Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
File: ep6pPHnsxdXKkDAazTqJLW4uHnM.mft (raw, json)
Hash identifier: l0xEcFcCkCgVSMy47EM2Ed09e4MNQrBxn03c1620ZLQ=
Subject key identifier: D5:AE:7F:27:7F:01:8B:94:D9:DA:B6:00:06:87:42:F8:6C:24:21:FB
Authority key identifier: 7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73
Certificate issuer: /CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73
Certificate serial: 019D9A3EFDCB88D86B6D85C51DAB21E637C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
Manifest number: 1397
Signing time: Fri 17 Apr 2026 07:01:52 +0000
Manifest this update: Fri 17 Apr 2026 07:01:52 +0000
Manifest next update: Sat 18 Apr 2026 07:01:52 +0000
Files and hashes: 1: ep6pPHnsxdXKkDAazTqJLW4uHnM.crl (hash: dKEGmBShM6pdz1igenq9MrMLqnRSLYfHi6+yHVTzvjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:fd:cb:88:d8:6b:6d:85:c5:1d:ab:21:e6:37:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73
Validity
Not Before: Apr 17 07:01:52 2026 GMT
Not After : Apr 18 07:01:52 2026 GMT
Subject: CN=d5ae7f277f018b94d9dab600068742f86c2421fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:b2:ba:54:5a:93:90:d4:c3:bf:d4:f6:2b:
2b:59:91:44:ad:18:a7:2a:ba:7e:0c:e2:23:4f:d9:
b4:27:d5:cf:9e:2e:66:6c:59:20:fa:57:23:d4:82:
bf:3b:f9:0b:08:6d:da:c7:eb:17:5f:48:75:e1:89:
6e:45:d6:4d:9e:b4:49:ac:92:57:4a:46:e8:8a:1b:
45:b4:da:3b:06:4b:63:f3:e2:9b:b1:3a:87:0e:95:
a4:c9:f9:67:c6:f1:33:89:4c:2c:ed:9c:c3:b4:97:
bc:87:e9:22:42:32:f7:69:ee:0a:b5:e9:12:ae:d3:
3b:28:9d:53:d9:68:ed:f0:53:66:29:e5:0e:74:55:
65:7a:9f:41:c4:c0:2f:bf:b9:77:6d:14:ab:ce:da:
58:67:46:ee:08:bc:58:56:7e:fc:2d:2b:de:5b:09:
a0:63:ae:cb:1e:9c:7f:cf:af:e9:db:9c:06:6b:53:
89:e7:30:86:3b:c2:ee:10:0f:71:93:97:78:f1:84:
c4:78:75:45:6e:5c:26:4a:b4:db:ee:71:5a:4b:f0:
3c:0f:02:83:5d:83:3b:59:3c:2d:9f:76:67:55:a4:
08:f0:3a:3d:cb:58:a1:20:e0:c5:20:18:f8:57:da:
df:0b:cf:fa:eb:c7:b8:a5:5d:68:46:91:78:9b:69:
b1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AE:7F:27:7F:01:8B:94:D9:DA:B6:00:06:87:42:F8:6C:24:21:FB
X509v3 Authority Key Identifier:
keyid:7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:98:0e:bb:d9:e8:68:b0:fa:0c:60:cb:8b:cb:a3:1f:4e:22:
03:8c:fb:b2:fb:99:70:12:ea:73:4e:6d:6f:f4:dc:3a:a7:fb:
27:a1:af:53:7b:98:30:f6:29:00:90:21:95:80:98:40:ac:fb:
8b:23:cf:9c:e2:b5:ab:53:dd:75:1d:a6:4c:57:f7:b0:82:39:
dd:8a:07:8b:c8:51:59:98:51:13:c3:22:c1:58:37:d0:70:d9:
ef:7e:6a:b7:e4:9e:0b:a3:e4:db:e2:6d:40:e8:de:8f:a3:e0:
6c:79:c2:3e:b8:e3:7a:ae:c0:86:49:2c:bb:62:e2:ac:62:3a:
38:ad:15:0a:73:96:f9:a9:ea:a3:7a:17:16:44:9f:27:96:19:
0f:f3:ed:0c:05:2b:e4:9e:b9:e2:e0:0e:19:d0:6a:45:2a:bd:
39:f1:38:71:4c:dd:08:10:8c:51:75:03:bc:39:ef:28:f9:d8:
5c:6c:7a:ec:75:34:6b:d8:ce:74:34:1f:f3:95:dc:e0:82:3e:
f5:c7:18:4d:2f:d1:23:a1:82:87:41:d1:e0:f0:b7:44:69:da:
47:90:29:03:7a:69:5e:ba:f5:f7:73:21:8a:40:84:5b:dc:6d:
e2:c5:c1:bc:2f:a1:fd:4e:85:e4:9f:78:62:4d:fa:13:90:82:
20:f3:ce:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:38 2026 by rpki-client