Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
File: _c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft (raw, json)
Hash identifier: JjajMd6hTva9o3NstqkGXmOs0zgBMM5nLKLuYnm10J0=
Subject key identifier: EA:4B:3E:11:94:46:8A:DA:3F:CC:CA:8C:0D:68:21:86:92:90:1B:98
Authority key identifier: FD:CF:72:BB:6C:86:87:50:86:28:9D:D2:51:8F:B0:3F:88:22:EE:9D
Certificate issuer: /CN=fdcf72bb6c86875086289dd2518fb03f8822ee9d
Certificate serial: 019DA3E5E434465B699E917D8B05E7184CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
Manifest number: 0FCF
Signing time: Sun 19 Apr 2026 04:00:45 +0000
Manifest this update: Sun 19 Apr 2026 04:00:45 +0000
Manifest next update: Mon 20 Apr 2026 04:00:45 +0000
Files and hashes: 1: _c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl (hash: fAyZzUB4NFyWaSAUdFGNUv/tp0dpQn2oz8q+ZHiWeQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e5:e4:34:46:5b:69:9e:91:7d:8b:05:e7:18:4c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcf72bb6c86875086289dd2518fb03f8822ee9d
Validity
Not Before: Apr 19 04:00:45 2026 GMT
Not After : Apr 20 04:00:45 2026 GMT
Subject: CN=ea4b3e1194468ada3fccca8c0d68218692901b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:79:2f:f5:22:fc:2b:c4:9b:5d:e8:e0:2d:
6b:a2:3e:04:b1:e2:e0:87:a7:e8:16:db:7f:e3:cc:
de:a3:ec:57:85:8f:8c:e7:8b:82:b4:61:36:79:27:
88:67:5c:2b:cb:12:cd:85:e8:14:a7:95:33:b8:79:
44:fe:6e:6b:cf:84:18:71:14:61:46:bd:7f:1e:d6:
9b:8f:c2:8b:3d:50:07:07:7f:98:37:f6:93:ea:27:
ac:aa:2c:ff:f5:aa:04:86:a4:f9:e9:8b:cb:c1:1d:
71:ce:bf:29:6a:5b:0d:9d:3c:91:78:4a:9f:a4:3e:
0a:47:c8:e0:f1:f5:41:ca:65:2c:f7:ba:ac:d8:bb:
08:1f:2d:69:c5:02:87:cd:dd:42:6f:95:1a:bf:38:
fa:ee:cf:fa:b5:c3:30:e6:5c:e1:11:3f:f7:ce:b9:
e3:b8:6f:99:df:19:7e:2e:56:e9:59:e7:b3:39:fa:
da:68:fa:9b:de:4b:ca:7e:79:7f:48:c9:fd:55:66:
1b:98:31:93:1a:80:77:1f:8e:5a:f6:b6:3f:f1:cb:
b6:3f:89:f1:3f:29:74:54:e1:04:68:6c:00:c3:60:
e0:da:53:a2:43:bf:af:5d:20:26:c3:67:69:36:18:
3d:9d:2e:8a:7a:d2:09:aa:b0:aa:f4:4e:c2:98:e8:
48:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4B:3E:11:94:46:8A:DA:3F:CC:CA:8C:0D:68:21:86:92:90:1B:98
X509v3 Authority Key Identifier:
keyid:FD:CF:72:BB:6C:86:87:50:86:28:9D:D2:51:8F:B0:3F:88:22:EE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:dd:fe:81:d0:e9:df:79:53:21:76:ae:9c:4a:2c:4e:dc:41:
63:b0:68:46:d5:30:c4:bc:34:93:5e:25:b8:3a:ad:a6:c0:03:
cf:ed:84:f4:39:15:74:4c:c9:bf:57:37:bf:4b:73:25:a8:b5:
6a:cf:54:1f:c8:08:99:85:26:0f:30:71:4f:c5:7d:5b:10:65:
37:e9:cb:44:8e:52:5c:81:88:3e:d8:50:1d:55:17:a8:d9:37:
b9:3a:4e:af:16:30:e8:7c:55:f9:d7:97:72:0a:49:30:b6:03:
d7:6c:97:72:b2:38:27:b5:60:72:91:2a:08:3e:f2:d1:d4:d9:
ec:89:0d:60:56:44:b3:93:59:8f:2a:2a:05:21:80:45:cd:50:
b6:da:5b:23:19:74:25:26:dc:69:ca:ee:43:9c:ec:e3:c6:5b:
98:db:3f:d7:3a:a3:24:e1:af:74:40:8b:11:21:a1:a2:12:3d:
11:bc:fd:30:bb:6c:80:16:bf:d8:86:0d:47:58:b2:c7:d5:bf:
88:53:fb:0d:2e:81:36:cc:45:21:31:c1:c1:12:c1:8c:8a:df:
82:5c:d4:72:0e:45:c3:0d:07:66:a9:46:4d:ff:e2:22:75:29:
38:83:5c:6b:68:30:1c:7a:bc:f4:73:2f:72:df:a6:7c:a1:66:
f0:4f:8c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:10:52 2026 by rpki-client