Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
File: 12UrrkezA7urED_3ukWgqQYMPcw.mft (raw, json)
Hash identifier: D00ovNGLjuGA5TIr3qEjM/tCn4FPTxLARIYmx0b5Ais=
Subject key identifier: 17:EF:2C:3C:64:F3:80:2F:52:6C:0E:7F:51:0F:B0:1A:D0:72:00:1D
Authority key identifier: D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
Certificate issuer: /CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Certificate serial: 019D2816BC276F8A1ACB39490F6A18377AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
Manifest number: 1817
Signing time: Thu 26 Mar 2026 03:01:11 +0000
Manifest this update: Thu 26 Mar 2026 03:01:11 +0000
Manifest next update: Fri 27 Mar 2026 03:01:11 +0000
Files and hashes: 1: 12UrrkezA7urED_3ukWgqQYMPcw.crl (hash: K1A0MK80QL8UKj7PwETjpinUqCh7ari6gA1RcrU4Uj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:bc:27:6f:8a:1a:cb:39:49:0f:6a:18:37:7a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Validity
Not Before: Mar 26 03:01:11 2026 GMT
Not After : Mar 27 03:01:11 2026 GMT
Subject: CN=17ef2c3c64f3802f526c0e7f510fb01ad072001d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:e2:3a:39:57:64:a2:97:8b:ed:6b:b0:65:
34:ae:d1:7b:c5:07:68:09:7f:57:83:ea:24:96:2c:
4f:1c:41:79:a4:16:5f:12:1c:64:bb:32:de:2e:4a:
5e:51:4b:33:c1:98:eb:fd:fc:ad:76:ac:5b:be:c5:
5d:17:f8:d7:5f:1d:f4:18:5a:6f:7a:41:7b:0c:37:
01:e6:90:72:d5:2f:0e:5e:e4:1a:68:28:5b:63:6f:
c0:b3:4e:ea:11:5a:71:c4:07:31:4a:51:0b:7e:fe:
8a:03:93:8b:21:2a:0a:d4:be:a3:6b:96:86:20:9e:
cf:90:b5:19:8b:06:58:19:06:c6:45:eb:92:c5:f2:
e3:12:0d:ce:5f:8b:15:a8:3e:40:04:a8:78:5a:7c:
50:ee:1d:41:ba:1a:bd:52:b8:60:c6:60:4e:3f:0c:
31:da:c1:b8:02:1d:f2:02:61:e8:8b:fe:91:b7:42:
7c:45:17:b2:79:c3:7e:5f:15:46:76:d4:d4:7c:de:
82:b3:d3:a9:0e:5d:77:35:12:a6:70:66:66:1e:4c:
57:a0:c1:3c:3a:a1:0d:cd:ce:75:ac:e1:61:d1:92:
5f:4c:cc:ea:a5:56:68:8d:c9:39:2e:6a:68:6b:4e:
3d:96:5a:97:2e:31:7f:b2:2b:17:53:4e:cc:2e:43:
a9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EF:2C:3C:64:F3:80:2F:52:6C:0E:7F:51:0F:B0:1A:D0:72:00:1D
X509v3 Authority Key Identifier:
keyid:D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:f3:8e:2c:8c:9d:0e:37:25:d4:a7:27:b9:3c:40:b0:62:0a:
f5:fb:67:24:34:1a:ec:0c:72:bd:af:1a:3e:fd:ce:43:ea:25:
da:78:46:c1:d0:81:53:be:17:7a:a0:d9:d6:8d:9e:35:11:4e:
4a:11:78:35:bb:f4:e5:a9:1d:a0:d4:7c:97:b3:4e:36:05:55:
12:bc:e3:94:11:37:1b:1f:0c:2c:86:0b:14:7b:69:39:d0:8d:
95:ff:e8:84:ac:95:6f:60:39:64:22:a6:71:b1:09:6c:b8:ba:
73:5a:0f:cb:86:93:54:81:0c:18:12:23:ac:31:7c:1d:ec:cd:
6a:f4:ed:a8:5b:45:c7:f0:7a:1f:86:91:b5:2a:c8:40:8a:38:
b4:10:69:e8:85:28:29:4e:27:87:24:50:f3:20:b5:1f:82:65:
45:cb:fc:f4:42:ae:27:3c:4d:d4:15:28:c4:7d:c7:43:61:17:
7a:0f:92:62:79:52:98:eb:62:53:37:40:7c:c0:ea:bf:8c:e8:
e2:7e:63:a3:3d:c9:25:51:fe:bf:1d:f9:b5:b1:4d:c4:1c:16:
6c:a4:49:33:82:81:50:18:27:90:30:0b:2a:09:a5:76:4a:2f:
05:03:cb:ec:78:21:80:65:9c:7a:83:c7:16:5e:f5:09:fa:e2:
b8:ea:ee:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:50 2026 by rpki-client