Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/CRwEAeBMa8u9gnBm9v8IVMeXDLY.mft
File: CRwEAeBMa8u9gnBm9v8IVMeXDLY.mft (raw, json)
Hash identifier: +fBLySpjcPcqhq7nHRQ7jqBSLlO3B9OLYKRqiNf5BtY=
Subject key identifier: 83:2C:19:E5:94:EF:A0:10:9A:B6:52:A8:B5:18:AF:7F:4A:74:85:27
Authority key identifier: 09:1C:04:01:E0:4C:6B:CB:BD:82:70:66:F6:FF:08:54:C7:97:0C:B6
Certificate issuer: /CN=091c0401e04c6bcbbd827066f6ff0854c7970cb6
Certificate serial: 019F8EA29D9CBE974BF439DD4F8221E40446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRwEAeBMa8u9gnBm9v8IVMeXDLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/CRwEAeBMa8u9gnBm9v8IVMeXDLY.mft
Manifest number: 3E
Signing time: Thu 23 Jul 2026 11:00:49 +0000
Manifest this update: Thu 23 Jul 2026 11:00:49 +0000
Manifest next update: Fri 24 Jul 2026 11:00:49 +0000
Files and hashes: 1: CRwEAeBMa8u9gnBm9v8IVMeXDLY.crl (hash: EnRzSPWShKLsaTL376x1ujslIzTgAN2Lq4KaDCYszbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/CRwEAeBMa8u9gnBm9v8IVMeXDLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/CRwEAeBMa8u9gnBm9v8IVMeXDLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRwEAeBMa8u9gnBm9v8IVMeXDLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:9d:9c:be:97:4b:f4:39:dd:4f:82:21:e4:04:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091c0401e04c6bcbbd827066f6ff0854c7970cb6
Validity
Not Before: Jul 23 11:00:49 2026 GMT
Not After : Jul 24 11:00:49 2026 GMT
Subject: CN=832c19e594efa0109ab652a8b518af7f4a748527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:24:3a:e5:6d:a2:e2:d6:1b:d1:52:56:dd:
90:a7:e4:37:2c:3b:f8:97:cf:fd:37:d6:17:83:5a:
d9:30:8a:3d:4c:af:e7:03:08:42:e3:58:b4:48:44:
41:44:8a:07:6d:ea:09:d4:05:89:42:44:e1:ff:0c:
04:91:36:52:54:0a:86:82:c7:fd:86:93:9c:4e:d9:
3d:94:2e:7b:72:e4:98:26:a0:35:b6:5e:3f:a1:0f:
ed:71:be:68:5b:da:45:f1:ce:e0:de:37:b4:22:2d:
02:5a:85:77:d1:33:9f:58:ff:c6:50:68:32:e3:d3:
9b:86:0e:d5:e3:ee:0d:a6:49:5c:53:4f:02:a5:d0:
19:0f:cc:a5:79:3a:ad:06:57:33:13:78:ac:02:9e:
ab:0f:93:6f:d7:b5:f5:38:a0:b9:88:db:f8:56:e5:
06:e6:5c:aa:a3:90:60:0b:4a:2f:9b:fb:29:91:37:
bc:e9:f2:92:a0:61:e9:32:79:16:ba:7a:aa:bb:7a:
53:d1:0a:b3:62:32:a5:2f:8a:0b:c2:b3:c8:ac:2b:
d6:88:85:49:14:05:ab:61:77:25:7f:79:82:c4:59:
59:5d:78:3b:de:0f:e6:fb:c4:ca:71:ba:3a:4f:3b:
59:b7:b0:e0:66:ab:fe:67:99:4a:51:f5:a0:64:f6:
e7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2C:19:E5:94:EF:A0:10:9A:B6:52:A8:B5:18:AF:7F:4A:74:85:27
X509v3 Authority Key Identifier:
keyid:09:1C:04:01:E0:4C:6B:CB:BD:82:70:66:F6:FF:08:54:C7:97:0C:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRwEAeBMa8u9gnBm9v8IVMeXDLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/CRwEAeBMa8u9gnBm9v8IVMeXDLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/CRwEAeBMa8u9gnBm9v8IVMeXDLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7d:5b:ad:8e:b4:98:d2:58:4a:d9:69:83:93:00:2b:87:12:
f9:9d:71:cd:d6:4b:51:11:03:f7:38:e4:4c:61:c6:f3:85:d3:
ee:ff:68:1c:e8:f7:da:2e:33:9a:d5:77:2b:47:ed:2e:2b:08:
e8:21:17:a3:b9:f1:06:22:98:54:ed:cd:e3:c0:95:ff:56:7f:
3c:f5:08:cd:07:4d:98:b0:16:ac:90:eb:86:7f:ba:0d:29:45:
56:9b:c2:80:30:55:fd:50:0e:b8:8c:78:3b:5b:47:c9:03:e8:
76:b1:77:64:7d:7c:db:91:0b:08:f1:fe:04:0c:b6:3a:09:89:
1d:97:b4:7b:48:65:9a:9c:b0:97:ab:60:18:0f:2b:01:49:13:
06:28:7b:22:83:d6:10:1d:e9:65:fd:17:0e:c0:ff:91:c8:6c:
9d:1b:11:00:63:10:d1:b6:96:f7:ef:bb:dc:a5:1e:bc:31:f1:
8f:e7:9a:ec:a2:d9:4e:fb:4d:bf:e0:09:41:29:3a:fc:e4:84:
cc:54:d0:fa:f0:20:85:8a:81:ae:4d:12:d4:33:ab:aa:b8:34:
21:d3:c4:ed:93:08:52:d6:4c:ed:56:bf:1c:e2:75:8e:2a:33:
eb:b4:d1:cd:49:33:62:4a:5d:f9:07:e0:f5:bd:65:ef:05:87:
f6:f9:e8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:15 2026 by rpki-client