Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
File: d4LgCn_HYX2UJguB_SKjo_PcaG0.mft (raw, json)
Hash identifier: LPGF1gxq8RiPb4HVAbkTfcs4nPgOGPTA5VlPEyyhuhQ=
Subject key identifier: E1:0A:8E:26:2D:BD:5C:3B:01:6B:1A:24:E6:E8:8F:20:6A:40:7B:14
Authority key identifier: 77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
Certificate issuer: /CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Certificate serial: 019D98F4D98497F0B1F2D36A79F1A88E6CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
Manifest number: 0D4F
Signing time: Fri 17 Apr 2026 01:01:16 +0000
Manifest this update: Fri 17 Apr 2026 01:01:16 +0000
Manifest next update: Sat 18 Apr 2026 01:01:16 +0000
Files and hashes: 1: d4LgCn_HYX2UJguB_SKjo_PcaG0.crl (hash: NlBidbkr3bdVfcpxZHa70QlKMKf3U81+TQzDkzrJp6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:d9:84:97:f0:b1:f2:d3:6a:79:f1:a8:8e:6c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Validity
Not Before: Apr 17 01:01:16 2026 GMT
Not After : Apr 18 01:01:16 2026 GMT
Subject: CN=e10a8e262dbd5c3b016b1a24e6e88f206a407b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e0:44:23:ce:40:8d:88:8b:cc:c8:c0:33:37:
ec:44:de:46:47:ff:53:a2:d4:eb:0c:9f:09:d6:3a:
4c:a4:3c:0b:5a:f6:ae:0f:bd:b4:01:8b:1b:c0:f4:
3d:73:bb:b8:ff:a7:51:8e:90:d7:35:07:a7:74:50:
f3:2b:fa:4a:05:59:36:61:92:b7:76:3a:1a:c6:fa:
16:42:29:db:a9:99:76:c6:96:2f:ce:91:a2:4b:c8:
9b:33:7f:3e:b5:28:f2:30:bf:be:78:33:f5:d7:d6:
78:3d:75:09:d1:dc:51:d2:b9:71:88:1d:4d:4a:d9:
d6:70:cb:8e:40:7c:19:66:1e:b1:b0:7f:36:cb:12:
df:73:30:2c:61:8c:b0:d2:24:f8:a1:45:aa:63:6a:
50:ab:0b:bf:71:b9:4e:8b:d0:f5:ba:23:3e:34:35:
80:0b:46:a5:f4:ea:35:f0:98:3e:59:72:8c:f7:27:
ea:e8:99:d5:c2:6e:f7:df:b8:64:12:bd:37:60:5d:
02:88:2d:19:1c:08:9a:09:7f:01:77:3c:3b:90:d8:
d4:dd:f5:cb:16:9d:b0:23:c2:2b:e6:60:ec:10:1a:
18:a5:c1:31:41:31:2f:36:fd:e2:26:18:e6:1d:d1:
ec:41:22:13:a6:ec:eb:87:a1:07:f0:c4:d7:0b:a6:
03:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0A:8E:26:2D:BD:5C:3B:01:6B:1A:24:E6:E8:8F:20:6A:40:7B:14
X509v3 Authority Key Identifier:
keyid:77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:64:f0:8a:e2:34:4c:d0:81:30:c6:06:d2:8a:aa:27:7f:ef:
78:9f:1d:3f:50:eb:46:23:ab:7f:56:a7:46:96:97:d0:19:4f:
06:9b:c6:fb:32:f8:f8:68:2f:3f:08:ce:57:33:04:2c:29:8a:
8f:c3:32:99:fb:43:d1:8e:66:1c:28:9d:cd:b5:e9:aa:4c:a9:
ae:9e:b2:fd:8e:0c:66:81:97:53:cd:e5:7d:54:13:20:98:8e:
61:88:e9:01:68:2c:8d:b0:b7:18:53:9b:5a:7f:bd:a6:26:54:
d1:5d:cc:74:92:c4:05:0b:21:97:c0:51:41:b1:27:1f:22:d4:
d7:28:83:34:e6:1e:12:d6:93:2b:e7:ec:1a:b5:ae:a6:e1:4c:
f6:16:f7:6a:4d:db:1b:fa:d0:1b:72:e4:c0:65:e7:26:34:ec:
86:32:ee:aa:15:36:6a:18:f4:2f:48:63:61:89:34:2c:7a:5f:
62:50:c4:00:c9:d0:1a:08:96:64:35:3d:64:a0:74:d1:f1:be:
ed:b6:a3:24:ea:11:bf:ac:09:89:1b:10:ed:a4:4f:2b:e8:de:
bb:ed:1d:c6:1d:70:20:e2:ca:33:b6:ee:fc:94:f8:fc:ac:27:
96:b2:a3:e4:b3:27:93:dc:6d:df:48:cb:f9:97:68:6b:0c:8a:
ed:f9:cf:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:58:22 2026 by rpki-client