Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
File: 249r9UNKqjLT5fETsAxbsUAvZ_Y.mft (raw, json)
Hash identifier: h7fyRHb/8cpoV4+OV8XPjWOwfhatYYZFPXp4EMQmI5o=
Subject key identifier: 2E:10:19:2D:18:1A:3C:25:B0:38:C8:38:4F:E5:72:EC:82:62:43:1C
Authority key identifier: DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6
Certificate issuer: /CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6
Certificate serial: 019FA9749F8858E34F19FA9FBE48FA60AD36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
Manifest number: 0AC7
Signing time: Tue 28 Jul 2026 16:00:20 +0000
Manifest this update: Tue 28 Jul 2026 16:00:20 +0000
Manifest next update: Wed 29 Jul 2026 16:00:20 +0000
Files and hashes: 1: 249r9UNKqjLT5fETsAxbsUAvZ_Y.crl (hash: Q37VOHTfyP7kV34P0+5UDYaVtMr4VujbGPZ2wY/fAdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:9f:88:58:e3:4f:19:fa:9f:be:48:fa:60:ad:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6
Validity
Not Before: Jul 28 16:00:20 2026 GMT
Not After : Jul 29 16:00:20 2026 GMT
Subject: CN=2e10192d181a3c25b038c8384fe572ec8262431c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:50:2e:97:75:84:d9:01:a1:20:fb:b7:a1:76:
ae:27:16:28:f5:53:25:4c:d7:b9:99:a6:47:45:2c:
91:25:56:0f:1e:f6:cb:21:c3:10:60:61:e5:72:dd:
2a:86:36:2b:6f:94:4e:5b:ca:00:71:fc:ca:86:dc:
80:a0:4f:6c:72:59:bb:38:46:2f:0a:27:a9:27:e9:
ec:0e:01:45:b5:89:cc:5b:7b:c1:a1:5b:29:2a:71:
25:ee:c2:32:89:7b:d8:eb:e1:c6:4e:f2:d9:4a:71:
4c:d4:eb:e3:85:ae:bd:0b:bb:78:42:be:ee:a9:81:
90:22:57:0b:be:51:3e:03:cd:51:ba:6a:62:8e:ff:
2d:06:14:5f:71:0b:72:45:d6:74:f7:c4:93:99:12:
6c:9d:f8:c4:b6:15:0a:49:b2:9c:3a:cc:4f:40:d0:
8e:4e:e8:5e:d6:88:16:3c:42:ba:bb:a0:1e:f4:49:
9a:df:e7:8a:fd:70:e5:35:12:99:db:18:be:7a:bc:
07:7e:f2:69:fd:85:a2:de:e1:7b:40:1f:d3:8c:f5:
c3:bd:50:92:b9:3c:83:e3:cb:3a:31:d7:bc:a6:18:
94:6d:5e:e6:a4:64:57:b3:74:a0:e5:cb:72:44:24:
e4:56:f2:48:9d:4c:4b:01:8e:9f:74:76:e1:43:d2:
2d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:10:19:2D:18:1A:3C:25:B0:38:C8:38:4F:E5:72:EC:82:62:43:1C
X509v3 Authority Key Identifier:
keyid:DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:45:39:11:ee:77:33:6a:5c:7d:9b:30:69:e9:09:d2:4b:bf:
78:ac:d0:04:7a:99:43:db:85:48:40:7f:ca:fa:48:f4:0b:9d:
d7:f2:7b:9b:d7:30:73:31:dc:b7:08:93:e8:0b:7b:f5:e6:c3:
41:7d:14:1a:9a:2f:f5:e3:44:d9:ab:07:93:82:c6:ab:91:42:
01:e0:3d:a6:5c:ad:b1:e8:fd:5a:e9:ef:31:b9:1b:ba:76:31:
f0:c4:1f:35:82:4e:ba:b0:91:60:bc:46:20:d4:6f:69:ca:5b:
cb:4c:12:73:ce:d6:a2:7a:59:99:63:e5:08:7c:d9:f4:3c:78:
8d:60:a1:21:d8:6a:fe:c4:66:e2:0b:1a:64:ce:a5:52:bc:3f:
08:e1:72:4d:31:bd:4f:51:2a:e5:c8:71:18:5b:b2:9f:ff:90:
cd:01:e0:2e:0f:27:cc:17:2e:0c:52:30:ac:41:c7:d1:91:e5:
d8:f9:16:25:5f:3f:50:fa:35:59:75:73:b5:9b:d6:7c:6e:22:
27:4b:cb:2b:27:91:5a:21:fb:70:1f:e6:ff:0e:fa:85:f7:c1:
09:cf:b6:10:c1:e7:b4:4f:a4:e9:03:7a:68:9d:d1:38:33:69:
93:80:a5:2f:a7:eb:20:bd:aa:7e:bb:42:9a:55:ac:21:c6:df:
c3:6f:24:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:15:38 2026 by rpki-client