Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
File: D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft (raw, json)
Hash identifier: hKTxqCTnGuRaZLcbwZwk4QUkbyulGqE+iWHCjii79Hk=
Subject key identifier: 16:B7:15:78:C5:04:A3:42:6D:03:8D:53:DB:DF:6A:6B:F3:3E:7B:4C
Authority key identifier: 0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
Certificate issuer: /CN=0f79760520b7c15c2e4260308272b849f88ed677
Certificate serial: 019E1C7DFC24852F943CA82B08257FA12C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 14:01:18 +0000
Manifest this update: Tue 12 May 2026 14:01:18 +0000
Manifest next update: Wed 13 May 2026 14:01:18 +0000
Files and hashes: 1: D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl (hash: z8/UxPel4OZFLq5kL3/e072ChDGaaZ6t7kdX1dVIcFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:fc:24:85:2f:94:3c:a8:2b:08:25:7f:a1:2c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f79760520b7c15c2e4260308272b849f88ed677
Validity
Not Before: May 12 14:01:18 2026 GMT
Not After : May 13 14:01:18 2026 GMT
Subject: CN=16b71578c504a3426d038d53dbdf6a6bf33e7b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:85:b4:4f:c1:dc:7e:aa:02:08:30:42:20:6d:
3d:de:e4:54:fd:14:91:01:63:67:51:28:54:16:4a:
bf:2d:df:d7:5e:a6:6f:b3:73:e8:29:90:85:85:5e:
0d:ab:90:41:a3:09:90:77:b8:93:42:6f:b5:36:b2:
dc:3e:b8:40:bc:ca:6b:15:02:6a:1f:38:73:9c:40:
a2:20:68:ea:2d:ba:60:42:0d:c6:8f:94:f4:07:72:
2e:05:9f:93:c1:90:5d:e3:54:e3:9b:82:87:0a:ce:
60:ae:ab:42:3f:b5:6b:64:31:e3:cc:2c:be:d8:bf:
e0:b4:b9:8f:6f:d2:d8:49:76:26:c1:42:fc:66:65:
fa:09:f6:1c:b1:70:81:9f:f0:53:d7:24:c8:9f:31:
8f:4a:32:73:ab:35:23:1f:c4:e9:d9:d4:03:a3:64:
29:42:8a:ea:43:10:33:6c:fb:22:af:1f:a4:c4:22:
5f:8a:4b:75:b7:4e:15:71:1d:7c:e9:65:1b:40:af:
30:c3:cf:73:80:47:25:6a:6a:c7:9f:64:1a:f2:19:
b9:33:ce:3c:e2:8a:1b:66:3e:59:d7:4f:fa:f0:e9:
24:8f:fd:b6:74:3e:07:be:39:3b:e1:07:26:89:66:
36:c8:31:7e:99:20:d5:69:3f:75:de:a3:af:03:79:
e2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B7:15:78:C5:04:A3:42:6D:03:8D:53:DB:DF:6A:6B:F3:3E:7B:4C
X509v3 Authority Key Identifier:
keyid:0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:82:cc:5d:3d:4c:a8:0f:e6:36:7c:79:be:10:f7:39:a1:ec:
da:d8:2b:a2:40:d7:3b:36:ec:70:64:ee:d0:70:cb:70:ef:26:
5d:c9:b4:fe:50:5b:f4:5a:ef:91:d0:b4:27:a2:91:36:13:37:
4d:62:e0:47:eb:af:9f:37:af:c5:75:e6:b4:00:98:74:ce:56:
35:6b:33:83:67:9c:c7:f1:cf:74:1b:5b:6a:16:c2:18:87:69:
3d:44:b8:64:ac:a8:32:8f:57:18:d5:f1:e9:6b:2a:8b:be:2c:
f1:b0:91:ad:1a:b0:33:3a:63:8a:a1:4a:7e:69:d3:ba:9e:11:
10:f9:e2:13:1d:31:f5:f0:af:ae:5e:05:f2:b5:e4:58:2f:03:
fc:57:8d:4b:3e:e3:96:99:b2:b6:0d:8d:33:fb:85:fc:61:45:
85:61:3c:ca:eb:46:d1:3a:6f:b2:09:fe:cf:3b:11:5b:85:34:
94:af:39:ac:98:b3:d1:a0:19:ed:fe:61:74:e8:72:72:08:45:
fe:5c:12:74:30:72:96:09:5c:20:3a:40:11:4e:09:95:9b:6a:
8c:63:7b:35:a8:78:29:16:b2:6a:97:9f:fa:24:f0:18:49:54:
f6:71:6d:d6:bd:54:73:60:20:fc:e0:ec:9f:97:fe:e5:1c:e5:
76:a5:24:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:33 2026 by rpki-client