Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
File: 1-RCU3VhuycgtHBaTDK9rv-8htbU.mft (raw, json)
Hash identifier: kgNHjd/LCOKFXfXKUM8heQ1BKNgUi2j0FVOrVdOQ1fs=
Subject key identifier: 3F:9F:8F:71:C3:D6:05:8C:16:82:21:01:70:0E:69:EB:5A:62:3C:BD
Authority key identifier: F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
Certificate issuer: /CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Certificate serial: 019FAA19951C8283CEA5E375BB66A5A11BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
Manifest number: 1551
Signing time: Tue 28 Jul 2026 19:00:30 +0000
Manifest this update: Tue 28 Jul 2026 19:00:30 +0000
Manifest next update: Wed 29 Jul 2026 19:00:30 +0000
Files and hashes: 1: 1-RCU3VhuycgtHBaTDK9rv-8htbU.crl (hash: +MIlL4FLJa3CTmjhMpJVt+KsxkyXDhw3iqmEaInt/Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:95:1c:82:83:ce:a5:e3:75:bb:66:a5:a1:1b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Validity
Not Before: Jul 28 19:00:30 2026 GMT
Not After : Jul 29 19:00:30 2026 GMT
Subject: CN=3f9f8f71c3d6058c16822101700e69eb5a623cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:cc:d7:7c:5c:90:85:5a:b5:b6:7e:f7:c6:
14:5d:7e:45:a7:1a:b8:95:7d:ee:66:56:8e:ea:12:
ab:e7:c5:d0:fa:7d:40:8f:87:7a:27:4b:de:da:f7:
11:06:90:60:3d:06:5c:ff:e0:7c:54:1f:94:33:b4:
ef:cc:43:99:b2:e1:e0:10:c5:af:0b:1b:96:31:df:
f9:38:e9:8b:99:06:57:71:44:44:df:08:ce:3f:84:
a2:90:e7:c2:e5:84:ee:8b:b6:1c:77:8e:95:b1:80:
7a:37:23:af:84:cc:e7:6d:d5:0e:d5:86:4d:30:fe:
3e:e9:92:04:00:37:a6:57:f9:70:6b:9c:1e:07:82:
eb:cf:93:11:54:f5:75:10:8b:bf:ec:d9:bb:5a:4f:
92:91:9a:fc:75:43:bb:36:b7:73:4d:e2:74:bc:63:
52:bb:d1:b6:d8:f2:4f:d3:03:8f:3e:a4:0b:62:71:
20:32:7a:f2:7a:bb:f8:e7:bb:ed:27:27:22:4a:42:
07:b9:7f:03:4f:52:ce:42:7b:7c:dc:f0:d0:0e:8c:
10:7f:00:ad:1f:04:cf:c3:d1:c7:fc:48:a4:ca:95:
7c:d5:a3:68:0d:cc:f4:26:78:27:f6:b3:9c:0e:11:
54:ab:0b:ff:8b:d2:d0:7c:2e:3a:5a:dd:fe:fb:f1:
cb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9F:8F:71:C3:D6:05:8C:16:82:21:01:70:0E:69:EB:5A:62:3C:BD
X509v3 Authority Key Identifier:
keyid:F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:dd:5e:43:c0:70:fc:17:c9:0b:5b:61:80:06:4f:a9:42:1e:
a9:2f:54:f2:50:d5:b2:69:0f:b0:16:30:20:e1:41:97:5d:7d:
b8:43:03:73:52:e6:8e:a3:c8:fa:d0:52:c6:db:8c:6f:99:97:
c0:f5:a9:e7:f3:76:21:95:48:b3:6d:9f:9a:56:10:c4:bc:36:
06:a4:17:ec:13:ec:14:7e:ed:57:b1:8d:29:17:9d:26:5a:ff:
57:a2:44:0d:9c:95:7e:bc:51:24:21:48:f8:13:67:c0:5b:81:
12:96:50:17:02:3a:43:5f:17:4f:17:c1:29:5e:63:a7:e3:ff:
f7:03:eb:a1:22:94:68:89:a3:16:b5:c5:71:f1:d7:51:36:09:
04:f7:11:5b:41:ca:5c:b2:b5:a7:37:dc:46:e4:42:cd:21:9e:
88:94:e8:03:db:4d:48:b7:a6:f9:0c:da:2c:23:ca:09:f7:f4:
71:4a:13:ed:d6:d8:6a:c5:c7:e1:59:8b:8a:d4:7c:22:62:ac:
a8:55:9a:ef:9e:06:21:2a:b7:d0:31:ba:e3:b1:d2:9f:93:3e:
01:1f:d0:d3:00:1e:a2:89:fe:bd:3b:d7:5b:ce:51:a6:2d:2b:
a4:a0:c9:73:75:37:6d:cf:0b:31:57:1e:ac:b1:c7:ef:40:af:
a7:59:21:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:20 2026 by rpki-client