Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
File: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft (raw, json)
Hash identifier: bKrC1BLZSFm2c+q/AgQ9Q8dHD42X4xueFuEeAY651gc=
Subject key identifier: 09:6B:EC:D0:44:3C:A4:E6:5D:0F:B7:7C:77:66:0E:8C:C2:FF:3E:E5
Authority key identifier: 21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
Certificate issuer: /CN=21de5947d9bdf6b08156a939bd20d93492c71104
Certificate serial: 019D9B5048B39C482CE03A184225FE257651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
Manifest number: 0E9C
Signing time: Fri 17 Apr 2026 12:00:23 +0000
Manifest this update: Fri 17 Apr 2026 12:00:23 +0000
Manifest next update: Sat 18 Apr 2026 12:00:23 +0000
Files and hashes: 1: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl (hash: ySuUOPQPJHkfNqL+/jqMdedlbIzckuSC1YPHuVb1smA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:48:b3:9c:48:2c:e0:3a:18:42:25:fe:25:76:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21de5947d9bdf6b08156a939bd20d93492c71104
Validity
Not Before: Apr 17 12:00:23 2026 GMT
Not After : Apr 18 12:00:23 2026 GMT
Subject: CN=096becd0443ca4e65d0fb77c77660e8cc2ff3ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:07:4c:1b:5b:f2:24:77:4f:17:2e:57:88:
d2:29:7c:17:d8:37:79:1b:3b:3e:8b:87:35:82:ff:
67:8b:80:1d:35:12:d7:06:cf:be:17:de:db:c2:02:
97:f8:4b:04:18:f4:a4:59:57:9a:b7:5f:fd:f9:45:
89:b4:f3:98:51:c1:ce:fc:c2:59:5e:95:c4:1c:a5:
d3:b0:c2:22:1b:fe:17:9e:cf:66:bd:04:b1:9e:16:
3d:c5:c4:38:f2:11:5d:57:58:86:ef:13:b9:50:c3:
df:77:8e:8b:6c:ca:e2:2c:fb:8c:c2:00:4b:64:89:
5f:a8:f9:59:18:45:96:6e:c2:c6:fc:af:12:03:66:
0c:b7:ea:d2:e8:00:0f:3c:47:c7:45:f3:8b:22:61:
ae:55:9a:91:56:61:0d:7a:c3:5e:b8:ca:09:33:5f:
0f:4c:b8:e6:d7:71:4d:bb:1d:fa:f6:15:cb:12:6c:
66:54:03:fd:21:02:c2:18:02:e7:99:46:96:64:ec:
14:6d:e0:1f:bb:ee:9f:3e:ba:64:5d:9c:67:f0:0b:
83:d4:2a:21:25:67:1b:4c:dc:84:ac:d1:c9:5c:c7:
49:fd:9d:d5:81:09:68:46:5e:38:ff:17:ab:a4:7f:
5c:f6:ae:f2:e2:79:82:7f:b3:93:42:ee:17:21:94:
44:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6B:EC:D0:44:3C:A4:E6:5D:0F:B7:7C:77:66:0E:8C:C2:FF:3E:E5
X509v3 Authority Key Identifier:
keyid:21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:65:35:54:f4:86:da:e8:02:23:39:9c:48:52:ca:fb:2e:fd:
34:a0:48:f7:da:32:7c:0f:a2:74:08:99:27:9e:e0:5d:5a:eb:
72:db:59:a7:f0:41:9a:d9:05:1e:15:09:a4:e7:0f:72:13:b2:
12:c6:91:c0:f8:1e:2c:fb:e6:b0:c8:5f:b9:ce:a1:0a:3d:17:
61:e9:d8:e8:52:44:e7:b9:d3:15:72:c0:07:a0:40:79:c4:a3:
73:f3:ff:3f:7e:6b:f6:e6:d7:e7:27:a3:76:2c:f9:ae:65:c9:
1e:32:14:b4:42:f2:2c:dd:a9:c2:a1:45:29:f9:18:c5:e9:62:
ee:a0:50:7d:d3:88:64:ea:dd:60:b3:11:59:b8:7c:ba:57:33:
b1:1a:68:2b:4a:4f:03:0a:dc:e1:35:cd:7f:ec:a8:cd:b2:0b:
9f:0b:7e:55:02:75:44:89:b7:54:53:8f:55:0b:48:e9:7c:19:
14:02:1b:1a:e0:32:69:b6:d3:62:a6:17:80:2d:80:5a:78:d0:
f9:c2:b0:f4:37:ee:fe:b4:55:e8:3c:71:30:c7:1a:97:32:a0:
f1:08:bc:30:d3:59:b2:1b:dc:6b:e6:2b:60:6d:45:bf:99:a3:
18:51:cc:d3:47:a8:4a:10:05:c3:72:a3:10:f3:1b:dc:85:c2:
42:01:75:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:21:43 2026 by rpki-client