Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
File: b_rHiuobz0OKYe-RUCRI9glkHS0.mft (raw, json)
Hash identifier: mpSyadm7jvRnDWMisiF/ph1HDkdhEPxUMNfqGG+6LWw=
Subject key identifier: A7:BA:F4:1D:73:54:4D:28:7A:BF:F0:31:97:63:B0:A2:6E:E1:B9:CB
Authority key identifier: 6F:FA:C7:8A:EA:1B:CF:43:8A:61:EF:91:50:24:48:F6:09:64:1D:2D
Certificate issuer: /CN=6ffac78aea1bcf438a61ef91502448f609641d2d
Certificate serial: 019D984FF5850DC8FBD16563973827009870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
Manifest number: 1552
Signing time: Thu 16 Apr 2026 22:01:10 +0000
Manifest this update: Thu 16 Apr 2026 22:01:10 +0000
Manifest next update: Fri 17 Apr 2026 22:01:10 +0000
Files and hashes: 1: b_rHiuobz0OKYe-RUCRI9glkHS0.crl (hash: Y0Nc5m5ePYCwNidMgYdAcgKhtp0tHVvhTtd0puf5Ah4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:f5:85:0d:c8:fb:d1:65:63:97:38:27:00:98:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffac78aea1bcf438a61ef91502448f609641d2d
Validity
Not Before: Apr 16 22:01:10 2026 GMT
Not After : Apr 17 22:01:10 2026 GMT
Subject: CN=a7baf41d73544d287abff0319763b0a26ee1b9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:15:a7:41:ab:fd:f0:10:f3:8e:1a:34:a1:37:
5b:70:00:64:b7:91:b5:11:59:9d:30:bd:a7:bb:81:
b0:98:cd:5d:03:c1:7c:7b:4c:88:6f:3b:8b:86:b9:
5a:f6:85:d5:2b:ca:de:3b:c0:73:da:63:c7:f1:4e:
b6:38:43:3e:42:37:0a:05:f2:54:cb:0b:08:b3:60:
38:6a:11:3a:65:9e:c4:ad:29:2b:ea:82:e9:dc:56:
d0:8a:0a:7e:d4:21:89:0e:c5:c1:41:24:b1:be:60:
5b:7f:74:58:9c:99:2b:91:dd:1b:a0:81:0d:97:30:
66:71:29:e4:c5:19:77:99:46:1b:63:bb:ba:ea:5d:
79:a0:61:bd:34:55:00:a5:4e:b0:0a:e1:36:f9:b3:
58:26:bb:41:60:10:6e:62:2b:24:41:a3:22:a9:5f:
1b:85:9b:5b:9a:c2:92:8c:9c:01:55:db:7a:90:0e:
88:6b:86:0b:fa:fd:33:cb:9f:ea:54:2e:21:ba:41:
f8:61:59:b9:b5:77:65:14:a6:41:a8:90:6d:96:0c:
46:c2:d0:99:73:34:cf:9f:b7:0d:42:07:13:3f:b4:
48:6b:9c:19:35:49:4f:27:6e:e6:41:35:28:67:5b:
38:53:e6:d9:3b:e1:1e:ec:47:2f:9a:a8:1e:db:fd:
36:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BA:F4:1D:73:54:4D:28:7A:BF:F0:31:97:63:B0:A2:6E:E1:B9:CB
X509v3 Authority Key Identifier:
keyid:6F:FA:C7:8A:EA:1B:CF:43:8A:61:EF:91:50:24:48:F6:09:64:1D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fc:69:49:34:4d:2b:20:72:7f:21:1a:96:16:b2:1f:61:1d:
e3:8b:09:e0:de:56:b4:8e:13:d6:b1:a1:05:cb:82:51:df:03:
1f:34:8e:90:81:92:30:e4:39:cd:43:9d:49:21:36:b2:5d:b5:
4c:29:9c:32:d5:5e:81:3d:57:31:2c:a1:1e:6a:c9:cf:c9:f9:
8b:eb:48:90:3b:bb:f9:d4:3f:7e:11:e2:87:ec:38:1c:4d:16:
de:13:93:d1:cf:87:43:fc:92:19:40:5b:04:0b:26:f5:ac:ae:
57:97:3b:a4:a2:2a:84:1e:bb:11:ab:50:4c:17:6e:22:9b:00:
17:21:6e:71:bf:b5:46:4f:25:3d:05:d2:f9:f0:74:5e:87:c2:
fe:45:d9:bf:4a:ac:7f:eb:c6:d7:d6:dc:01:8f:07:85:ed:d4:
e4:98:72:2d:81:cf:e3:f6:9a:c9:b6:25:8d:5b:fa:48:5f:cc:
aa:cb:5f:a9:4e:9c:a4:81:e4:2b:4e:a6:a5:dc:1e:74:9d:95:
35:f3:3b:00:f2:57:43:64:ec:cc:3c:00:90:97:98:4d:83:92:
20:9b:8a:6d:f1:6f:de:bc:f4:13:fe:dd:a9:bb:7f:21:5f:ad:
c0:c9:21:fb:2a:e9:23:79:60:a5:9b:af:e4:79:e6:01:64:8a:
c0:f1:c4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:34 2026 by rpki-client