Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
File: mfseX91w4MDmCIWjBYH-DAJBDX0.mft (raw, json)
Hash identifier: zm8eSSx1IkgKs1L/tsSxlNm3JgSUSLXRWm8Krful/dw=
Subject key identifier: 6A:32:E2:34:73:DF:EB:34:58:4C:A0:05:80:CD:78:BA:3C:E1:56:07
Authority key identifier: 99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D
Certificate issuer: /CN=99fb1e5fdd70e0c0e60885a30581fe0c02410d7d
Certificate serial: 019D98F48ED555E5B893958A1204FA76A015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 01:00:57 +0000
Manifest this update: Fri 17 Apr 2026 01:00:57 +0000
Manifest next update: Sat 18 Apr 2026 01:00:57 +0000
Files and hashes: 1: mfseX91w4MDmCIWjBYH-DAJBDX0.crl (hash: EpXbiS3UEMEP6YkZKgNHs6y/YAIRzAlHF8ggZmR+0zA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:8e:d5:55:e5:b8:93:95:8a:12:04:fa:76:a0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb1e5fdd70e0c0e60885a30581fe0c02410d7d
Validity
Not Before: Apr 17 01:00:57 2026 GMT
Not After : Apr 18 01:00:57 2026 GMT
Subject: CN=6a32e23473dfeb34584ca00580cd78ba3ce15607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:25:8c:b1:bf:9f:49:a4:fd:03:78:f9:4e:38:
1e:f8:5b:80:4e:48:4d:97:ac:58:f1:33:49:f3:47:
11:5f:15:fc:3d:f2:c4:36:73:8e:81:e2:f0:3f:54:
3f:25:ba:12:39:dd:37:2d:02:6a:cf:af:a3:d4:83:
96:bd:6d:fa:84:d2:38:bf:c8:f9:84:66:5d:4c:09:
7c:18:13:e4:6a:af:cb:28:cb:99:7f:d2:21:a5:29:
7f:b6:3b:8a:5c:63:d9:a3:81:11:88:98:5e:2d:4e:
3a:01:0d:e5:f2:f1:35:f1:4f:39:41:5b:5f:0f:f5:
7b:10:99:34:2e:6b:79:3e:8b:af:55:df:03:0e:44:
05:54:2c:86:96:68:f5:a3:4a:bc:b1:ae:6d:88:74:
cd:d3:97:29:58:d0:5f:89:55:ea:30:50:7c:13:ae:
24:2a:2d:76:39:5f:6a:19:d6:73:3f:cf:69:d6:b7:
7d:0e:4a:aa:ba:4b:08:5f:9f:df:7f:d8:21:02:1f:
e0:35:fe:2c:01:f0:21:df:83:f3:98:36:7e:bd:34:
b5:97:72:b9:68:68:e5:22:32:a9:de:23:bc:30:d8:
09:15:04:a0:cc:35:32:f9:66:49:5b:b8:82:c4:21:
f8:1c:5a:e4:5a:81:b4:4d:e6:b4:18:58:3c:04:f9:
e6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:32:E2:34:73:DF:EB:34:58:4C:A0:05:80:CD:78:BA:3C:E1:56:07
X509v3 Authority Key Identifier:
keyid:99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:bc:23:da:2d:85:40:19:6f:52:b4:82:05:46:3f:f9:dc:b2:
88:f4:74:5e:1a:2f:4c:f6:52:f6:a3:30:b0:b9:bf:1c:de:bf:
41:11:83:66:be:47:a7:2e:23:6b:11:c7:e2:5d:43:75:97:42:
b6:0a:3e:a1:f5:19:34:dd:78:b8:32:12:48:28:44:f1:b3:d1:
62:6b:de:e4:a3:b8:53:6c:09:ae:61:60:a0:b0:3b:37:c9:87:
37:d8:4d:aa:8f:27:ad:8b:bd:f3:ef:3a:76:08:0d:49:62:24:
a5:3f:08:fd:b7:bf:a7:27:d4:ac:be:91:7f:a6:d8:8e:8c:bf:
10:c5:72:8f:48:db:12:8c:a8:97:64:50:dd:20:c3:f6:41:07:
24:69:3c:41:fe:3f:87:64:c2:9d:19:ad:aa:6e:2c:a7:b3:d9:
11:1e:52:28:0a:3b:de:f8:c5:c7:0b:cc:62:a9:43:3c:f0:c8:
00:30:fc:2b:f9:bc:5a:45:e6:3f:08:b9:48:7c:9c:c5:21:03:
cd:ee:5f:78:75:2d:06:64:61:e3:03:1a:bf:9a:67:a1:e4:36:
f9:76:fb:e3:84:ff:b3:8c:ca:69:04:cf:19:6e:bf:cc:89:40:
40:55:eb:67:f0:ca:f9:99:24:97:9c:d6:4d:61:6d:ae:42:c6:
3a:6c:46:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:31 2026 by rpki-client