Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
File: 1-RCU3VhuycgtHBaTDK9rv-8htbU.mft (raw, json)
Hash identifier: 2opw37TpKmYAz6Z26qCh/uYkN8OThIY9phziZYHkDks=
Subject key identifier: 42:91:A6:FF:98:98:30:21:2B:01:9F:57:C0:B5:11:8F:96:64:A0:06
Authority key identifier: F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
Certificate issuer: /CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Certificate serial: 01A0C21F2543E883C77FD33D88A3734018FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
Manifest number: 15E2
Signing time: Mon 21 Sep 2026 04:00:15 +0000
Manifest this update: Mon 21 Sep 2026 04:00:15 +0000
Manifest next update: Tue 22 Sep 2026 04:00:15 +0000
Files and hashes: 1: 1-RCU3VhuycgtHBaTDK9rv-8htbU.crl (hash: k3uWFbVgpXXz9+2CxkfM3oSTBk/qJX/GfNON5CRNTxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:25:43:e8:83:c7:7f:d3:3d:88:a3:73:40:18:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Validity
Not Before: Sep 21 04:00:15 2026 GMT
Not After : Sep 22 04:00:15 2026 GMT
Subject: CN=4291a6ff989830212b019f57c0b5118f9664a006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d0:ab:93:04:8d:06:a1:38:32:47:b8:5e:99:
be:c9:6c:49:6a:f9:9c:8f:2a:8c:48:46:06:82:6a:
35:e5:1f:8e:de:44:af:cd:73:4f:79:cd:fd:e8:20:
df:f8:de:5d:23:7d:5c:cb:58:66:dc:61:bd:03:a7:
08:65:25:ac:2a:1b:9d:88:7c:44:9d:c8:cf:24:5d:
b2:1c:4d:e0:df:b2:8a:fa:0b:9d:d6:39:d4:2c:43:
c6:d3:55:bd:3f:3d:cf:8e:7e:72:80:6c:8a:9c:aa:
b7:9b:54:34:22:c4:5f:ee:7f:9b:aa:14:99:1d:b4:
1e:8e:0c:10:f7:65:9b:71:2f:ab:ce:ae:d6:bd:a2:
31:ef:89:9c:82:61:0b:8d:8c:4d:ba:28:a3:63:64:
a7:23:34:b6:e9:59:11:4b:36:de:93:1b:bf:26:ad:
a2:ad:3e:5c:2b:9c:cb:b5:e2:b6:00:42:6d:34:a1:
a1:69:eb:b6:a1:72:d6:13:6b:49:65:c4:e9:14:5f:
39:58:c1:f4:00:3b:b5:24:45:45:8a:cc:7d:6e:39:
82:df:7d:aa:52:f6:b0:c2:43:6b:5a:04:67:fa:a6:
1e:82:fa:ee:d8:cb:7c:2c:5b:9b:b0:55:e2:36:19:
93:a0:64:77:89:b8:2d:30:1f:f1:ed:aa:c2:ae:0d:
67:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:91:A6:FF:98:98:30:21:2B:01:9F:57:C0:B5:11:8F:96:64:A0:06
X509v3 Authority Key Identifier:
keyid:F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:98:6e:de:d6:42:47:df:08:d6:a1:49:35:a5:2e:d1:8a:11:
92:77:32:6c:d8:b4:9b:4d:b0:ef:28:5f:4d:40:db:fe:89:7e:
70:64:24:07:3f:f4:34:0b:98:f3:91:4f:d9:2c:99:90:42:87:
48:18:0d:eb:9a:44:b1:5d:71:26:57:82:7e:3f:12:2b:a8:ff:
ff:bd:7e:d0:03:5d:aa:f5:f4:d2:fe:fd:7e:e6:e0:41:ed:9f:
91:c8:48:c0:cc:4a:3b:99:d0:e5:db:87:ff:b0:a8:40:84:43:
29:47:81:e5:01:ad:06:90:7e:b5:41:df:73:16:94:6a:60:b7:
58:e6:3a:72:48:4d:dc:f9:d7:75:37:d6:3a:a1:74:32:9a:3b:
89:84:6b:27:9e:5d:f3:b9:ea:d7:c5:a6:89:3d:0c:fc:f7:3a:
dc:19:84:9e:ec:2a:2e:79:4f:fb:81:a4:5b:ca:59:a3:83:bd:
7f:9a:2e:90:fe:92:ea:36:e8:d1:c0:ed:86:a8:28:94:40:c9:
7d:e1:3a:95:5f:85:ab:25:31:93:97:58:7c:17:c1:bd:d7:97:
e8:05:99:42:de:15:d3:be:85:68:c1:2e:6a:9f:58:52:a9:c2:
95:fb:95:b2:b8:56:86:eb:be:88:cb:e9:3a:3a:be:88:20:f1:
d3:b3:38:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:22:13 2026 by rpki-client