Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
File: C7M4e-bSDUos4TzAkuh_d3uLmVY.mft (raw, json)
Hash identifier: L40nbj4p0KYCBVrqKtnOrPaGNXatTTkjNPaV76mMA0Q=
Subject key identifier: 3E:73:3B:98:6D:78:83:1F:65:2B:EF:3F:00:0E:5C:1C:64:7E:78:99
Authority key identifier: 0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
Certificate issuer: /CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Certificate serial: 019E1D902F42B156FE130E22AE10439DD723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
Manifest number: 13DA
Signing time: Tue 12 May 2026 19:00:48 +0000
Manifest this update: Tue 12 May 2026 19:00:48 +0000
Manifest next update: Wed 13 May 2026 19:00:48 +0000
Files and hashes: 1: C7M4e-bSDUos4TzAkuh_d3uLmVY.crl (hash: iO7PRVKJwNIkgmuZpIAAHk5/PUt9FhumwEYwOeRGOSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:2f:42:b1:56:fe:13:0e:22:ae:10:43:9d:d7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Validity
Not Before: May 12 19:00:48 2026 GMT
Not After : May 13 19:00:48 2026 GMT
Subject: CN=3e733b986d78831f652bef3f000e5c1c647e7899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:32:c3:ba:d9:b2:89:82:69:4d:51:9c:54:
1a:bd:e5:58:ca:f9:6e:48:3b:f5:8f:10:81:71:27:
f2:13:47:16:31:01:aa:3c:e7:26:83:a2:5e:e5:41:
5e:c9:0e:35:8e:a6:42:ef:00:32:6f:c0:cf:ec:c6:
35:96:65:ed:e7:54:cb:27:5f:52:c4:1e:e5:8b:22:
5e:bb:cb:9d:9d:b3:9b:da:7a:38:d7:ca:59:4d:c5:
ed:d7:1c:3b:84:52:a6:99:31:4b:c9:a4:bd:6f:6a:
ea:b8:55:e0:ba:7f:5a:f6:15:09:02:39:44:8e:8b:
a7:cb:35:20:70:93:49:c7:93:a8:09:ce:e5:6c:67:
37:82:18:6d:b1:ff:c7:19:00:3f:ab:85:b7:fb:01:
4c:8c:35:c0:af:c2:e2:c3:9d:92:52:d5:a3:68:c0:
6e:55:ab:99:fe:d0:ee:84:3c:e3:ab:cd:76:c0:f6:
46:b9:82:09:f6:96:1e:0b:64:c2:80:41:9f:6c:80:
aa:9f:b8:5b:9c:6b:65:ca:b1:cf:85:73:d9:f7:f7:
57:3b:8b:64:d7:ca:8e:d8:b1:28:c6:85:76:69:3e:
19:52:46:45:8d:e1:fc:e8:93:8d:0d:14:cf:52:ee:
3a:e0:6d:c7:c8:a6:c0:bd:de:97:e3:75:ab:c9:b6:
88:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:73:3B:98:6D:78:83:1F:65:2B:EF:3F:00:0E:5C:1C:64:7E:78:99
X509v3 Authority Key Identifier:
keyid:0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:41:65:55:16:78:49:a4:4e:11:a7:17:02:e0:13:60:85:77:
8d:c2:99:af:f6:51:b1:cb:9c:6f:39:6e:15:78:ad:b6:76:bf:
13:c9:23:5c:da:78:31:f2:95:aa:c2:99:08:4c:76:9d:cd:05:
44:10:33:05:f5:20:eb:25:f1:9a:63:c6:80:a4:63:05:b3:15:
c5:4a:fd:76:46:9a:ce:9f:bc:e9:e0:93:e1:53:1e:0d:03:6f:
ad:ef:ab:a3:1e:14:a2:e7:86:2d:dc:a7:e8:83:e5:8c:95:35:
b0:05:29:5b:53:0b:98:78:1b:d8:4d:7b:57:5d:6f:54:e3:d5:
d3:7b:8c:e1:77:b2:9b:b2:ea:26:38:a6:c0:58:df:50:0e:ac:
8d:b2:50:41:b3:7a:c2:3a:38:da:78:e6:c1:05:cf:d1:07:5b:
35:f2:ad:f8:36:b7:0f:45:4f:83:73:28:db:2d:1c:9f:8e:99:
c5:96:fc:f8:fc:51:62:f9:51:d4:98:21:be:fa:31:ad:36:8a:
01:56:92:07:30:f9:ba:f5:ac:9e:2d:10:db:ea:41:e5:b5:48:
79:e9:a9:2b:35:56:5d:aa:61:64:06:d9:55:1a:2c:fd:e6:1c:
03:0a:cb:8d:2e:c8:2e:4a:74:49:1a:9f:3e:3c:14:ed:17:58:
a1:bc:37:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:19 2026 by rpki-client