Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
File: RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft (raw, json)
Hash identifier: I2uEl8JiHziRkAjOXHhRhfro9w/KQJFPCzUwr4/BhS8=
Subject key identifier: 7F:87:FF:43:CC:C9:30:04:EE:A5:D3:7C:F8:E7:8A:34:31:A2:31:B0
Authority key identifier: 46:54:F3:E6:92:7E:C4:C7:C9:7D:0F:23:6A:8C:24:53:4A:7F:CD:D4
Certificate issuer: /CN=4654f3e6927ec4c7c97d0f236a8c24534a7fcdd4
Certificate serial: 019D99D02E160604D5DE2924010391FDD410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
Manifest number: 0A08
Signing time: Fri 17 Apr 2026 05:00:50 +0000
Manifest this update: Fri 17 Apr 2026 05:00:50 +0000
Manifest next update: Sat 18 Apr 2026 05:00:50 +0000
Files and hashes: 1: RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl (hash: /oh9WM9k8mYiKpD1G0GqYThZOtURhbXulJM/9cZ1fhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:2e:16:06:04:d5:de:29:24:01:03:91:fd:d4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4654f3e6927ec4c7c97d0f236a8c24534a7fcdd4
Validity
Not Before: Apr 17 05:00:50 2026 GMT
Not After : Apr 18 05:00:50 2026 GMT
Subject: CN=7f87ff43ccc93004eea5d37cf8e78a3431a231b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:c0:3e:f9:b8:20:78:70:9a:20:65:62:a2:
93:2f:11:78:83:ef:5a:37:70:38:56:12:22:06:6a:
56:08:7f:86:32:cb:92:20:a3:f8:ea:cd:dc:9f:8c:
ce:9c:e2:bb:82:c2:b9:0c:a0:4b:58:71:3a:08:59:
9c:60:58:d5:90:d2:b0:ea:8f:69:9c:fd:10:44:cd:
f2:f8:d1:d5:cb:56:12:eb:d8:13:c1:c2:e1:92:7a:
bb:7c:81:70:31:5b:b6:d6:7d:21:3c:fc:c1:91:24:
0f:13:ef:ea:56:28:d7:81:f0:e4:51:2d:21:78:eb:
cf:ec:4e:c3:01:01:76:d4:d8:2d:84:61:f7:6a:27:
0b:2e:e2:a0:aa:37:ca:b7:f5:85:a5:ca:4e:56:49:
c6:fb:02:e8:5c:63:6f:7d:20:94:65:72:32:99:f5:
18:36:5f:3e:e3:17:47:2c:cc:4c:24:fe:1b:b3:87:
43:7a:3d:c2:55:e6:dd:5e:e4:8a:98:69:b0:17:b9:
7b:4b:38:be:9a:ef:c8:bc:9b:b2:32:01:f6:c6:a9:
43:fa:27:3b:7d:a2:29:40:18:95:4b:bc:40:e8:0d:
ed:8e:54:65:eb:aa:44:0d:0b:77:18:c3:24:ad:f9:
91:8f:1f:7d:86:a9:09:82:6c:a4:82:a5:28:10:f3:
30:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:87:FF:43:CC:C9:30:04:EE:A5:D3:7C:F8:E7:8A:34:31:A2:31:B0
X509v3 Authority Key Identifier:
keyid:46:54:F3:E6:92:7E:C4:C7:C9:7D:0F:23:6A:8C:24:53:4A:7F:CD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4f:ab:1d:6e:13:11:29:cd:a0:8e:4b:b3:17:26:a9:45:2b:
09:e6:24:72:e6:80:4b:46:d3:97:9f:aa:a2:3f:8d:5e:1b:11:
2f:51:cc:63:29:0e:4c:6e:dc:9f:60:1c:0a:cc:d2:e3:2a:66:
63:31:6f:31:11:0f:34:3a:9e:6b:9d:f3:f7:aa:76:1e:9d:70:
89:4b:8a:78:4a:84:6f:fc:04:4a:71:fe:f8:f4:5c:91:d9:41:
8f:fb:5a:84:0e:9e:d9:ff:1a:1e:32:15:71:01:7c:e7:2c:c9:
c1:2d:bc:78:91:47:2b:20:9f:c1:7d:b4:7d:ba:36:63:a1:97:
8f:03:15:94:0b:eb:02:13:54:ed:3a:fb:aa:82:6c:9a:c7:41:
6d:09:f3:e4:c6:0a:46:a9:cb:4a:21:0a:f8:99:67:05:ca:11:
17:0a:dc:fe:64:42:07:20:11:4f:0e:de:41:10:b6:d5:49:f1:
ea:b5:7b:6d:ba:e4:67:da:a9:64:0c:1d:0b:14:ca:3c:11:fb:
3c:6a:ff:d2:fe:00:ab:2e:33:11:1e:51:af:30:3b:e7:dc:03:
44:1b:70:08:c8:aa:0d:1b:e9:36:61:ee:0c:25:68:b5:5d:e0:
4f:c1:1a:ff:94:ae:28:9d:33:85:dd:1a:22:af:00:07:81:b4:
1b:d3:27:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:15 2026 by rpki-client