Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
File: p3l5GlNwwc1X5JPZSfke-82mYX4.mft (raw, json)
Hash identifier: hWiAPsc++PwVA7iL/NhZyz28DuDxlwgG3cCwq3wbExQ=
Subject key identifier: 65:31:E0:33:9C:56:43:31:18:66:C5:FF:F3:96:E1:71:55:A8:76:02
Authority key identifier: A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E
Certificate issuer: /CN=a779791a5370c1cd57e493d949f91efbcda6617e
Certificate serial: 019D9962D8ABE6EA837D71204AA28A2421FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
Manifest number: 0D64
Signing time: Fri 17 Apr 2026 03:01:25 +0000
Manifest this update: Fri 17 Apr 2026 03:01:25 +0000
Manifest next update: Sat 18 Apr 2026 03:01:25 +0000
Files and hashes: 1: p3l5GlNwwc1X5JPZSfke-82mYX4.crl (hash: 2sjZgLdMxOBZVnqOCCT6M1B6/EbbhfXUJ7v4aK9RZuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:d8:ab:e6:ea:83:7d:71:20:4a:a2:8a:24:21:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a779791a5370c1cd57e493d949f91efbcda6617e
Validity
Not Before: Apr 17 03:01:25 2026 GMT
Not After : Apr 18 03:01:25 2026 GMT
Subject: CN=6531e0339c5643311866c5fff396e17155a87602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:02:0a:94:e4:fb:75:2b:a8:6f:be:9d:d1:9f:
2f:ac:41:65:4e:87:74:5e:cb:40:34:48:df:15:0f:
e2:8e:27:a7:80:42:fd:25:65:28:e0:4b:f6:85:ed:
c4:e3:28:94:5b:fc:7d:77:1c:fc:6a:b7:ad:f9:c0:
db:d3:d3:01:6c:52:46:cc:32:ef:9a:b7:f0:ed:5f:
89:90:ad:95:97:d3:58:c2:61:ec:c1:f4:8a:95:61:
12:28:94:2a:b1:e3:99:f8:90:44:05:7d:c7:92:87:
b5:d7:74:7f:53:9b:20:e5:e9:d9:21:18:5f:e7:c1:
f8:5d:ba:8d:35:c9:dc:73:62:40:a8:f7:d0:b6:2c:
33:cc:b2:cf:7f:e3:88:d7:b6:dd:53:52:f2:bc:f0:
9e:e7:af:ca:27:bc:1e:cf:c7:82:ce:ee:c7:1e:14:
30:33:37:de:28:22:69:4b:04:7a:c9:11:e9:a1:3e:
9a:55:7c:bb:01:c0:c2:46:b3:f1:55:54:01:51:d0:
33:4d:29:a4:50:06:7f:d1:87:af:9a:af:e7:17:8c:
33:60:7d:6b:b0:df:3b:23:28:ee:07:20:f8:f6:04:
1a:37:67:73:f7:75:03:7e:7f:a6:98:86:7b:14:e4:
79:9c:ff:9a:3f:7c:04:f5:c6:d1:09:79:46:92:e4:
98:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:31:E0:33:9C:56:43:31:18:66:C5:FF:F3:96:E1:71:55:A8:76:02
X509v3 Authority Key Identifier:
keyid:A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:68:0b:84:bd:22:a3:f7:ca:3c:2a:82:8c:ea:cf:a0:1b:a7:
19:b6:ad:6a:ca:07:bd:35:43:61:73:f0:72:af:64:cd:06:2b:
11:18:38:af:ec:71:2d:dc:37:60:ea:ed:12:75:7c:9b:e6:bf:
10:a8:49:ec:50:01:11:1e:68:92:6d:0a:e2:60:8c:29:39:f7:
e7:91:cb:aa:b7:88:30:a1:60:2d:1f:d2:de:4a:9b:89:c6:18:
03:38:b8:17:75:6a:55:5e:c2:31:3a:e2:f4:bc:0c:a9:82:05:
22:13:ab:ac:62:d4:32:cf:17:2d:ce:04:69:68:7c:fd:db:f9:
85:ec:57:1e:8e:01:ca:5b:98:0c:90:33:d3:e4:39:80:14:6a:
d0:3c:a1:a8:0f:e5:b2:10:9b:8b:f3:ab:56:3c:ff:01:a7:72:
b7:2b:ae:42:a0:8a:3c:73:48:16:23:7f:27:aa:c4:69:cb:af:
6b:e1:a8:c8:f8:f2:84:4f:49:bc:ec:93:fd:b2:ef:18:72:63:
d1:f5:a8:ee:ef:4f:73:23:31:a0:31:e2:9b:bf:64:25:a7:b2:
5f:06:ce:59:02:db:87:39:2a:8b:84:d0:d8:cc:35:dc:f4:3d:
5a:b1:1b:64:d0:33:e1:dc:2c:ae:3a:57:9b:de:99:60:e8:05:
1f:1f:bc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:50:24 2026 by rpki-client