Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
File: laR6hTtVKHanG3Vw0AFOBktDgPs.mft (raw, json)
Hash identifier: VXv4ht8N6rclGY5b90S1BGh3aCde9F52CPTnzP8ywH0=
Subject key identifier: 14:40:44:78:31:6D:6D:74:4E:B0:C5:FB:9F:8B:52:15:BB:DA:25:D6
Authority key identifier: 95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
Certificate issuer: /CN=95a47a853b552876a71b7570d0014e064b4380fb
Certificate serial: 019D9AE2BBB0E0F5C0D427C611EEA78FF64D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
Manifest number: 0A6A
Signing time: Fri 17 Apr 2026 10:00:43 +0000
Manifest this update: Fri 17 Apr 2026 10:00:43 +0000
Manifest next update: Sat 18 Apr 2026 10:00:43 +0000
Files and hashes: 1: laR6hTtVKHanG3Vw0AFOBktDgPs.crl (hash: TnJedsv2/MdpDTHFxGM8jN3WWg7ybe7AXx9TCcEBH9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:bb:b0:e0:f5:c0:d4:27:c6:11:ee:a7:8f:f6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a47a853b552876a71b7570d0014e064b4380fb
Validity
Not Before: Apr 17 10:00:43 2026 GMT
Not After : Apr 18 10:00:43 2026 GMT
Subject: CN=14404478316d6d744eb0c5fb9f8b5215bbda25d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6d:77:4c:35:62:a1:66:2a:e0:38:d7:56:ef:
c9:39:e2:16:fa:fa:a3:3d:5c:d0:f2:45:78:72:2d:
1d:93:11:7c:95:9d:36:14:2e:77:53:16:d1:db:9d:
a1:eb:f2:a2:6b:16:55:49:d9:d1:6e:b1:8f:10:a0:
53:b7:73:80:ab:6e:7d:60:f2:90:9e:cc:77:36:9d:
32:c2:7e:2b:89:8f:d1:3c:c7:6c:87:12:5a:a9:4c:
0a:5a:df:ca:df:f0:c6:57:3c:8b:cf:a1:64:63:d4:
67:66:31:0b:0b:43:60:4c:e6:96:a7:32:b5:05:13:
e2:de:35:95:9c:d2:26:d3:42:0b:b8:4d:cd:f7:34:
0d:3a:a5:60:29:e2:18:0d:66:73:34:e4:e0:4f:cd:
d3:f5:c9:5f:e2:22:81:1e:76:85:7e:71:6c:f6:0c:
83:8f:0c:f4:b8:f7:d3:36:88:8b:7f:8c:1c:76:08:
55:7c:34:9f:55:8d:d1:1f:16:25:0a:54:98:be:47:
a5:86:e1:4f:5e:20:34:2a:1e:cf:33:0b:b2:57:18:
0f:d3:ec:7a:c4:47:4e:68:59:c7:78:86:78:98:ec:
a0:34:0e:71:e1:02:e0:32:e9:96:dd:bc:a5:4a:63:
55:14:4a:51:b8:ef:86:27:23:fc:8f:11:2c:ee:1a:
7b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:40:44:78:31:6D:6D:74:4E:B0:C5:FB:9F:8B:52:15:BB:DA:25:D6
X509v3 Authority Key Identifier:
keyid:95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:07:75:f5:37:52:16:dd:c9:3b:c4:9c:25:dd:c1:05:79:10:
78:96:14:dd:01:97:52:ef:32:36:6b:fc:77:b4:0b:2c:2a:a3:
e0:51:09:98:02:d8:19:3e:33:9d:6b:92:19:87:e6:26:2e:a8:
f0:bf:bf:20:e0:66:a3:ae:a1:6d:6a:ea:14:3b:7c:01:c3:69:
8e:c1:40:d1:bf:67:81:2f:19:8d:ee:12:f1:ac:f5:5a:9c:70:
9f:fc:03:a3:77:20:3d:28:0f:14:8a:a3:77:49:7a:44:df:52:
6f:aa:45:db:6a:c5:14:bd:95:d4:31:02:35:0a:ae:c7:31:94:
d5:73:55:45:9f:de:c8:88:34:f1:87:22:d0:e4:5b:9f:59:f2:
1d:49:f1:6a:15:2c:79:06:47:34:25:34:92:09:79:ab:ea:a3:
b6:03:ed:8a:40:3c:a5:d4:c9:33:de:f9:e0:83:c5:24:d1:62:
30:11:0c:b2:be:4e:9f:cd:40:19:d5:76:4c:c1:d3:c7:4c:97:
98:8a:5b:cf:c9:c6:04:e1:04:90:57:c9:22:56:5a:28:53:f5:
fe:27:4f:33:be:05:b3:19:d0:34:92:36:ef:d0:ab:bc:75:3f:
e8:2b:9d:1c:20:f7:46:8b:11:b7:0f:2e:99:0e:dd:74:43:b5:
ba:3b:4a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:56:32 2026 by rpki-client