70:12:9c:f4:7a:0c:7a:ad:94:
25:f4:0a:d4:f2:fc:95:e0:45:c6:e5:6b:57:c9:2f:66:c4:22:
34:3e:7a:a9:64:24:77:3f:de:7b:e6:55:85:94:34:db:f3:cc:
ff:f8:9f:98:da:c2:60:f8:ba:18:d4:e7:32:3c:ba:2e:a6:24:
89:88:e8:a3:28:64:ee:78:9a:5b:3e:41:94:a3:7f:bd:c0:89:
82:95:9c:98:bc:fb:69:83:db:73:be:7f:47:6c:a7:94:81:a3:
b3:25:90:43:2b:16:45:83:71:df:82:62:ee:cf:67:d1:cc:83:
4b:50:3d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:20:14 2026 by rpki-client