Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
File: 12UrrkezA7urED_3ukWgqQYMPcw.mft (raw, json)
Hash identifier: HToetWlx/34jq7/IdxNl/GF0Xtj35ECDvwupsZkypJA=
Subject key identifier: 12:84:C3:FB:0B:AC:6A:BD:94:5A:98:EC:D0:91:ED:C4:87:F2:1F:06
Authority key identifier: D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
Certificate issuer: /CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Certificate serial: 01A0D682E5B7EBEEAAF30F0121D9D265858B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
Manifest number: 19FF
Signing time: Fri 25 Sep 2026 03:01:37 +0000
Manifest this update: Fri 25 Sep 2026 03:01:37 +0000
Manifest next update: Sat 26 Sep 2026 03:01:37 +0000
Files and hashes: 1: 12UrrkezA7urED_3ukWgqQYMPcw.crl (hash: M+Lx8TZi6C3gDlENDrDHeJ7OkkCJo+vqnF0enCsl5Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:82:e5:b7:eb:ee:aa:f3:0f:01:21:d9:d2:65:85:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Validity
Not Before: Sep 25 03:01:37 2026 GMT
Not After : Sep 26 03:01:37 2026 GMT
Subject: CN=1284c3fb0bac6abd945a98ecd091edc487f21f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:1e:ed:71:10:9a:9a:e1:07:7d:bb:1c:4a:
6a:66:3e:a8:75:4e:a1:c4:2f:b1:04:2d:a0:81:b1:
93:ba:fe:26:c3:02:96:bf:da:8f:eb:bc:e3:b1:18:
e1:c7:6f:9d:ed:0c:ca:6e:c2:8d:58:46:06:40:d1:
db:88:67:d5:97:90:29:7d:1b:f2:1c:f8:29:d9:4d:
fd:75:3c:f4:dd:79:7c:c9:20:1e:8e:9d:ac:84:de:
5d:4b:dc:9a:4b:df:9c:1f:44:a3:c7:40:0a:29:bb:
25:c7:b3:0b:94:78:a8:85:fe:4d:87:b0:be:b8:bf:
57:18:69:0a:d8:84:82:cf:3b:4a:3f:1e:b8:3f:c4:
03:c7:4d:f9:e7:ed:b3:cb:2c:8b:ee:a4:f1:d2:02:
13:b9:d4:04:68:e7:2c:19:00:4e:fc:ea:34:c4:30:
15:91:07:83:48:59:2e:ad:19:2f:8a:06:f5:9f:ce:
b3:df:b4:4a:aa:1b:b9:9e:e8:fc:a2:57:10:f2:5f:
ff:9c:4b:b6:d1:91:11:4d:c4:67:55:de:ef:10:9a:
3e:c6:95:47:cc:ed:9e:3b:b6:b1:e2:46:45:70:b0:
0d:50:2d:94:62:43:71:ff:de:9b:d0:c8:db:36:f9:
37:3b:4a:a2:f1:dd:0a:18:d5:75:b4:2a:87:bf:1d:
90:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:84:C3:FB:0B:AC:6A:BD:94:5A:98:EC:D0:91:ED:C4:87:F2:1F:06
X509v3 Authority Key Identifier:
keyid:D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:23:7f:b9:0b:2a:a4:f5:64:0e:7d:1f:c2:6e:67:ab:13:2b:
48:00:06:6d:fe:5b:14:5f:16:ce:f9:b0:d3:67:18:26:ad:10:
c4:30:ac:00:16:cb:5e:bd:96:65:dd:00:12:05:13:93:83:4d:
bf:12:9c:ba:c7:13:45:aa:a3:c4:76:4e:3a:a5:00:d7:53:74:
ab:00:14:95:12:ec:8f:bc:dd:da:d8:22:fc:05:1c:a0:c3:ae:
15:98:89:a2:9f:18:d2:b5:0f:35:30:fa:85:c0:58:aa:8a:6e:
37:57:df:8d:aa:49:99:66:53:7e:0e:53:76:2c:85:dd:10:d0:
46:a2:b9:9b:af:f7:c1:6a:c7:19:44:d3:e3:d3:ed:92:c5:c4:
a6:cc:bb:ca:de:0f:d4:85:91:2f:e0:cb:86:77:33:f0:c6:28:
47:60:b5:e3:00:48:a2:c8:8f:62:ef:9e:4b:62:52:b7:94:67:
c3:0a:9b:74:e2:d0:d0:62:6d:57:b1:89:cd:a6:95:c1:85:70:
0f:7c:91:ec:a4:22:f7:0e:92:ee:2e:79:61:51:33:76:92:5f:
ea:c4:9b:02:de:62:92:2d:08:af:3b:6a:a7:af:6b:ea:9b:15:
34:cf:7c:d1:84:bb:da:e9:26:14:d5:16:1c:1a:7a:d0:4e:20:
88:05:40:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:59:18 2026 by rpki-client