Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
File: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft (raw, json)
Hash identifier: vPy2hXJoyhKAbJRCMHrxd2/7OJlJ97YC2XxGQ8kUlYM=
Subject key identifier: 29:93:4B:15:6E:B9:05:C4:E6:72:94:16:BE:EE:2E:10:E9:76:8F:E3
Authority key identifier: 5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B
Certificate issuer: /CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
Certificate serial: 019D98F48B47721AF5365BBDB84DA2650BF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
Manifest number: 139A
Signing time: Fri 17 Apr 2026 01:00:56 +0000
Manifest this update: Fri 17 Apr 2026 01:00:56 +0000
Manifest next update: Sat 18 Apr 2026 01:00:56 +0000
Files and hashes: 1: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl (hash: VEEPaV15PM0sCh9FTh/EQBhBkQQ6c50Wz5wd4zz0E7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:8b:47:72:1a:f5:36:5b:bd:b8:4d:a2:65:0b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
Validity
Not Before: Apr 17 01:00:56 2026 GMT
Not After : Apr 18 01:00:56 2026 GMT
Subject: CN=29934b156eb905c4e6729416beee2e10e9768fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d5:ad:d2:98:21:74:1b:2e:d4:72:d9:9c:d3:
b4:dd:50:88:64:71:f4:df:06:30:31:ff:89:7c:2b:
62:9e:6d:eb:43:c3:73:ed:ed:0c:14:d0:cb:f2:1a:
7b:d9:df:2a:51:cb:c4:0c:c7:e0:79:e8:23:aa:f9:
17:1a:c5:49:81:c3:fc:4e:40:e8:03:bd:66:4d:dd:
bb:b5:37:87:0a:92:d5:71:00:2a:af:ca:21:ab:56:
dd:e8:75:cb:96:cf:6e:34:f0:10:1f:b4:2c:ce:a4:
cb:84:c9:c1:2a:c9:73:20:20:d7:af:b5:a9:5e:80:
15:78:fe:e4:91:7b:c2:46:bf:38:bc:bd:2c:73:70:
9c:d9:77:97:78:74:cb:f8:e8:55:10:48:d4:68:9a:
23:28:e2:a8:05:f6:60:01:77:ca:de:21:76:c3:9d:
28:00:28:3f:f1:b6:0a:74:99:1e:5c:7d:41:88:92:
dd:b0:28:64:d6:9b:51:c5:0c:96:8c:a8:55:22:a5:
c5:65:cc:83:db:bf:6f:c7:f6:98:fa:10:69:48:98:
df:af:35:f5:56:ea:e9:a8:72:ec:9a:6d:2a:0a:87:
44:59:dd:73:bb:54:db:84:88:d4:74:9b:7b:ce:30:
c6:24:9d:11:7e:ef:f1:5b:11:8b:07:78:25:56:46:
0d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:93:4B:15:6E:B9:05:C4:E6:72:94:16:BE:EE:2E:10:E9:76:8F:E3
X509v3 Authority Key Identifier:
keyid:5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:5d:46:d1:a5:4b:d1:8d:c7:0f:3e:69:27:d0:25:3b:b0:3b:
2c:c0:20:a9:09:13:ea:4c:2b:1f:9f:d2:3b:ef:a7:54:eb:cd:
95:7e:bc:61:3c:b0:7a:0e:b3:7d:6b:f3:e9:8f:f9:22:d0:dc:
e8:66:e9:05:32:5d:54:b0:21:d7:f5:c8:70:69:af:2f:e0:ce:
d6:84:4e:68:a7:bf:ed:e7:df:1d:e5:51:a7:0a:07:77:b9:a7:
b0:6a:37:e1:f5:05:24:db:ae:d3:40:13:d6:a4:ab:9f:b9:8f:
a8:99:bb:6f:ca:ec:6d:02:e8:c8:38:62:1d:35:33:91:b3:70:
9b:07:8a:de:22:97:29:8c:5c:7b:3b:38:cb:50:78:50:33:14:
62:06:66:79:7a:c0:30:b4:89:c7:98:1f:84:aa:d0:50:9b:58:
2f:bf:5e:c4:df:8b:e8:bc:d3:da:5c:e6:6a:e0:5e:ac:fa:df:
30:6a:49:71:e0:bd:d7:90:bf:f9:7e:6e:8c:ea:08:56:ce:f5:
98:6b:21:d8:89:a1:ac:e2:5b:cf:35:5a:f1:c2:b6:15:dc:75:
d7:ef:88:24:d9:c2:4f:73:cb:b8:0e:73:3a:9b:42:4b:de:4c:
b2:41:33:cd:34:81:9f:a9:c7:3e:be:ec:25:7c:79:25:d3:0d:
62:2e:7c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:56:56 2026 by rpki-client