Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
File: C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft (raw, json)
Hash identifier: UlAQQP+Beb443ox6dsOHEQJPbordFgSaQDr1LwWU4xA=
Subject key identifier: F1:F6:43:E5:B6:F3:64:8B:07:08:B5:4A:74:94:14:41:9D:73:A3:09
Authority key identifier: 0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
Certificate issuer: /CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Certificate serial: 019FAA19AC90D3BC0A175EDFA7B356B53082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
Manifest number: 1960
Signing time: Tue 28 Jul 2026 19:00:36 +0000
Manifest this update: Tue 28 Jul 2026 19:00:36 +0000
Manifest next update: Wed 29 Jul 2026 19:00:36 +0000
Files and hashes: 1: C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl (hash: dKDmnIOvK+9CXJf2F4pmZv6KUeoKJCs2OBeE8p99OS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:ac:90:d3:bc:0a:17:5e:df:a7:b3:56:b5:30:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Validity
Not Before: Jul 28 19:00:36 2026 GMT
Not After : Jul 29 19:00:36 2026 GMT
Subject: CN=f1f643e5b6f3648b0708b54a749414419d73a309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2b:2c:b7:68:ed:49:42:0f:4a:50:f2:0d:46:
97:be:58:b7:db:cc:a6:8e:3f:ce:9f:1d:25:52:ee:
cc:7d:bc:13:dc:3e:8a:dc:02:4b:bf:35:4a:52:1b:
48:9a:be:c8:3b:c3:cb:65:e9:dc:72:68:3f:c8:15:
5a:2d:b8:9b:7b:a2:32:e8:4e:ec:4f:d3:5e:11:a2:
17:40:6d:ee:01:50:50:75:4f:2e:1e:1e:cf:32:fc:
03:a4:7a:7b:c4:d7:56:61:a9:1f:1a:cf:23:7f:17:
b6:88:1b:65:43:68:04:5a:d0:28:fd:8d:89:bf:11:
04:31:49:41:1a:85:19:b4:4c:8d:27:45:fa:41:7e:
ae:11:6b:37:a3:de:4d:6c:73:70:f6:0c:34:cd:5d:
d2:0d:ea:85:a2:e0:cd:a1:a0:2e:73:72:55:50:2d:
65:1b:10:d0:09:bb:c7:a8:6b:d3:d8:2f:34:3f:fb:
96:a2:7d:9b:f8:f9:94:3d:a2:26:60:d4:37:5c:cd:
fc:34:c1:bc:98:80:36:25:db:5f:3a:c1:8b:a3:29:
cc:63:e7:aa:82:1c:b6:6b:a6:fb:f7:cc:2f:d4:52:
f1:2e:89:ed:06:1a:90:e9:ef:dc:b7:ec:1e:fd:0b:
fe:7e:5c:a5:cf:50:ce:1f:fb:9d:ea:63:74:82:75:
3e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F6:43:E5:B6:F3:64:8B:07:08:B5:4A:74:94:14:41:9D:73:A3:09
X509v3 Authority Key Identifier:
keyid:0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:cf:11:40:d5:71:b4:cb:29:ef:e2:97:6b:84:14:82:30:e6:
c5:3b:da:b2:65:c1:05:07:b2:e4:6f:e8:77:db:32:d2:d3:2e:
50:e0:f9:58:55:63:36:2a:d1:01:fe:9d:72:c7:3b:99:28:87:
19:33:b4:62:cc:9c:18:8a:4e:80:a9:0b:a3:2c:69:a3:66:f8:
eb:c3:18:12:be:f4:48:96:ac:47:01:a0:d9:a2:c5:d7:a6:c0:
7d:98:30:10:45:bb:99:05:28:11:8a:c0:70:6a:df:9d:a8:30:
7a:e6:41:d6:cf:8d:43:09:60:78:3a:64:c9:21:60:06:41:d6:
fc:4e:d2:7e:d0:9b:e5:42:fe:0e:d7:1d:56:68:ed:01:fc:49:
f9:08:ec:94:8b:ee:71:0b:e2:16:7e:03:d7:4a:9c:9b:cf:82:
cb:66:75:d0:5f:50:8d:a3:b6:1e:dd:47:fa:d6:43:41:18:57:
ad:f6:d7:b4:d6:59:ef:71:b5:1d:d0:81:9f:f7:c1:89:e9:ef:
6a:28:e1:5d:67:36:b4:cc:e8:5b:7b:aa:1b:e3:57:51:75:da:
cb:0b:85:38:69:42:31:8d:36:40:e0:b9:b9:0c:06:62:ce:37:
cf:fe:ec:5a:04:fc:ce:9b:e6:e2:9f:1b:4e:d2:27:74:4e:f5:
c9:fa:a9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:43 2026 by rpki-client