Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
File: E93mmrzMZdCGiMqDVCYzohkpMic.mft (raw, json)
Hash identifier: LMzz9FeOyFVeg4Bmjy7sHYa9S9EHwMsbeey0peWU8iU=
Subject key identifier: 15:7D:B3:B3:E1:DA:90:58:CC:15:D4:C7:8A:60:9C:E4:2E:96:B7:F8
Authority key identifier: 13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27
Certificate issuer: /CN=13dde69abccc65d08688ca83542633a219293227
Certificate serial: 019FAB63F38153BB8BABE2A94F8B66214610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
Manifest number: 1000
Signing time: Wed 29 Jul 2026 01:01:21 +0000
Manifest this update: Wed 29 Jul 2026 01:01:21 +0000
Manifest next update: Thu 30 Jul 2026 01:01:21 +0000
Files and hashes: 1: E93mmrzMZdCGiMqDVCYzohkpMic.crl (hash: WGNuxvlDWDGl7OCL2O9O+Y/ChDRow0jwUUYPxgZlbbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:f3:81:53:bb:8b:ab:e2:a9:4f:8b:66:21:46:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13dde69abccc65d08688ca83542633a219293227
Validity
Not Before: Jul 29 01:01:21 2026 GMT
Not After : Jul 30 01:01:21 2026 GMT
Subject: CN=157db3b3e1da9058cc15d4c78a609ce42e96b7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:9c:eb:d4:db:1c:a1:c6:d7:25:22:3e:ee:
4c:7b:56:28:23:97:b0:07:a7:60:9c:ba:62:81:6e:
5a:d8:15:37:fe:88:c0:b9:e8:67:4b:5d:ab:f2:67:
f5:2c:86:0e:6a:e9:41:3a:45:4b:ce:f8:2c:7e:75:
d3:0c:ad:2e:2f:8c:ad:41:1b:86:30:aa:54:b4:62:
91:7a:47:c1:cc:5c:0a:b3:45:8c:a0:04:e9:63:7c:
42:02:a1:ba:96:4c:5c:8d:9a:82:c8:d6:f4:80:dd:
06:5f:4a:ac:6b:40:bd:0e:5e:3b:42:51:ef:71:11:
a0:dc:a6:cc:c9:55:ac:59:a0:a5:0c:a4:5a:8b:35:
b3:2a:03:de:be:13:bf:d8:d1:e3:3a:b4:69:ce:9d:
76:48:17:78:4a:3e:c9:36:c9:8e:e3:74:06:b4:f4:
b7:4a:bd:0d:4f:4b:33:7e:e4:49:f1:d1:4d:c3:20:
cc:f0:bd:c1:78:12:1d:8f:8d:41:ab:23:5d:cd:87:
99:c7:8f:22:bc:bd:68:32:a5:eb:7b:e7:76:f4:2b:
fe:b4:c1:e4:fa:75:f2:bb:7a:cf:0a:3a:14:46:03:
1e:a6:3c:b1:c9:6d:8f:f2:b2:66:f8:ac:ef:5a:9b:
57:b1:84:8f:98:e2:9e:7a:39:29:9e:fd:de:53:72:
20:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7D:B3:B3:E1:DA:90:58:CC:15:D4:C7:8A:60:9C:E4:2E:96:B7:F8
X509v3 Authority Key Identifier:
keyid:13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8b:0c:1b:57:54:64:ba:43:67:bb:5a:a5:3a:9b:b3:e3:70:
22:02:b6:a8:7b:1f:f2:ec:05:fb:e7:f0:13:0f:c7:4a:20:b6:
0e:2e:99:98:6a:ee:3b:89:62:07:7d:ed:1f:26:4f:00:2d:34:
2b:28:24:22:ff:9a:f3:cc:e4:88:5c:a1:8c:5b:10:e5:65:ea:
1e:33:03:a0:1a:b6:c5:3a:a5:63:5a:f2:27:c5:18:ce:ad:2e:
fb:66:a7:a4:15:22:84:98:0c:e7:5a:4b:1c:a7:c6:d2:82:61:
3b:e3:c0:64:76:51:f5:5e:ec:cc:b6:ea:73:52:cd:54:eb:d2:
bb:3c:29:89:0a:a6:f3:28:a8:03:23:08:72:56:a5:2b:fb:67:
0a:34:db:9d:a0:cc:b6:2f:37:ec:0a:9d:7d:50:30:d8:3c:55:
70:82:22:8e:98:23:96:b8:7d:a7:47:48:2a:15:10:71:fb:06:
24:fd:d3:8c:87:ef:a5:c2:61:c0:e4:fe:85:47:3e:45:51:51:
e7:5b:d7:88:9d:04:db:9c:4c:9a:20:c2:bd:7d:02:87:76:eb:
7a:4d:22:f6:5e:2e:4c:88:66:27:83:23:2a:d3:b8:18:7a:fa:
cc:8e:1a:b7:b2:99:60:72:5a:e9:22:83:c9:38:0c:28:00:bd:
f8:a9:76:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:59 2026 by rpki-client