Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
File: 898KdcnvaBuNIzZ9vo7a0FPzvZU.mft (raw, json)
Hash identifier: 44jt711ai+W72dB7zS9X/cAz3bshDhRxiUwsdPdP6/c=
Subject key identifier: 91:22:6B:52:D9:AE:65:8E:0A:02:70:1D:8D:39:3C:F7:D8:1D:0A:46
Authority key identifier: F3:DF:0A:75:C9:EF:68:1B:8D:23:36:7D:BE:8E:DA:D0:53:F3:BD:95
Certificate issuer: /CN=f3df0a75c9ef681b8d23367dbe8edad053f3bd95
Certificate serial: 019FA82BD816F198EE7895538540B48583D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
Manifest number: 19D0
Signing time: Tue 28 Jul 2026 10:01:13 +0000
Manifest this update: Tue 28 Jul 2026 10:01:13 +0000
Manifest next update: Wed 29 Jul 2026 10:01:13 +0000
Files and hashes: 1: 898KdcnvaBuNIzZ9vo7a0FPzvZU.crl (hash: OxkwRCxALjgyT0iwDJfcXDjSRnQydyS4dBUQa0T4aKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:d8:16:f1:98:ee:78:95:53:85:40:b4:85:83:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3df0a75c9ef681b8d23367dbe8edad053f3bd95
Validity
Not Before: Jul 28 10:01:13 2026 GMT
Not After : Jul 29 10:01:13 2026 GMT
Subject: CN=91226b52d9ae658e0a02701d8d393cf7d81d0a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:d3:0e:43:1d:6b:b1:37:11:01:c8:6a:a7:
4e:b2:a7:d8:4c:78:06:49:d5:57:65:8b:c4:be:53:
fc:69:79:6c:14:1c:be:c0:4f:b8:a0:43:3f:49:8b:
06:58:63:6c:bc:85:06:62:07:31:9a:a5:70:19:3d:
49:33:32:28:c8:74:17:07:db:3a:70:e6:02:38:d6:
15:ef:c7:ea:bb:f6:2d:27:91:8a:0e:64:5f:ae:18:
85:41:c5:44:25:29:59:0a:89:87:32:fa:c7:4a:d8:
9a:a3:5c:72:b8:1f:92:b8:2e:57:c5:27:37:93:b1:
36:aa:ac:a7:8c:cc:9b:bb:fc:0a:14:e4:ff:55:32:
a8:c6:0e:7a:b1:80:14:1a:94:74:3e:6e:4a:fb:a2:
68:d7:7f:14:06:c3:c6:31:90:73:ae:38:37:fa:8c:
74:40:27:72:35:10:ea:e2:a9:1c:f9:a0:57:a1:01:
4d:e5:a6:d8:b4:03:be:f3:cc:7b:c5:8a:a4:ae:21:
76:4e:7b:34:72:21:18:4d:16:5a:c8:47:c1:65:94:
8a:9e:14:ad:59:d1:37:a8:ab:6e:a9:74:f0:be:d9:
b5:93:65:c1:78:be:b1:3b:3b:0d:83:df:e5:bc:55:
f6:6b:07:26:dd:08:01:b2:00:e3:7e:73:86:16:e3:
f4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:22:6B:52:D9:AE:65:8E:0A:02:70:1D:8D:39:3C:F7:D8:1D:0A:46
X509v3 Authority Key Identifier:
keyid:F3:DF:0A:75:C9:EF:68:1B:8D:23:36:7D:BE:8E:DA:D0:53:F3:BD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:25:6c:77:98:1c:7c:96:1f:1a:6a:ff:fb:b1:82:c9:9f:d6:
a2:f1:92:be:c2:03:5d:b0:91:33:93:bf:9f:6d:1d:7e:a0:c3:
3b:fc:f0:64:d0:72:11:3c:eb:0f:23:fb:ac:eb:74:da:2c:fc:
7c:e4:bd:22:98:a4:e4:66:a1:a4:a2:44:5b:3f:f0:68:87:d4:
c0:15:e0:22:08:20:09:ac:c0:2e:e2:11:65:88:ed:5d:22:2d:
97:cd:77:18:6b:ea:81:22:22:d8:9c:ca:97:97:e2:33:1b:12:
4d:18:15:13:a9:cf:fb:d6:e5:90:95:74:9f:55:58:66:3a:c7:
e8:88:a7:c7:36:87:27:ca:b2:8d:87:23:d9:fb:24:8c:a7:a4:
1a:97:a2:a1:6e:c3:a8:f4:0d:a1:2b:a7:f1:73:98:35:6b:92:
f6:cc:ef:25:70:80:c4:d7:e0:d5:50:c3:55:f9:a9:ee:2a:bb:
b2:e3:6a:15:b4:52:a6:32:1e:ca:3d:9d:39:f6:10:1b:f6:49:
5d:43:a6:af:b5:fc:aa:d4:ba:ff:73:7f:f0:b1:04:ba:a1:f7:
3a:50:29:c5:4c:fa:4a:4c:eb:55:19:c7:22:c8:00:5b:78:40:
f7:c5:e5:ce:9b:ea:6d:da:4e:a5:ce:cc:91:42:56:21:1b:07:
06:fd:c0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:35:42 2026 by rpki-client