Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
File: 12UrrkezA7urED_3ukWgqQYMPcw.mft (raw, json)
Hash identifier: 1ydadx3de4dXcS7NiSkSCsvXn4slj+NvWDF4kh/HTCU=
Subject key identifier: CE:1D:22:43:6F:3B:02:B1:8D:94:A9:FA:0D:1C:9E:C9:8A:3C:AE:EF
Authority key identifier: D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
Certificate issuer: /CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Certificate serial: 019DA3AEBDC519FE89D44C7970EA62E829EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
Manifest number: 1857
Signing time: Sun 19 Apr 2026 03:00:31 +0000
Manifest this update: Sun 19 Apr 2026 03:00:31 +0000
Manifest next update: Mon 20 Apr 2026 03:00:31 +0000
Files and hashes: 1: 12UrrkezA7urED_3ukWgqQYMPcw.crl (hash: dlSYlrTI+Nu+gpBaLAY9QYYafYPqnoqnHMDc2VxPHGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:bd:c5:19:fe:89:d4:4c:79:70:ea:62:e8:29:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Validity
Not Before: Apr 19 03:00:31 2026 GMT
Not After : Apr 20 03:00:31 2026 GMT
Subject: CN=ce1d22436f3b02b18d94a9fa0d1c9ec98a3caeef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e7:c1:2f:40:99:26:85:d4:0a:db:a5:7c:94:
58:7d:f0:f1:0f:65:63:c4:4f:3f:c1:9c:29:31:6e:
a8:41:fb:92:1a:c2:8c:b4:06:0d:d7:26:6a:b8:d3:
5d:e3:d4:65:0d:1c:21:91:cf:67:fe:e2:60:24:1c:
e4:51:07:ad:fc:83:6b:47:dd:0d:9d:9e:59:30:20:
de:0c:be:c2:e7:e4:56:25:90:ec:11:0a:7b:73:a8:
4b:36:00:1b:b9:90:ac:62:3b:88:fc:c9:f5:f1:90:
bb:70:74:b4:92:87:11:57:fe:ee:d6:6c:69:54:f8:
3c:cf:ac:6a:bd:cb:b9:ae:1a:e4:5c:9f:37:68:10:
7b:cf:ed:31:4e:2b:4c:f1:f8:f4:25:86:5c:67:13:
1f:c7:cd:e1:cc:19:bc:da:b3:d1:97:aa:9b:09:16:
3a:85:87:db:fb:5c:07:15:88:08:13:6f:63:4a:52:
3f:cc:4f:de:e1:96:80:b6:61:e1:a9:7a:47:9c:81:
bb:24:0e:a7:d4:b6:d8:8f:56:4f:22:19:24:a9:6d:
55:bd:64:77:f1:8a:15:db:a5:28:52:ae:d2:a5:d4:
4d:cb:3e:c0:72:28:4c:14:4f:ad:d2:e3:72:42:b3:
85:41:42:d3:1f:af:28:75:74:74:65:d9:7e:5e:99:
4a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1D:22:43:6F:3B:02:B1:8D:94:A9:FA:0D:1C:9E:C9:8A:3C:AE:EF
X509v3 Authority Key Identifier:
keyid:D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:11:fd:df:2e:c1:f6:3c:2b:55:7f:c4:d9:16:80:4f:4b:1f:
7b:94:f6:81:1a:ed:f0:74:6d:89:57:7f:7b:57:ae:ea:85:86:
ef:ee:54:98:01:57:c3:8e:f6:de:5b:50:5d:53:cf:06:39:57:
d7:72:77:15:31:ec:68:20:62:90:60:eb:75:e4:d4:e5:9f:be:
0d:89:7f:79:ac:3e:24:59:b3:e9:fa:8c:b2:9c:51:21:52:03:
0a:9e:b2:42:6f:3b:b4:28:59:3a:4e:ee:b1:fa:2b:a2:5c:81:
59:15:cb:ae:b2:bc:a7:be:87:88:fa:29:b9:99:aa:11:b4:9e:
4a:b7:3b:cc:4a:24:d7:bc:1f:67:1c:e5:ef:de:6f:58:18:5f:
4a:05:c8:2b:59:a2:0b:e7:03:63:a7:62:d6:72:7b:60:62:93:
13:a0:42:25:5b:b4:2f:cf:47:af:4e:85:c2:da:c3:fb:e2:76:
2d:de:b6:8f:67:82:e0:d9:85:47:30:ae:2c:66:22:07:b6:4c:
96:3f:51:15:f9:e3:0a:81:ae:69:7b:88:bd:3d:6c:56:e1:8c:
9b:c3:68:97:d0:2a:16:5e:e6:e6:c5:7b:30:41:73:4b:b5:0c:
c1:e0:8e:e3:f1:90:34:6f:b2:13:c2:46:46:96:af:b4:45:7a:
43:5b:02:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:41 2026 by rpki-client