Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
File: C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft (raw, json)
Hash identifier: d04pR2FH/gQF4sgtZv77jQOWmkAibz2aukV+YY1YL5E=
Subject key identifier: 81:7F:A3:F3:3E:FB:F5:FF:05:31:C5:FC:0F:01:79:67:53:DC:8E:75
Authority key identifier: 0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
Certificate issuer: /CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Certificate serial: 01A0C40DED50683326183B0FB2C8147E5153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
Manifest number: 19F2
Signing time: Mon 21 Sep 2026 13:00:42 +0000
Manifest this update: Mon 21 Sep 2026 13:00:42 +0000
Manifest next update: Tue 22 Sep 2026 13:00:42 +0000
Files and hashes: 1: C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl (hash: k20tY/EslsT0b9vVfLFnAMr+sK8mYOHGxwL16MH5imE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:ed:50:68:33:26:18:3b:0f:b2:c8:14:7e:51:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Validity
Not Before: Sep 21 13:00:42 2026 GMT
Not After : Sep 22 13:00:42 2026 GMT
Subject: CN=817fa3f33efbf5ff0531c5fc0f01796753dc8e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0a:eb:63:b5:c7:e8:9b:7b:ab:9a:48:17:d7:
03:f6:2d:73:27:1e:bf:f3:af:e1:b3:bf:c0:9b:5d:
10:48:ae:37:77:e4:5b:c9:9f:9d:af:b2:4c:48:60:
23:38:da:b8:7f:b9:9e:e1:83:f2:e1:c4:e2:f1:28:
41:e9:32:f8:69:5c:51:ae:b0:9e:33:c7:4a:73:2a:
b2:2b:c4:ea:ac:55:72:c7:e3:18:65:b5:b1:1c:a3:
85:13:a3:99:6e:2f:ed:e8:ca:83:c8:96:2b:61:5c:
b6:95:2d:9d:50:5c:1c:4b:e5:da:d5:9d:50:94:ea:
c4:5d:53:66:28:40:47:8d:38:51:35:63:dd:92:1f:
c7:62:6a:83:08:a5:e8:d1:da:1c:39:d3:dd:46:2d:
12:7d:45:72:1b:19:17:5e:c7:dc:74:3e:51:26:93:
a2:13:89:ff:42:90:71:23:96:f4:99:a0:8f:c8:66:
6d:4f:7d:24:11:b0:ef:3b:0b:d6:47:a1:c7:fc:7e:
da:a7:a6:f2:c6:4e:41:f5:ee:18:f6:2a:b4:47:28:
2e:e3:64:c7:c6:76:42:7f:35:b0:10:86:3e:ce:4a:
3b:f2:30:18:98:3c:6b:ce:aa:0b:29:3e:0c:1e:d1:
45:87:81:5e:33:ef:4a:5b:04:c2:d5:42:bc:a4:f1:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7F:A3:F3:3E:FB:F5:FF:05:31:C5:FC:0F:01:79:67:53:DC:8E:75
X509v3 Authority Key Identifier:
keyid:0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1b:1c:23:98:19:1b:ae:27:b7:68:d1:39:fb:25:12:16:14:
ef:fc:10:15:19:30:23:27:13:3c:24:21:0a:25:dd:95:f7:95:
b9:ca:29:ae:f9:4a:60:3c:b3:c4:18:2e:30:78:45:e1:16:d5:
56:97:5e:72:79:ea:56:2f:c2:20:5f:bb:b9:ff:48:26:19:4f:
e6:71:b3:d6:3a:25:a7:0f:03:11:66:67:67:07:32:9a:8c:1a:
5f:7e:7a:c0:e0:6a:32:aa:85:b1:50:13:0c:ff:b3:2f:1b:b2:
af:91:7f:ce:29:bb:64:f2:7b:70:a9:35:52:30:a8:0a:4e:1b:
ec:c7:3c:f8:ed:5d:cb:0c:9b:ce:5a:c1:f3:a4:b3:17:22:ca:
c5:2f:e0:fd:22:68:c2:e8:02:83:5b:ac:ab:80:29:6a:e7:b3:
b7:cc:4f:7e:46:bc:d6:44:d8:c7:a6:d5:c3:c6:1a:2f:72:ee:
3d:86:76:db:e3:68:8b:43:2a:00:26:d5:53:31:19:ac:82:03:
53:ad:06:d3:17:de:58:13:79:c3:19:75:bc:85:90:2d:cb:8d:
e0:e3:65:92:fe:49:56:a1:5a:91:17:4a:fa:77:9e:25:6d:cc:
48:1e:77:41:df:17:16:41:90:b3:29:e4:16:ab:51:c2:30:bf:
b1:30:23:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:50:09 2026 by rpki-client