Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
File: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft (raw, json)
Hash identifier: 8RN7+NRBkGhm7W87AhSS/k/XJWGvIZJH6eubJ+NVHGk=
Subject key identifier: C1:F0:54:9C:96:E4:78:F4:1C:D5:F8:D3:3A:91:26:89:B1:6C:00:71
Authority key identifier: D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
Certificate issuer: /CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Certificate serial: 019D9AE2A6FAE6F051CD44BDAEDA83BE5145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
Manifest number: 1591
Signing time: Fri 17 Apr 2026 10:00:38 +0000
Manifest this update: Fri 17 Apr 2026 10:00:38 +0000
Manifest next update: Sat 18 Apr 2026 10:00:38 +0000
Files and hashes: 1: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl (hash: KeaSFEeEayERp5RciNAlP3C3IDa8973AyGoPG0dh06Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:a6:fa:e6:f0:51:cd:44:bd:ae:da:83:be:51:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Validity
Not Before: Apr 17 10:00:38 2026 GMT
Not After : Apr 18 10:00:38 2026 GMT
Subject: CN=c1f0549c96e478f41cd5f8d33a912689b16c0071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dc:14:7b:9b:e9:c5:f0:26:5b:75:06:eb:e1:
33:fe:11:f4:26:cd:d2:b7:b4:d9:3d:46:f0:c7:05:
fd:bd:00:d8:2e:d1:03:e3:fc:22:5e:45:be:87:fc:
d0:9c:64:94:77:7a:93:fc:7f:3d:65:fa:84:a2:11:
c8:5e:b6:8b:3a:aa:9a:7e:da:f0:3d:f9:3c:2b:19:
62:fd:f8:e6:a8:fc:e4:8b:69:32:96:41:f8:9f:ba:
6d:8f:ac:bd:d9:a1:e8:2a:43:07:d9:05:af:f5:21:
a6:5c:3e:0e:50:df:8b:73:6f:0e:d2:28:3b:e6:59:
b0:4e:40:64:a2:29:8d:8c:11:88:5e:eb:5e:3d:ff:
b3:2c:15:e1:60:ca:32:cd:71:a4:40:fa:a5:34:8d:
b2:07:fe:5a:d5:6e:ce:34:47:43:e1:b8:88:3e:ab:
2f:4c:5d:86:c8:14:df:66:45:e9:8d:ea:ea:93:fd:
03:ad:89:93:83:26:d6:06:85:73:48:01:a2:01:73:
cf:c7:e1:83:9d:46:45:1e:6b:00:92:0d:5c:e8:71:
f9:49:a5:ed:0d:38:74:8f:82:e6:b8:0b:64:b7:dc:
9a:8d:55:fe:d6:9d:91:c8:b5:d2:e1:73:9b:f2:c1:
cd:af:ad:6f:cc:d5:e3:bc:48:b4:11:df:93:84:63:
97:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F0:54:9C:96:E4:78:F4:1C:D5:F8:D3:3A:91:26:89:B1:6C:00:71
X509v3 Authority Key Identifier:
keyid:D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a3:99:0a:83:3b:08:a0:d4:5a:c7:3d:0f:1f:6a:3a:5d:67:
75:42:c7:3e:2f:fa:c2:a9:da:ff:cb:89:28:32:95:c0:c0:84:
ce:ad:ef:67:b0:7f:56:5c:02:7f:18:f0:7c:7d:eb:11:8c:51:
5e:84:d4:c3:dd:07:d8:e3:42:da:2c:7c:fb:d6:9b:a9:dd:70:
b7:de:11:13:f2:4f:39:86:2e:c7:9e:f8:f1:a7:e1:f5:7e:fc:
3a:93:32:89:ca:db:0a:78:2b:fc:5d:5b:b2:1f:0c:6a:6a:29:
23:a7:ab:15:94:d6:bc:29:c5:4e:b0:ed:f6:cc:b7:5a:51:12:
9b:4e:6c:8d:03:88:37:d2:4e:e5:d4:0d:2c:9e:b2:1c:e5:e2:
54:93:be:7b:39:fd:c8:6b:1c:73:2b:e8:d1:fb:e3:a0:85:8a:
16:6a:69:d3:ca:fd:40:c3:8f:b0:d1:56:7b:05:1a:53:3a:63:
63:c5:8f:ea:b3:d2:4a:77:b1:bc:63:62:00:13:6c:d4:8f:fe:
ae:75:74:19:39:02:b4:9a:ea:c8:30:31:55:82:48:95:f3:36:
cb:02:ed:63:63:07:d4:64:1f:23:68:21:7b:2b:fe:3d:f3:17:
b5:5c:22:c9:d4:97:1a:c5:b2:db:58:7e:8b:6b:d2:5d:76:ae:
eb:16:3a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:43:38 2026 by rpki-client