Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
File: 12UrrkezA7urED_3ukWgqQYMPcw.mft (raw, json)
Hash identifier: 5lW4bfBjDGf9Uka+NeBF8ZLffb3NVqLAVouDsFiEDa4=
Subject key identifier: 37:BB:49:79:03:95:2E:FB:71:92:B8:F4:67:9D:0D:83:1B:84:6A:A5
Authority key identifier: D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
Certificate issuer: /CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Certificate serial: 019E1D595C7F7417623E7BB8058091E4AD1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
Manifest number: 1896
Signing time: Tue 12 May 2026 18:00:56 +0000
Manifest this update: Tue 12 May 2026 18:00:56 +0000
Manifest next update: Wed 13 May 2026 18:00:56 +0000
Files and hashes: 1: 12UrrkezA7urED_3ukWgqQYMPcw.crl (hash: ne//0fPaNK9DJdgCEKkeLG/R4XDfawBhzIWIGE1iwqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:5c:7f:74:17:62:3e:7b:b8:05:80:91:e4:ad:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Validity
Not Before: May 12 18:00:56 2026 GMT
Not After : May 13 18:00:56 2026 GMT
Subject: CN=37bb497903952efb7192b8f4679d0d831b846aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bb:28:9d:29:b5:61:f3:3b:9d:c0:04:f3:b8:
4b:74:be:53:bc:15:77:89:e2:05:f0:40:18:7a:77:
1b:3e:00:7e:25:e2:36:27:d6:89:25:80:10:de:e9:
21:b5:bb:44:4e:a9:92:e8:16:31:79:e7:3a:ec:8f:
aa:e6:11:67:d1:2f:47:24:3f:bc:73:c7:e2:07:6d:
4c:89:c6:d5:61:2e:25:23:cd:17:84:aa:25:40:cb:
3a:89:40:a6:02:6d:82:b8:a7:c8:32:09:cb:ac:15:
88:cb:5b:ba:f5:7f:55:0c:d2:d2:4b:8f:8b:24:c2:
52:32:ef:c3:f3:0c:31:d8:f1:db:31:bd:86:f9:a7:
1a:18:ab:62:72:5c:bc:0c:1c:1b:b1:71:0a:4b:4a:
c6:ee:c8:bd:7c:ff:51:63:6f:02:fd:c0:30:65:23:
94:7b:0a:06:f7:95:58:4c:2c:7b:01:79:59:dc:74:
28:24:ae:5d:57:db:2e:27:a9:58:cf:52:68:fd:bd:
3c:a0:13:ed:b2:8f:b1:b5:54:fd:c7:be:0b:b3:0d:
c7:8f:cb:d1:59:73:08:fa:55:dc:c4:77:81:8e:47:
97:ad:22:ea:50:8e:e0:c4:1e:b0:f7:ff:1a:7b:85:
cb:27:56:bd:cd:f7:63:92:4a:e7:01:44:35:8a:9d:
94:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BB:49:79:03:95:2E:FB:71:92:B8:F4:67:9D:0D:83:1B:84:6A:A5
X509v3 Authority Key Identifier:
keyid:D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c5:6b:82:dc:b9:86:b7:bd:99:89:9f:c0:f8:38:90:09:4c:
d2:e4:cd:4f:4a:56:87:13:81:a5:0a:4a:11:19:d0:0c:92:b5:
36:3e:0b:f9:7b:44:95:8e:75:a5:a9:d1:89:59:62:2b:03:d4:
00:71:bf:45:21:42:53:74:05:db:f8:b6:c8:d6:be:c7:12:29:
8a:19:df:82:05:4f:b7:2d:57:17:d0:8a:f1:e7:d3:4e:ac:4b:
93:8f:fa:9c:49:18:f1:88:9b:a2:b2:61:7d:86:f2:61:40:ce:
3c:21:29:71:dc:7c:78:c7:aa:ed:6e:70:5e:82:89:24:0b:d1:
64:12:44:1f:94:9b:11:29:e1:49:db:f9:7d:8d:66:03:32:7f:
6e:2c:fd:17:21:2e:5f:75:7b:3e:dd:9b:69:c5:d9:aa:92:e4:
b6:04:73:4c:ea:85:66:c6:e4:5f:f1:20:a5:2f:b8:c1:1f:ea:
77:4a:27:4a:fe:20:34:e3:23:e4:d4:81:bb:20:b0:88:b7:47:
a1:34:f8:f5:a6:01:f6:32:30:20:e9:40:34:a7:5f:cb:a6:d3:
70:26:a6:c6:e0:b2:f2:b2:1a:76:0d:0a:2e:b2:50:4e:06:d8:
90:c1:a9:fc:99:13:7e:c4:43:7e:e1:c2:f9:a7:0a:74:0f:93:
c0:02:9a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:02:06 2026 by rpki-client