Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
File: 9H1LS48bGIg-rDtJnA8EKsomsKk.mft (raw, json)
Hash identifier: MUc68PVUusiA6l4VrMRpR7n7AJl5xMBnZTgRYVDqV9E=
Subject key identifier: 20:79:4C:BC:64:42:C1:93:7B:DC:22:C9:CF:F4:0F:CE:15:7A:10:19
Authority key identifier: F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9
Certificate issuer: /CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
Certificate serial: 019E1C0FB93DC76E9BB580AC5D9A12AF1813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
Manifest number: 0C37
Signing time: Tue 12 May 2026 12:00:52 +0000
Manifest this update: Tue 12 May 2026 12:00:52 +0000
Manifest next update: Wed 13 May 2026 12:00:52 +0000
Files and hashes: 1: 9H1LS48bGIg-rDtJnA8EKsomsKk.crl (hash: KMNOuxZ5eYsUhoLoaHsiVZuZx6S4UgHa6eBsJkfMLXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:b9:3d:c7:6e:9b:b5:80:ac:5d:9a:12:af:18:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
Validity
Not Before: May 12 12:00:52 2026 GMT
Not After : May 13 12:00:52 2026 GMT
Subject: CN=20794cbc6442c1937bdc22c9cff40fce157a1019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:a5:0a:00:5e:d3:8b:fd:d4:6e:4b:b8:59:
f8:85:ab:53:c8:2f:57:1b:65:99:6a:89:49:4e:c5:
d4:74:a8:70:2b:2c:3f:c9:ce:ba:50:6c:17:3a:d8:
49:f6:5b:ba:03:4d:58:f5:5c:2d:09:c9:d8:91:d7:
cf:fa:2c:27:5e:8f:14:e2:c2:59:8d:7f:10:4b:c2:
88:61:4c:dd:9a:24:ee:2d:1a:e6:2a:f5:9b:45:96:
5b:21:6f:64:ae:94:c7:6f:a7:70:bd:29:cd:28:20:
b7:f7:f8:c2:0a:a9:84:90:f3:7a:33:cc:df:f6:1e:
43:84:d9:6f:9c:43:c8:3b:32:2d:c4:bf:5b:69:5d:
50:bd:34:70:dd:6f:34:67:18:cc:2d:24:87:8d:34:
b5:a3:af:fa:f5:37:ba:2f:75:1c:78:df:7d:87:72:
8f:b3:31:b5:c2:af:eb:e6:3b:44:f7:3f:45:94:d2:
84:05:b8:99:7b:d4:e2:f4:c0:2b:01:0e:3e:62:1e:
a3:7f:db:78:0d:c2:0e:9c:a7:a1:6d:d9:70:d5:4a:
8d:4d:a9:a4:86:54:62:be:ea:47:6b:03:4a:b8:c3:
76:c8:57:3e:ea:3d:c4:d1:98:77:a3:fb:c0:a1:59:
97:0c:49:17:14:4c:75:8c:1a:21:5f:7d:ce:a9:40:
ca:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:79:4C:BC:64:42:C1:93:7B:DC:22:C9:CF:F4:0F:CE:15:7A:10:19
X509v3 Authority Key Identifier:
keyid:F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:39:3a:39:85:2f:8b:7a:cd:b9:b3:c4:f5:a0:e5:12:86:68:
ea:46:44:94:8a:fa:a3:7a:a5:bb:84:e6:6a:55:47:4b:dc:40:
c9:38:b8:5b:85:50:9c:e8:ce:90:be:d8:9a:3f:a9:1f:08:4e:
4f:9d:ac:b0:89:ac:e6:fc:dd:7e:67:48:d0:fe:2d:a9:00:28:
62:8d:9f:d1:56:60:32:c9:3d:bb:f0:b1:59:1b:fa:6f:5e:4e:
94:82:2b:8d:8d:08:d0:e1:95:8e:72:a6:e2:f2:04:6c:d5:33:
f3:5e:a0:d1:df:c4:7a:11:90:92:6f:b2:d3:92:03:a0:45:ae:
7e:16:7f:90:02:d0:20:ec:75:fb:46:6c:2f:93:1f:a1:91:32:
1e:bf:2d:20:6f:6c:03:10:6a:2c:41:4d:02:56:92:6c:e1:32:
2b:d6:6b:5a:fc:66:1e:3c:07:2e:1e:6c:80:f5:16:5e:f1:38:
b0:98:7f:62:0f:03:b4:a8:e8:42:c2:c6:1a:8c:8d:f5:ea:bd:
4a:53:ab:e2:60:fe:fb:ad:54:35:31:97:d5:54:cf:7a:c3:d5:
94:f5:8d:30:3e:57:bd:3e:28:e3:af:ad:cb:92:ca:ec:dc:48:
85:a0:6b:ee:56:ae:77:21:c2:95:3d:f2:b6:34:9a:52:8e:46:
92:3a:8e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:35 2026 by rpki-client