Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
File: 9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft (raw, json)
Hash identifier: xWO+HFCIbRsw1oelC/OTUNhW0RXpHv6qJYHUo4Cnc7w=
Subject key identifier: BE:1F:50:C4:66:B3:7D:12:ED:D4:04:AD:DE:5A:C7:E0:C0:03:DA:49
Authority key identifier: F6:56:FA:18:B1:19:C3:A4:9C:BB:CC:56:A6:04:57:43:9A:44:92:CE
Certificate issuer: /CN=f656fa18b119c3a49cbbcc56a60457439a4492ce
Certificate serial: 019FA899563DFC63782C1F6D090FBFC7B23E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
Manifest number: 195E
Signing time: Tue 28 Jul 2026 12:00:49 +0000
Manifest this update: Tue 28 Jul 2026 12:00:49 +0000
Manifest next update: Wed 29 Jul 2026 12:00:49 +0000
Files and hashes: 1: 9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl (hash: BS64DNPPmklBymgmkoO4oGMVzGq+uz+XRXTHxOcUAOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:56:3d:fc:63:78:2c:1f:6d:09:0f:bf:c7:b2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f656fa18b119c3a49cbbcc56a60457439a4492ce
Validity
Not Before: Jul 28 12:00:49 2026 GMT
Not After : Jul 29 12:00:49 2026 GMT
Subject: CN=be1f50c466b37d12edd404adde5ac7e0c003da49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:56:e5:67:f7:a6:85:84:8d:6a:b9:14:8c:02:
2c:c0:a2:79:ad:ba:fe:4c:14:2a:50:d8:99:55:bb:
d5:ce:c2:86:17:93:e0:9c:06:c0:3c:7a:f4:d7:aa:
2f:a5:dd:29:25:df:40:4f:cf:43:8b:36:6e:d3:be:
1e:88:2c:ec:22:7f:99:c6:26:7f:a7:c3:e5:b9:bf:
1c:7a:05:b0:1d:66:95:b7:be:2e:41:34:df:c3:49:
06:b3:9e:d1:92:fb:4b:b2:a9:3a:e5:12:5e:b8:5f:
25:ad:8c:d6:11:a1:ac:29:9b:15:52:00:e0:cd:b4:
ae:93:7e:71:ef:03:b4:da:6b:3e:16:69:a3:2a:d2:
6d:60:c4:1d:ac:7b:47:09:5f:5a:31:4b:a2:0f:57:
31:9c:ac:41:ca:39:54:94:07:e9:4f:8b:0b:6b:32:
b4:ba:08:d5:8e:0c:87:21:a8:e6:0e:4b:36:e4:d5:
2d:7a:c1:08:d6:ed:8e:b1:95:a5:f9:2b:8f:6b:18:
05:2d:c0:e3:b4:6c:12:8e:bf:cd:eb:ce:d6:7d:64:
c9:f7:aa:4d:05:a1:bf:f2:80:6d:1e:38:d0:ce:41:
6f:30:2c:3f:04:72:26:45:04:9a:de:c0:10:9d:3f:
3b:9f:26:5d:34:b6:fa:d4:97:e9:cf:08:6a:4c:99:
83:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1F:50:C4:66:B3:7D:12:ED:D4:04:AD:DE:5A:C7:E0:C0:03:DA:49
X509v3 Authority Key Identifier:
keyid:F6:56:FA:18:B1:19:C3:A4:9C:BB:CC:56:A6:04:57:43:9A:44:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1f:76:fb:85:c2:82:0a:2c:80:ca:01:d2:0e:e8:ca:1d:25:
7b:b3:77:f2:13:49:4e:e0:e4:a4:fe:c7:a6:f6:1b:fa:09:67:
ee:01:b5:6f:4f:7e:39:cb:d3:e2:9c:9d:85:c0:14:c8:91:83:
88:47:11:60:78:25:7a:ba:d0:e5:d9:1f:b4:68:87:63:b9:c7:
12:9e:b9:0a:f7:69:7a:d4:11:4d:9b:52:d4:f0:9c:30:20:af:
4a:0f:66:c8:6d:d6:50:bc:3c:3f:98:4a:71:18:c4:6d:f9:2f:
3b:58:44:da:65:08:98:8d:fb:57:f9:06:24:6e:29:f1:c7:10:
82:fb:48:7a:f1:19:ee:e7:4b:c1:ff:10:52:c2:24:9c:62:05:
50:f0:da:62:da:66:00:a0:58:a2:94:e7:4e:84:8b:2d:30:f0:
38:14:de:02:6e:7a:4a:81:43:2a:ba:db:3b:1d:1a:2a:19:3b:
57:04:1b:75:5c:f7:46:22:45:c6:1b:11:7e:4e:1c:53:ca:8a:
ba:8b:7b:09:23:89:83:92:fc:ac:9e:b6:ea:29:66:d7:90:17:
6a:9b:4e:05:0c:60:52:c2:c6:7b:44:5a:3e:97:3e:68:fc:53:
29:1c:b9:c5:d4:a5:f8:aa:a4:00:27:db:f0:12:fe:3a:94:19:
1d:a4:06:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:13 2026 by rpki-client