Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
File: 94hH4ENTVu5e8IbBIEhAigQZG3g.mft (raw, json)
Hash identifier: uXYDjksUdp1wCBjY634vi4YKtd/onAUfeRmTDQfnv0I=
Subject key identifier: 36:8E:FD:BB:6E:16:1B:D7:00:09:09:21:A7:A4:4C:64:27:42:F1:AC
Authority key identifier: F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78
Certificate issuer: /CN=f78847e0435356ee5ef086c12048408a04191b78
Certificate serial: 01A0C47CC0C55C1914FE9129A3A6C915F191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
Manifest number: 1A63
Signing time: Mon 21 Sep 2026 15:01:45 +0000
Manifest this update: Mon 21 Sep 2026 15:01:45 +0000
Manifest next update: Tue 22 Sep 2026 15:01:45 +0000
Files and hashes: 1: 94hH4ENTVu5e8IbBIEhAigQZG3g.crl (hash: AYS6zPv02IfezN6ezIrpXLIYnSPDzaRpi2rG0l/O4Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:c0:c5:5c:19:14:fe:91:29:a3:a6:c9:15:f1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78847e0435356ee5ef086c12048408a04191b78
Validity
Not Before: Sep 21 15:01:45 2026 GMT
Not After : Sep 22 15:01:45 2026 GMT
Subject: CN=368efdbb6e161bd700090921a7a44c642742f1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:da:f6:ef:69:7e:86:61:51:bb:0a:34:4c:
5b:22:f6:57:7a:44:ea:d4:38:91:29:cc:6b:24:1d:
2f:9d:03:a0:0d:ef:6e:2f:d5:74:ec:e5:25:67:ab:
05:99:12:39:4b:c9:ec:06:0e:4e:de:09:a2:d0:c0:
7f:11:7a:12:27:5f:2e:fc:89:3e:0b:2a:96:48:2c:
cf:85:f8:d4:8e:cf:cc:52:24:a9:7f:8a:0c:2b:89:
bc:e4:c4:45:aa:a3:03:04:f2:88:e6:db:60:9f:d9:
e2:d6:2a:cd:ef:ed:e4:e6:26:fb:1b:50:94:42:ca:
04:ef:43:10:d3:e4:1a:34:8f:9f:7c:90:33:c0:70:
25:e9:68:1a:b5:28:0d:59:ba:ec:26:2b:df:b1:3a:
29:4c:ce:53:3b:ad:a1:63:58:a6:d0:70:3a:8e:d8:
05:88:a5:77:aa:6e:73:af:0f:59:79:25:4d:f4:75:
ff:ba:b8:d4:61:42:89:e3:33:3d:1a:29:ce:7e:34:
73:1b:50:aa:4c:5a:5e:97:2f:29:8e:7a:99:87:64:
c0:4f:d5:36:2c:ca:81:7d:5c:12:a1:8c:db:bd:d1:
22:cc:a7:b7:e2:79:20:90:2f:ba:67:14:46:5c:aa:
21:08:d1:26:79:da:c0:a5:05:d9:21:57:98:82:8e:
13:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8E:FD:BB:6E:16:1B:D7:00:09:09:21:A7:A4:4C:64:27:42:F1:AC
X509v3 Authority Key Identifier:
keyid:F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ee:3c:83:ab:e0:64:1a:08:10:73:53:3c:4a:cd:72:87:d2:
b8:ef:46:50:4e:0f:fd:8d:ad:c0:17:f3:10:fa:9a:12:b1:06:
e4:40:d7:39:90:d3:09:21:45:e1:10:46:1a:ce:6c:cc:42:9e:
11:02:08:29:8f:0c:90:74:8e:86:d2:f8:db:b1:45:11:36:60:
34:c7:6b:5a:0f:87:59:82:61:7f:ce:9a:27:5f:80:32:01:59:
e1:31:98:84:60:f3:71:5b:35:40:99:d0:97:9d:dc:8b:c7:2f:
e2:c0:2c:ae:5d:cc:03:c8:2b:b0:32:28:cf:e5:8a:0b:54:c2:
b4:34:54:ce:92:8f:73:d8:61:fb:e9:8b:93:95:48:2a:c1:f1:
42:e9:5e:ae:a4:61:a4:5a:23:c6:6b:14:24:95:89:5f:71:7a:
2e:2e:98:97:3c:a3:c6:85:a8:93:f0:f3:c7:e3:5b:83:48:71:
68:45:90:ba:47:45:9d:89:7b:38:ea:f5:07:71:7f:1d:c7:27:
17:3d:28:87:52:c0:6a:e5:9b:0a:b9:2e:ef:ad:05:da:30:c1:
c4:54:83:a7:2e:b3:3d:e1:46:b1:c8:66:64:3f:cb:7c:9d:dd:
6e:b3:ee:e3:ed:be:15:8c:6b:0a:d9:20:0d:ec:d4:bc:30:a7:
1c:b2:b9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:22:14 2026 by rpki-client