Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
File: tt41SvltyILzXBLU9fpnUHY6tyA.mft (raw, json)
Hash identifier: plLCtmhUjd/Yz9S4MklUcTmsryA6oxBQK/iSy90ZZSI=
Subject key identifier: D1:F0:FB:43:58:E5:08:B2:DD:F2:83:59:A3:96:3D:58:0D:EE:DE:E7
Authority key identifier: B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
Certificate issuer: /CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Certificate serial: 019D98F52F4362180193BECCA34BA36C5BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
Manifest number: 0FE7
Signing time: Fri 17 Apr 2026 01:01:38 +0000
Manifest this update: Fri 17 Apr 2026 01:01:38 +0000
Manifest next update: Sat 18 Apr 2026 01:01:38 +0000
Files and hashes: 1: tt41SvltyILzXBLU9fpnUHY6tyA.crl (hash: 3qdlWsLQz1lTho3P37fjZWVD9e+4e4VS/DHj8/nRgPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:2f:43:62:18:01:93:be:cc:a3:4b:a3:6c:5b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Validity
Not Before: Apr 17 01:01:38 2026 GMT
Not After : Apr 18 01:01:38 2026 GMT
Subject: CN=d1f0fb4358e508b2ddf28359a3963d580deedee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:97:f9:3b:d4:d9:b0:f0:9f:94:93:ca:50:
e1:8f:24:39:f7:0f:d0:65:f8:93:ce:3d:ec:41:f1:
8d:3a:5c:2f:d0:82:e3:10:28:a7:95:9b:86:80:11:
bd:be:7b:91:4f:33:c2:28:56:d8:85:b0:3e:56:da:
4b:a3:33:0b:f6:55:5b:46:6d:fb:3b:88:af:59:de:
01:ec:86:79:3a:15:ee:42:c3:5e:be:a1:1c:95:e4:
e2:88:99:6d:61:54:f2:63:6f:91:f9:28:77:30:b9:
69:ea:4b:45:38:8a:c8:70:ed:f6:44:c0:85:b5:7e:
6f:8e:72:93:b6:93:68:54:06:6b:d7:99:0a:a3:c1:
a8:72:68:ab:7d:8c:4e:24:65:4a:fd:02:e7:ce:5f:
66:99:bc:71:5b:d4:ad:d7:09:f2:86:ee:60:3e:10:
81:f7:88:93:b1:b2:d0:83:cf:e2:45:b0:59:e5:35:
c5:02:ee:21:34:1f:fc:24:e4:68:5f:a2:7d:51:f9:
c8:33:90:9e:0b:1a:84:4a:d8:cf:ea:12:53:8f:f9:
76:51:bd:79:9a:53:f4:d2:4e:32:1e:44:6c:08:b1:
2c:5a:d1:00:12:6e:ff:4c:10:02:a2:4e:9a:0b:ee:
96:79:bc:6b:7f:76:3b:a0:ee:89:73:39:1b:91:b1:
d8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F0:FB:43:58:E5:08:B2:DD:F2:83:59:A3:96:3D:58:0D:EE:DE:E7
X509v3 Authority Key Identifier:
keyid:B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:13:9b:57:1e:db:d1:90:fc:c9:13:44:b2:7a:71:8e:6f:8b:
ac:9c:18:1a:81:95:17:c0:21:c8:ad:04:18:58:32:36:65:ba:
00:99:c4:40:53:9b:54:f1:b4:31:5e:ef:d4:52:9c:07:63:94:
65:56:23:6e:4f:52:85:f5:9d:e2:22:dc:e6:4b:d3:37:c2:c6:
8b:88:72:02:8e:ac:60:56:db:cb:8c:eb:4a:80:33:a0:68:37:
e2:d5:55:32:32:c5:bb:1b:51:e4:5c:f9:6f:86:2c:c6:cb:99:
e6:3e:39:0c:99:4e:58:db:7a:1d:a4:c3:a8:01:38:89:16:1d:
7c:2d:5e:c6:6d:95:45:47:7d:da:d4:72:b5:29:fc:a8:70:a3:
e6:80:55:a2:71:58:9f:47:2c:a3:43:76:a4:97:78:d3:40:fd:
da:a0:fe:65:79:af:ce:74:da:b8:97:fc:89:97:9c:ba:78:3f:
c1:73:14:6a:bf:5a:88:18:bb:b5:10:52:62:26:68:c3:b9:05:
74:b7:6a:f7:23:80:98:09:8a:58:d6:83:0e:53:4e:5e:13:a8:
fc:4a:6c:d2:c0:b5:0d:9b:b9:84:ed:c4:53:cf:c8:47:86:5f:
fe:20:b6:53:f4:be:fc:cd:06:c5:fe:12:d4:73:62:88:77:bf:
76:be:48:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:34:53 2026 by rpki-client