Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
File: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft (raw, json)
Hash identifier: BpjldWRoKx32qYX3sZ9xl3z77gOgLBTXzTwhxTiyx+Q=
Subject key identifier: AE:C9:F1:DA:74:82:6D:B6:CA:79:C2:69:A1:F1:F2:6D:82:ED:8E:A5
Authority key identifier: ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8
Certificate issuer: /CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
Certificate serial: 019D9AE28CB7DDA03B381A18C6538F4AA25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
Manifest number: 0561
Signing time: Fri 17 Apr 2026 10:00:31 +0000
Manifest this update: Fri 17 Apr 2026 10:00:31 +0000
Manifest next update: Sat 18 Apr 2026 10:00:31 +0000
Files and hashes: 1: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl (hash: 0QD6K9yt3oeJ2hDtNXIwi96IBZ9XZmA2TzSPmiOY17s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:8c:b7:dd:a0:3b:38:1a:18:c6:53:8f:4a:a2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
Validity
Not Before: Apr 17 10:00:31 2026 GMT
Not After : Apr 18 10:00:31 2026 GMT
Subject: CN=aec9f1da74826db6ca79c269a1f1f26d82ed8ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a9:ae:cd:6d:a3:62:dc:15:b3:a0:b0:31:c9:
66:6d:3f:5a:4e:11:40:95:2d:44:e5:ac:20:3e:76:
75:9c:57:ec:86:27:42:35:76:7e:9d:23:3e:54:64:
75:d3:75:bd:ac:ee:0c:4a:94:a8:ca:6b:ec:4d:37:
6e:2b:3d:81:e0:5f:f0:bb:ef:24:61:2e:cd:c5:04:
b0:79:83:0c:df:67:06:b5:c6:08:bd:45:5b:1f:06:
c7:91:54:53:a0:18:f8:8a:de:d0:58:15:fa:e0:c4:
6a:ba:9b:06:ca:76:79:bb:02:a5:52:dc:70:9f:42:
9a:0e:d7:04:cd:3c:4d:d3:42:17:b6:4d:fa:4c:11:
e7:41:78:55:cc:e1:33:bf:84:14:b1:1b:69:ea:10:
38:4f:cc:25:09:44:45:24:76:8c:34:f3:6c:5d:31:
dd:3b:45:1d:01:b7:4a:1c:1a:8e:84:4c:d2:4c:2f:
d7:96:68:07:71:8e:be:69:da:b9:a5:48:ed:d9:e9:
96:3a:09:9d:b3:52:b4:9d:61:e3:30:0b:05:da:c4:
ba:3b:85:b3:82:59:39:c9:b9:0d:7d:7d:e9:ec:65:
c4:31:0d:b2:08:71:6f:14:49:4f:ef:c3:2b:d2:6a:
80:54:01:25:b2:8a:e8:7b:42:ef:a7:36:90:17:28:
32:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C9:F1:DA:74:82:6D:B6:CA:79:C2:69:A1:F1:F2:6D:82:ED:8E:A5
X509v3 Authority Key Identifier:
keyid:ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ce:19:3e:f0:f4:52:c2:c2:b9:57:3e:59:e3:8f:68:0a:49:
a5:37:90:3d:c6:9c:87:12:a9:22:05:65:5b:49:0f:f2:fd:f6:
85:b9:35:b8:ae:8a:3d:e5:d2:c8:9c:33:2e:c6:a0:0b:6e:7c:
27:fe:39:11:9d:68:a5:93:51:20:f0:6b:b6:3c:e9:c4:e2:0b:
df:cb:a9:3e:a4:7e:61:be:23:a1:f9:af:14:56:db:15:0e:f1:
a3:1a:97:a6:cd:0f:0c:3a:50:7f:cf:af:fa:f5:8d:4f:8b:17:
fe:50:0e:8a:be:80:13:a3:db:47:2d:a0:5a:09:8e:63:40:0b:
4b:74:af:12:b0:3f:8c:ed:3e:12:d1:1c:d2:a6:97:06:a8:d0:
63:97:b1:eb:26:51:66:eb:b3:49:05:15:a4:15:a1:42:07:b9:
58:ff:2a:bb:41:76:c0:f3:13:e2:f5:90:13:b9:69:41:03:a5:
eb:49:a8:56:49:ea:64:c3:43:64:48:b8:27:3a:fa:94:12:10:
db:7a:fd:19:f2:a2:3f:0e:bf:0a:6f:dc:66:f3:63:25:ac:46:
9e:2d:ad:16:81:f6:78:9c:a6:fc:c7:8e:c1:48:db:e4:01:bd:
88:56:76:0a:6b:55:a7:49:eb:2c:81:4d:e2:be:e2:65:1c:b8:
58:5f:8d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:12 2026 by rpki-client