Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
File: 1-cEFknmJ7EHAiQOtjNVqidrovl0.mft (raw, json)
Hash identifier: ekgcJqYJS4yretIj+DlzdcxTmqwPlKcZ8opN4oijRsk=
Subject key identifier: 4D:C7:EA:05:AC:20:5C:46:65:D9:E0:AC:E5:67:D7:F1:52:72:47:38
Authority key identifier: F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
Certificate issuer: /CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Certificate serial: 019FAA1A6A7978FB0896EFE0B87AB1034B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
Manifest number: 19D0
Signing time: Tue 28 Jul 2026 19:01:25 +0000
Manifest this update: Tue 28 Jul 2026 19:01:25 +0000
Manifest next update: Wed 29 Jul 2026 19:01:25 +0000
Files and hashes: 1: 1-cEFknmJ7EHAiQOtjNVqidrovl0.crl (hash: H0ziCtvbQwwxdWa7l5DdoeNBEATwnxLKaIEt9A9stK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:6a:79:78:fb:08:96:ef:e0:b8:7a:b1:03:4b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Validity
Not Before: Jul 28 19:01:25 2026 GMT
Not After : Jul 29 19:01:25 2026 GMT
Subject: CN=4dc7ea05ac205c4665d9e0ace567d7f152724738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:bc:fa:35:57:db:ba:5d:a4:7b:52:74:c6:
25:6b:cf:49:20:a4:87:e5:db:1e:14:1a:45:55:8d:
f9:ce:c6:f3:5e:af:04:8b:91:ee:18:31:f2:ce:24:
24:97:a0:c6:3b:e4:92:5a:ac:b6:ce:c5:22:dc:01:
f4:23:9c:85:7f:7a:55:ca:cd:87:2a:e4:b0:cb:39:
2d:22:fc:78:82:b0:dc:33:0f:46:8d:a8:fb:dd:8b:
65:8a:f3:69:e7:0a:80:86:aa:53:37:0e:ca:39:e4:
ab:65:6f:14:88:f4:44:17:35:43:82:87:ba:83:8d:
e7:86:3f:08:b9:43:06:c4:8e:39:85:23:c6:f2:ba:
db:d3:bc:bb:a8:c8:f3:72:33:33:1e:d2:78:60:3b:
49:d8:6f:0c:25:95:37:6b:29:9e:4c:b5:9c:eb:60:
d9:c9:ed:64:90:e4:34:67:63:7a:99:00:8d:a1:50:
75:52:ff:03:dd:6c:80:db:b4:1e:dd:f2:ed:59:2c:
e3:a4:34:52:94:1e:8f:fa:99:26:3b:ae:a7:4d:82:
4a:73:d9:78:52:35:b3:57:2f:c5:d9:85:56:b2:de:
e3:b9:c5:79:6e:ac:c6:b7:80:2a:fe:ab:cc:ff:db:
c1:80:2a:7d:6c:b4:0a:45:09:79:f7:03:59:b1:76:
8f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C7:EA:05:AC:20:5C:46:65:D9:E0:AC:E5:67:D7:F1:52:72:47:38
X509v3 Authority Key Identifier:
keyid:F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:8c:77:60:57:7c:10:4e:18:6f:df:2e:ba:7e:95:7a:b6:e3:
bc:93:4d:5a:3a:d3:2a:15:2f:e0:27:62:c8:47:84:5a:e7:dd:
0a:ea:4a:17:5c:1b:02:4b:60:45:18:7b:01:e3:0e:35:87:86:
c8:e1:5e:2d:32:eb:7c:96:70:e9:d9:cc:23:1e:15:c0:85:ff:
f1:23:dc:bc:5c:4d:74:3e:a1:48:95:a4:b4:79:f9:ae:1d:e2:
d2:b1:a7:0b:42:08:85:c4:aa:0b:7b:6b:6e:da:29:76:9c:4c:
6f:4b:36:dd:42:36:0d:49:e4:1d:62:aa:e4:01:e5:32:e6:ed:
6b:46:15:15:99:12:e9:05:be:67:d0:c6:91:d8:7d:7b:c9:90:
57:38:11:4a:ea:7b:40:cb:9f:ae:9d:c6:41:ca:90:d2:f5:0a:
d2:cc:c4:4e:05:f8:32:d8:ac:1e:a9:a9:00:b4:8e:4b:44:7f:
c7:3f:b3:62:f4:c3:46:15:4d:67:82:a5:98:2d:43:ea:02:70:
13:34:67:72:d1:5e:9d:e0:4b:13:68:e4:1f:44:3f:2c:45:c8:
60:29:95:62:0f:9c:e2:f9:2b:4f:a0:c4:af:7f:c3:77:88:37:
96:e8:07:de:35:5f:70:a2:db:9e:23:fe:c4:cb:44:fa:b2:c3:
c2:76:b6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:16:49 2026 by rpki-client