Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
File: 94hH4ENTVu5e8IbBIEhAigQZG3g.mft (raw, json)
Hash identifier: IruQ4WYwW7sqH9q3sUkIkbv3PZEMVgVHp3rnhtcPKxY=
Subject key identifier: 3B:50:DF:DA:47:CA:23:E6:DA:31:0E:51:2C:36:03:F9:E4:C2:EE:54
Authority key identifier: F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78
Certificate issuer: /CN=f78847e0435356ee5ef086c12048408a04191b78
Certificate serial: 019E1CB4618880B837CDDA123307648A288E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
Manifest number: 1903
Signing time: Tue 12 May 2026 15:00:43 +0000
Manifest this update: Tue 12 May 2026 15:00:43 +0000
Manifest next update: Wed 13 May 2026 15:00:43 +0000
Files and hashes: 1: 94hH4ENTVu5e8IbBIEhAigQZG3g.crl (hash: jxcY41i9N3SXue+KwxX1x+E5Dc7JhjyGnxcV1cU7sGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:61:88:80:b8:37:cd:da:12:33:07:64:8a:28:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78847e0435356ee5ef086c12048408a04191b78
Validity
Not Before: May 12 15:00:43 2026 GMT
Not After : May 13 15:00:43 2026 GMT
Subject: CN=3b50dfda47ca23e6da310e512c3603f9e4c2ee54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:95:46:68:77:4a:2d:ea:ca:3b:0f:01:06:68:
37:44:10:aa:27:aa:92:ed:b0:fa:35:81:80:ad:7a:
f1:77:4d:b3:dd:cb:22:ef:82:6d:f2:57:ca:04:e3:
26:0f:60:de:ad:4b:1f:14:53:53:63:51:70:6e:d9:
c3:02:33:a4:e4:ad:32:54:72:f9:bd:c4:10:8c:7c:
cf:5a:7e:6d:90:d7:6b:f3:cf:3a:ff:09:a0:9f:e6:
9b:15:c2:5e:60:2d:f5:54:66:5f:1e:d1:b9:5c:21:
91:42:92:56:05:b9:cd:46:84:da:02:30:9f:d0:f0:
e4:df:37:bc:22:d2:d9:c4:1a:ed:e9:9d:54:97:c0:
91:68:d0:71:fe:77:14:62:9e:2f:13:65:fb:60:42:
af:b0:f4:a0:a1:5e:c0:aa:2e:46:dd:bd:e4:ea:a1:
9f:56:e8:7a:a7:72:cb:ad:d1:91:4c:16:02:ed:4c:
e8:85:fa:17:cd:4f:34:87:5a:39:a4:64:0c:73:1f:
00:21:64:af:6b:1d:6f:5b:80:dd:87:78:a7:eb:db:
84:8d:04:07:24:c9:18:51:33:b0:0f:12:03:0d:6a:
5f:4f:fb:25:f1:22:00:cc:1e:af:90:f8:76:cb:88:
da:d5:40:61:f7:92:e0:38:b1:07:4a:38:31:a3:0c:
11:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:50:DF:DA:47:CA:23:E6:DA:31:0E:51:2C:36:03:F9:E4:C2:EE:54
X509v3 Authority Key Identifier:
keyid:F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1f:da:79:56:9c:8d:7a:ea:15:6a:ff:ef:17:da:9b:1a:73:
63:52:d5:4f:ca:ca:20:31:87:cc:b7:b3:75:de:9b:45:ac:4e:
b5:7c:1d:3b:c1:d3:77:41:aa:a2:75:8b:c0:6d:df:e1:55:fc:
ac:c3:e9:f7:0b:5f:97:69:d7:d8:b9:8b:77:a6:f5:a7:15:19:
7a:a7:48:02:79:51:b6:c5:ec:3d:c4:c3:f9:4d:b5:74:d5:3a:
6b:31:ea:2b:3b:94:e1:24:47:41:18:e6:43:9a:96:32:28:d5:
6f:4d:5c:12:95:35:b6:91:fb:04:c4:0d:40:89:ed:61:9f:65:
22:b3:0d:1f:e8:63:68:79:b7:27:8c:a9:2f:c1:8d:bd:6b:31:
bf:10:5e:ee:76:fc:ff:56:08:93:9c:66:cd:c7:b3:1f:1b:12:
d9:53:93:76:e9:41:1b:50:33:34:6e:ce:55:6f:c7:61:52:8a:
48:96:99:d0:52:22:71:bb:3b:7f:1e:43:e7:b1:66:c7:33:e8:
2f:99:53:74:ca:6e:c1:e6:8a:ec:76:57:dc:f0:02:11:34:93:
19:de:3e:aa:a0:ee:da:24:b7:63:26:ad:94:14:86:02:c8:af:
94:a0:4d:b8:43:f1:d1:fa:ee:8d:f7:df:b3:98:14:69:b0:2d:
e0:cf:6f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:06 2026 by rpki-client