Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
File: 9g8GwTqb9lKcSmvQ3uBVggVgz78.mft (raw, json)
Hash identifier: oSWADZfJdPmelbMSH+XIJ7E2r4CHlKb7PMHGkPHOwhA=
Subject key identifier: 12:A1:5E:40:5B:AD:84:B8:F7:FF:6D:24:62:E4:0C:31:97:BB:2C:13
Authority key identifier: F6:0F:06:C1:3A:9B:F6:52:9C:4A:6B:D0:DE:E0:55:82:05:60:CF:BF
Certificate issuer: /CN=f60f06c13a9bf6529c4a6bd0dee055820560cfbf
Certificate serial: 019E1C466DAD0FAE32795620D5ABFCDA6F46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
Manifest number: 03DE
Signing time: Tue 12 May 2026 13:00:37 +0000
Manifest this update: Tue 12 May 2026 13:00:37 +0000
Manifest next update: Wed 13 May 2026 13:00:37 +0000
Files and hashes: 1: 9g8GwTqb9lKcSmvQ3uBVggVgz78.crl (hash: Rus6AXgXAFdUvkPLTERyIWmsB9YefOxEzwn97vvsjP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:6d:ad:0f:ae:32:79:56:20:d5:ab:fc:da:6f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60f06c13a9bf6529c4a6bd0dee055820560cfbf
Validity
Not Before: May 12 13:00:37 2026 GMT
Not After : May 13 13:00:37 2026 GMT
Subject: CN=12a15e405bad84b8f7ff6d2462e40c3197bb2c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:f9:6b:c0:65:54:79:de:61:f1:99:d6:b8:
ac:dc:61:5a:6e:92:d4:d6:7e:51:59:44:de:1c:b9:
81:da:cf:be:8b:a0:d5:d2:1d:ae:d7:9c:54:2e:28:
1c:b0:f8:0f:b0:98:32:8d:77:e8:49:b6:d0:e3:87:
33:66:dd:fb:c5:83:4d:df:95:fc:e6:08:8e:d2:90:
87:e7:86:dd:c1:90:25:f9:fd:28:50:46:cf:b5:bc:
4a:85:56:a6:d4:e9:ef:8b:2b:c4:b6:9a:c0:1f:75:
f1:5e:fb:2f:2d:61:12:3f:38:88:a9:3b:f7:6a:f0:
52:a4:f9:8c:2e:fb:7d:32:ea:c9:c0:37:0d:7e:de:
32:2b:8e:94:65:a0:66:58:40:7c:99:ee:8e:a9:22:
44:54:ae:01:85:59:2b:1a:8f:b8:23:38:97:ad:02:
6b:dc:79:a1:f4:eb:12:2d:36:a5:56:0f:96:07:61:
fa:5b:0d:0b:48:b7:e6:7c:d8:ba:28:d5:82:51:24:
ba:00:47:25:66:6e:05:7e:56:72:71:69:b0:ec:bd:
18:df:b4:bd:27:a1:b6:d7:41:88:14:71:a6:d7:3f:
fa:ab:e5:45:36:2b:f9:cd:4e:46:09:04:a7:b6:25:
c8:11:c8:bc:89:16:38:ad:7e:7d:01:ae:ff:6a:f9:
c4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A1:5E:40:5B:AD:84:B8:F7:FF:6D:24:62:E4:0C:31:97:BB:2C:13
X509v3 Authority Key Identifier:
keyid:F6:0F:06:C1:3A:9B:F6:52:9C:4A:6B:D0:DE:E0:55:82:05:60:CF:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:da:ac:bf:cf:1d:a5:aa:e4:0b:c3:8d:48:17:f8:00:42:72:
eb:7b:6f:45:e1:9c:f6:c9:d2:c5:e2:7d:7f:4a:d1:26:cf:54:
67:50:17:2e:0b:a8:95:5b:24:73:82:16:8b:f6:e1:73:17:bd:
e4:f3:93:1c:1c:8b:97:70:79:a3:82:48:b8:a6:8a:f6:ad:49:
e9:6a:d1:cc:fd:d6:37:3c:52:25:11:67:3c:73:33:f8:30:88:
5d:b6:f6:eb:49:75:4f:48:70:f0:4c:ed:af:f9:86:d3:ef:c9:
1f:d0:53:d9:51:ab:1c:dc:a6:24:4d:82:31:9c:f3:a0:74:8f:
fc:6c:5a:bd:fc:55:78:c2:39:6b:00:7e:01:1c:39:96:c9:77:
a2:b3:18:fb:77:25:33:60:f1:54:64:8c:e5:71:a2:ee:7d:49:
36:99:7d:e7:00:a9:a1:44:1f:46:74:2b:b4:cc:4c:f3:b6:0c:
52:f3:29:38:d2:f8:f5:49:49:28:54:87:2b:92:d0:43:49:cf:
de:4c:92:81:47:a8:59:59:7c:1c:1b:9c:14:cc:90:f1:2e:e4:
77:51:d6:40:31:56:da:ac:b4:f9:e6:83:86:f9:6d:59:61:8a:
50:f6:3e:70:f3:c5:ad:d6:cc:74:51:01:59:af:48:e7:ab:04:
d7:01:79:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:20:49 2026 by rpki-client