Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
File: fEajytgJZa-Gy7AIPftAqy_xus8.mft (raw, json)
Hash identifier: JveU3EQslU9be39alALcbVyz+OdD6AQrdmzMho1ExI4=
Subject key identifier: 51:6A:AD:AC:B0:A0:B8:17:21:98:38:62:DD:40:EB:FB:91:4B:9D:FF
Authority key identifier: 7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF
Certificate issuer: /CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
Certificate serial: 019DA41D2E5B9EC0974D574916C1F0174C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
Manifest number: 12F1
Signing time: Sun 19 Apr 2026 05:01:08 +0000
Manifest this update: Sun 19 Apr 2026 05:01:08 +0000
Manifest next update: Mon 20 Apr 2026 05:01:08 +0000
Files and hashes: 1: fEajytgJZa-Gy7AIPftAqy_xus8.crl (hash: m7yTbknHTIOHEGBZARaKZPLz02bcJ3xeQjJs9e1SE30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:2e:5b:9e:c0:97:4d:57:49:16:c1:f0:17:4c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
Validity
Not Before: Apr 19 05:01:08 2026 GMT
Not After : Apr 20 05:01:08 2026 GMT
Subject: CN=516aadacb0a0b81721983862dd40ebfb914b9dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dc:51:ed:71:31:9c:52:98:3b:75:9b:40:6a:
59:7e:df:7a:15:1b:c5:68:67:50:be:d4:aa:29:31:
f9:30:3d:82:f4:d8:75:56:f4:17:d8:72:b9:16:e8:
08:01:33:95:28:f3:84:cb:3f:bd:93:d6:f1:7d:ff:
7b:97:df:d1:5e:12:4e:96:5e:d4:b9:80:ea:38:cc:
7e:a0:28:30:9d:c8:c4:79:42:db:35:04:08:8a:37:
b2:8c:16:c7:39:63:6e:ad:ff:a8:eb:08:ee:c4:fe:
ec:b0:40:0d:95:4b:7d:95:c3:e4:8c:b0:26:f6:1e:
2f:03:4d:87:39:f6:e7:6e:97:27:cb:eb:b5:b3:a9:
92:c1:33:8d:04:47:66:ce:60:a2:e6:17:ec:2e:bb:
cf:54:4d:3f:5d:f1:15:d2:b3:4f:cf:dd:a6:ef:f9:
62:c0:a1:00:3e:d8:b7:14:c2:94:f1:ab:7a:26:50:
a5:93:7d:f0:1b:a4:9e:4f:de:88:13:29:cc:82:d8:
cb:68:7c:96:0f:a1:75:08:58:d1:73:8f:e4:1b:3c:
5f:6f:56:ab:cf:0a:03:c9:0e:d0:fa:3f:97:f5:36:
94:51:77:68:e2:08:25:60:76:c9:22:5a:d5:3d:c2:
f4:14:0e:3d:30:e2:70:b5:0f:c1:98:f8:f3:fb:ff:
48:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6A:AD:AC:B0:A0:B8:17:21:98:38:62:DD:40:EB:FB:91:4B:9D:FF
X509v3 Authority Key Identifier:
keyid:7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:cc:5b:ad:3f:64:e0:1a:cd:08:fc:c6:9f:6f:c3:89:9a:35:
5c:c9:1d:a6:4b:22:1b:3c:97:c1:cb:4b:26:43:0d:7f:fc:24:
db:1d:65:d0:c1:c8:79:cb:a6:34:a1:aa:7d:f4:1d:51:0b:29:
f4:55:89:3d:54:b3:bf:79:36:1f:dd:cb:d8:b4:61:14:80:e4:
37:43:1a:bf:01:f2:95:0a:35:ad:b4:f9:0d:0b:4d:fe:49:13:
7e:13:89:65:bd:0a:54:b0:79:4e:9b:fc:b9:60:8d:54:51:58:
e5:d2:43:8f:9c:f3:2c:ad:e2:9e:c6:ec:f2:a2:d1:30:74:42:
c8:8e:df:e1:a2:81:cd:65:6a:96:20:40:37:3b:97:4e:fc:75:
50:3e:05:2a:61:0e:1f:d1:4d:f1:fe:c6:df:83:aa:63:1c:fc:
f3:2f:4d:a9:86:bd:5a:d0:4e:b5:72:10:4e:9e:0e:26:87:b2:
3b:24:94:17:07:4a:c3:51:84:a2:ed:87:9b:74:91:a4:da:a8:
1c:0b:7b:bf:d1:27:27:29:2d:28:12:2c:86:56:8e:c4:e4:a1:
8d:7e:5c:0c:b5:aa:78:7f:50:21:36:ea:3e:4c:7b:a5:63:1b:
f0:bb:17:cd:5e:01:37:a6:33:ad:f0:4e:47:c6:7b:d0:a8:8b:
39:28:90:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kHS5bnsCXTVdJFsHwF0xlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNDZhM2NhZDgwOTY1YWY4NmNiYjAwODNkZmI0MGFiMmZm
MWJhY2YwHhcNMjYwNDE5MDUwMTA4WhcNMjYwNDIwMDUwMTA4WjAzMTEwLwYDVQQD
Eyg1MTZhYWRhY2IwYTBiODE3MjE5ODM4NjJkZDQwZWJmYjkxNGI5ZGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9xR7XExnFKYO3WbQGpZft96FRvF
aGdQvtSqKTH5MD2C9Nh1VvQX2HK5FugIATOVKPOEyz+9k9bxff97l9/RXhJOll7U
uYDqOMx+oCgwncjEeULbNQQIijeyjBbHOWNurf+o6wjuxP7ssEANlUt9lcPkjLAm
9h4vA02HOfbnbpcny+u1s6mSwTONBEdmzmCi5hfsLrvPVE0/XfEV0rNPz92m7/li
wKEAPti3FMKU8at6JlClk33wG6SeT96IEynMgtjLaHyWD6F1CFjRc4/kGzxfb1ar
zwoDyQ7Q+j+X9TaUUXdo4gglYHbJIlrVPcL0FA49MOJwtQ/BmPjz+/9I4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFqraywoLgXIZg4Yt1A6/uRS53/MB8GA1UdIwQY
MBaAFHxGo8rYCWWvhsuwCD37QKsv8brPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkVhanl0Z0paYS1HeTdBSVBmdEFxeV94dXM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNzNiY2YtNzlkNi00ODYzLTliZjAt
ZDhjOTY0NTkxYWZhLzEvZkVhanl0Z0paYS1HeTdBSVBmdEFxeV94dXM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zNzNiY2YtNzlkNi00ODYzLTliZjAtZDhjOTY0NTkxYWZh
LzEvZkVhanl0Z0paYS1HeTdBSVBmdEFxeV94dXM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFcxbrT9k
4BrNCPzGn2/DiZo1XMkdpksiGzyXwctLJkMNf/wk2x1l0MHIecumNKGqffQdUQsp
9FWJPVSzv3k2H93L2LRhFIDkN0MavwHylQo1rbT5DQtN/kkTfhOJZb0KVLB5Tpv8
uWCNVFFY5dJDj5zzLK3insbs8qLRMHRCyI7f4aKBzWVqliBANzuXTvx1UD4FKmEO
H9FN8f7G34OqYxz88y9NqYa9WtBOtXIQTp4OJoeyOySUFwdKw1GEou2Hm3SRpNqo
HAt7v9EnJyktKBIshlaOxOShjX5cDLWqeH9QITbqPkx7pWMb8LsXzV4BN6YzrfBO
R8Z70KiLOSiQrg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:10:36 2026 by rpki-client