Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
File: 46GMDHrbmEtfd5d-CAComlHvu2M.mft (raw, json)
Hash identifier: 2C/ZY9vSV1yVV0mHFQguJ99azsKHsK0f3GtC7Zl+E9U=
Subject key identifier: 01:E6:B1:B0:DC:DF:64:B2:7A:D2:F8:36:F7:45:A9:8E:BF:3B:BD:9B
Authority key identifier: E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63
Certificate issuer: /CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63
Certificate serial: 019DA340B8039D7A988525AAED7B35B1F527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
Manifest number: 09B2
Signing time: Sun 19 Apr 2026 01:00:20 +0000
Manifest this update: Sun 19 Apr 2026 01:00:20 +0000
Manifest next update: Mon 20 Apr 2026 01:00:20 +0000
Files and hashes: 1: 46GMDHrbmEtfd5d-CAComlHvu2M.crl (hash: Df3E/UAgE8NH7vuB78xhunZr141Q2NEJdXV4i+vF2WI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:40:b8:03:9d:7a:98:85:25:aa:ed:7b:35:b1:f5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63
Validity
Not Before: Apr 19 01:00:20 2026 GMT
Not After : Apr 20 01:00:20 2026 GMT
Subject: CN=01e6b1b0dcdf64b27ad2f836f745a98ebf3bbd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:68:f3:95:14:4a:ae:ce:3e:93:59:01:44:4e:
33:9b:d0:02:3c:1d:ff:86:76:a2:4f:a3:f6:4c:1f:
00:d8:57:b6:08:c9:2e:90:f0:6a:57:cd:67:45:55:
b8:dd:5d:aa:10:be:20:b2:a4:89:8c:61:83:7b:ca:
95:59:6f:5f:79:51:a6:b9:54:08:88:9e:fb:2c:05:
bd:58:ad:cf:ee:ec:7e:57:ae:d7:f0:24:18:2e:69:
d5:4f:a2:5e:b0:d4:50:30:f1:55:7a:c7:58:fc:9c:
0e:c1:c7:42:62:20:4f:ea:9d:d7:44:26:0f:57:af:
2a:dc:cb:f3:ae:60:84:2f:81:e5:80:80:d9:e2:ea:
17:aa:0d:c0:c1:15:0d:e8:54:d5:23:11:ec:14:a2:
3b:ea:0f:cd:71:13:d3:5b:3b:f8:36:76:b6:54:5c:
9c:bf:12:1d:07:96:58:a4:37:49:c4:c9:4b:5f:67:
75:a6:de:ba:cd:d7:ab:f2:75:47:ec:78:49:4e:28:
f2:43:71:ad:fb:4f:48:78:9f:b9:c4:bb:11:f4:14:
e9:44:87:11:9f:d0:d7:e0:c9:a8:2a:c5:ad:55:05:
72:27:ee:d7:21:b6:52:45:56:89:16:a6:ec:6e:aa:
41:f5:16:db:bb:e0:2a:a6:c0:dc:46:39:3d:9c:e2:
79:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E6:B1:B0:DC:DF:64:B2:7A:D2:F8:36:F7:45:A9:8E:BF:3B:BD:9B
X509v3 Authority Key Identifier:
keyid:E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:97:1c:1b:a5:28:4d:2d:37:fa:0e:ef:ff:d7:9e:6b:d9:77:
db:ca:c6:2c:55:91:16:6d:66:4f:b4:4c:e8:3f:28:67:41:fa:
6c:44:3b:52:32:b4:3c:00:03:8a:e9:59:cc:72:68:6e:32:d6:
59:a1:e0:03:85:5b:5e:5d:48:77:4c:40:72:67:e7:05:8e:89:
69:68:60:d0:9b:4a:f8:84:62:b8:eb:42:e3:58:f5:12:f7:47:
c7:b8:7c:d2:16:67:14:ce:39:d5:a2:cf:67:5d:2e:5f:c3:57:
7b:bf:4f:88:fb:a7:41:1a:20:46:5f:bd:5e:fe:01:06:10:78:
0a:e9:b4:f6:1a:3d:ad:96:73:87:30:78:2a:f2:25:34:31:25:
7f:d1:fb:15:90:c1:34:64:a6:41:c7:60:34:18:6c:7b:5d:aa:
69:36:8d:9a:9c:a1:7b:f1:c5:e5:25:33:67:fa:40:aa:1c:7e:
f4:ef:60:4d:44:26:9a:48:9b:93:3d:38:d7:4b:94:13:0c:20:
12:ab:21:02:1b:f8:e1:d5:c3:73:77:f3:95:ab:ab:37:d1:23:
d1:78:d6:b3:61:14:f3:12:16:14:20:3b:a6:b5:74:63:70:95:
98:7b:75:a6:ae:b9:d0:06:06:10:e6:a9:09:f4:e0:ab:3f:30:
c8:e2:6b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:33 2026 by rpki-client