Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
File: 15-SXhc4vDUrxrXPX_lRs9gTrjk.mft (raw, json)
Hash identifier: 77aLKj4uHehJfhRfCBIUl2hnXwy/adZDSkG8CxL1MWk=
Subject key identifier: BC:AB:24:7B:8C:19:42:5A:01:E7:84:1C:F4:DA:93:8B:9B:16:8E:BC
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Certificate issuer: /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial: 019EBDD9ABB0FC65E800C652000E1F33A330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
Manifest number: 09DB
Signing time: Fri 12 Jun 2026 22:00:19 +0000
Manifest this update: Fri 12 Jun 2026 22:00:19 +0000
Manifest next update: Sat 13 Jun 2026 22:00:19 +0000
Files and hashes: 1: 15-SXhc4vDUrxrXPX_lRs9gTrjk.crl (hash: B0WbTPs8hKTh1pBHSMVZ/4VdiI4QWW54DWDPz0q0bQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:d9:ab:b0:fc:65:e8:00:c6:52:00:0e:1f:33:a3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Validity
Not Before: Jun 12 22:00:19 2026 GMT
Not After : Jun 13 22:00:19 2026 GMT
Subject: CN=bcab247b8c19425a01e7841cf4da938b9b168ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:69:98:36:15:1f:24:39:42:09:eb:7d:6c:88:
66:f9:3a:f0:b7:f0:af:f7:45:c6:a7:43:0d:1d:4f:
ca:c5:2e:1b:5d:5f:10:c4:83:a7:19:fb:8b:92:27:
5a:be:19:11:95:bc:f3:77:0a:ee:90:48:3e:4d:31:
ef:e7:0f:17:63:bb:e4:eb:50:07:df:e6:fc:29:27:
50:89:a9:22:09:99:aa:ca:55:da:7c:75:e4:94:93:
16:1f:c4:f5:21:b7:ce:d7:2d:98:a0:6c:cd:d8:b2:
14:9d:c5:3f:8a:21:70:2c:0c:5b:a1:b0:85:67:89:
ec:b2:5f:df:dc:a1:3b:64:63:93:88:ec:e0:37:ae:
1d:68:68:9c:19:a6:be:b2:6a:3b:1e:4b:48:97:79:
c1:ac:52:6f:65:b8:1d:68:cb:0b:71:37:74:2f:69:
4e:29:b8:a1:8f:89:bc:84:6c:55:26:0e:96:34:90:
d2:d5:06:01:9b:2b:3a:df:06:ff:11:91:8d:e9:12:
c7:e6:7d:3d:4a:13:df:b0:2c:c7:5c:95:72:bb:83:
03:c7:b0:73:52:f3:7d:54:97:69:05:4c:72:a3:c5:
45:28:dc:8a:db:65:66:a8:9f:72:35:ec:a7:6a:37:
da:5a:56:38:cd:40:db:15:b8:2b:3a:cc:b1:20:a1:
07:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AB:24:7B:8C:19:42:5A:01:E7:84:1C:F4:DA:93:8B:9B:16:8E:BC
X509v3 Authority Key Identifier:
keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:34:f3:b1:9a:b6:e5:29:ba:ee:b0:70:82:5b:be:fc:20:d0:
0c:3e:60:14:8b:68:7a:4d:dd:5e:b2:b2:6c:0a:48:77:55:75:
f4:3b:41:21:39:23:81:7f:b0:32:cc:92:98:e1:63:8b:a3:ed:
4a:3d:b7:1f:79:81:40:bc:ef:72:ab:4c:eb:9a:40:a9:0f:a6:
42:3f:7a:06:be:2a:56:9b:70:f4:84:4c:6b:5d:93:03:0a:b4:
2c:e3:33:65:e9:86:02:bc:df:be:49:e3:fd:30:af:b9:72:39:
15:40:a9:43:27:26:d9:8a:53:b7:74:5d:c2:c5:5a:65:3f:db:
96:eb:4a:e8:39:23:4d:bb:fb:61:54:11:d5:53:09:01:b0:78:
a2:9a:c8:ba:e3:a3:c5:a7:49:95:c0:11:25:91:10:b0:9c:b2:
13:03:79:25:34:c0:e1:96:3d:e3:61:74:8d:b1:1c:84:0e:75:
c6:40:21:80:f7:94:aa:31:c2:51:d7:1f:a5:df:39:c2:92:28:
6d:7b:10:b7:b6:ab:07:6b:4e:6a:c9:01:82:5c:36:9d:49:8c:
5a:07:b7:38:f0:c6:44:0b:39:f0:83:33:c2:9b:f4:4e:7e:a3:
ac:23:19:23:28:bc:35:7d:bf:c5:62:b2:c3:e2:ee:b7:6a:78:
79:29:69:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:28:16 2026 by rpki-client