Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
File: 6Md5F2XIhNCFX-0_-MPycJmpoBo.mft (raw, json)
Hash identifier: t1TxDRvGO71Ktuve5nNnh7m4EcNsmL31WkSEl9raklA=
Subject key identifier: 46:E5:F8:F3:A5:7D:85:15:3F:91:42:FE:27:F8:02:50:27:CA:91:71
Authority key identifier: E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A
Certificate issuer: /CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a
Certificate serial: 019DA30A95CD69B8E4F96CDDE7645F791422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
Manifest number: 18C3
Signing time: Sun 19 Apr 2026 00:01:12 +0000
Manifest this update: Sun 19 Apr 2026 00:01:12 +0000
Manifest next update: Mon 20 Apr 2026 00:01:12 +0000
Files and hashes: 1: 6Md5F2XIhNCFX-0_-MPycJmpoBo.crl (hash: U7kH8eXNebfFPO5T4h8zew7DnTcugC0aN+nQ3R3+1qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:95:cd:69:b8:e4:f9:6c:dd:e7:64:5f:79:14:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a
Validity
Not Before: Apr 19 00:01:12 2026 GMT
Not After : Apr 20 00:01:12 2026 GMT
Subject: CN=46e5f8f3a57d85153f9142fe27f8025027ca9171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7e:56:21:50:7c:2b:df:c6:a7:fc:68:fe:76:
f9:5e:ca:37:a3:68:ee:66:80:27:4c:49:e7:59:a6:
01:f2:82:24:09:b1:0c:e8:cf:d4:c7:45:5f:4c:02:
c2:9b:26:94:8e:99:76:99:df:6b:7f:ca:42:e6:12:
98:7a:13:35:aa:84:b5:52:47:64:56:8f:ea:0f:01:
86:7b:3f:c4:e7:26:29:15:93:7b:7f:a9:b6:ea:5b:
87:b8:78:c6:13:ca:19:91:1f:25:ea:41:a4:ef:54:
75:d7:f4:ca:dd:39:f2:57:6d:34:4a:6c:a1:ce:42:
b1:b7:11:21:42:a0:ea:5a:f0:d0:f6:f5:1c:07:3b:
43:6d:8e:3f:a1:2c:3a:c0:ae:f1:5f:be:7b:e6:d5:
d5:b5:63:15:c8:91:f3:c5:dd:d7:08:d7:d1:24:2b:
18:40:9a:a2:66:87:29:47:c3:48:fa:5b:37:27:42:
a2:aa:d7:df:2a:68:26:b8:9d:99:8e:65:cf:7a:22:
af:60:bd:6d:f4:e6:c7:66:1f:27:ac:fd:bf:fe:35:
10:d6:b0:66:7f:57:39:5a:e8:90:c7:ba:35:4c:b5:
23:62:6f:fb:2b:bd:de:9d:f2:8f:8f:f1:3c:5b:05:
28:81:f0:03:33:d6:56:a3:7b:b6:8b:44:83:6b:cd:
fc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E5:F8:F3:A5:7D:85:15:3F:91:42:FE:27:F8:02:50:27:CA:91:71
X509v3 Authority Key Identifier:
keyid:E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:70:95:a6:41:d1:08:49:f0:bd:02:da:40:ef:28:7a:af:fd:
a9:a3:26:7f:aa:b2:da:82:9e:8f:2e:4b:e6:b0:18:65:5e:54:
f8:e6:ce:87:09:16:7b:dc:2f:1f:d0:39:92:54:e1:5d:45:0b:
ef:f7:8b:20:aa:50:86:98:f5:28:37:f9:dc:28:6c:51:39:4c:
76:4b:a7:79:a7:7e:81:1c:9c:f5:3a:c4:e8:34:7c:9d:7c:ff:
5a:8f:0a:8b:e5:44:65:4f:02:96:9a:a8:e1:ed:8b:c8:af:70:
95:a5:c0:74:b3:66:98:f1:4c:7e:8b:e2:ed:63:54:25:be:98:
cd:b1:1e:fa:68:62:20:c8:49:5e:8f:c1:25:e1:1b:9c:1b:c0:
34:a9:8e:64:c6:f6:1c:98:35:d7:b5:46:92:65:ed:d9:a4:e1:
76:55:73:02:37:8d:a4:2e:81:3f:eb:98:74:6f:a9:14:79:9b:
43:87:8d:9c:9a:90:6e:5d:55:64:ab:d1:07:7b:14:b7:6b:2f:
ec:6f:4b:38:c5:75:9b:5a:d5:cb:6a:e6:68:6a:3a:95:c7:7e:
aa:ea:0f:da:15:60:a9:5c:94:f8:03:31:06:f8:7e:32:2b:71:
ba:0c:c1:2b:ff:31:32:48:8f:62:ca:81:84:c0:2e:b7:4a:09:
62:03:85:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:54:07 2026 by rpki-client