Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
File: RX6_qZz102gBj6f-DBEjQfXTZcA.mft (raw, json)
Hash identifier: oG1RK0Zj2I1IUqwAYcf8MXveA8PdSsTBeXVGm/pajvU=
Subject key identifier: BC:C8:E6:81:F7:48:AB:88:F5:D6:19:4A:2F:C8:DE:F6:E2:8B:6C:A0
Authority key identifier: 45:7E:BF:A9:9C:F5:D3:68:01:8F:A7:FE:0C:11:23:41:F5:D3:65:C0
Certificate issuer: /CN=457ebfa99cf5d368018fa7fe0c112341f5d365c0
Certificate serial: 019D99CFCA27391972CBC5C6B34B3CEE5735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
Manifest number: 0676
Signing time: Fri 17 Apr 2026 05:00:24 +0000
Manifest this update: Fri 17 Apr 2026 05:00:24 +0000
Manifest next update: Sat 18 Apr 2026 05:00:24 +0000
Files and hashes: 1: RX6_qZz102gBj6f-DBEjQfXTZcA.crl (hash: B4h7LWhGVg1DDMzxgx6a6cdKHdwvFZTWTkwDSlFrhdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:ca:27:39:19:72:cb:c5:c6:b3:4b:3c:ee:57:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457ebfa99cf5d368018fa7fe0c112341f5d365c0
Validity
Not Before: Apr 17 05:00:24 2026 GMT
Not After : Apr 18 05:00:24 2026 GMT
Subject: CN=bcc8e681f748ab88f5d6194a2fc8def6e28b6ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:98:d4:07:6b:17:95:2d:14:f7:e0:be:78:
5a:b6:4f:fb:a5:62:bc:06:a0:4b:26:22:63:36:df:
29:58:e3:df:0b:94:8f:a1:6f:7d:0f:7c:f1:0b:a7:
7d:43:6f:72:a9:ca:2d:fa:db:d1:11:f1:16:d7:01:
a7:a2:ca:98:e5:a4:c2:fd:42:55:4f:53:d2:0c:7a:
2a:ca:cf:52:21:40:20:dc:89:09:f3:c4:4f:46:bc:
02:24:13:f2:14:8f:c1:6a:cd:66:51:64:46:0b:62:
a3:13:04:8b:47:20:1d:a7:e4:a8:ba:6d:02:54:68:
14:7f:a2:50:48:97:0b:1c:c6:98:07:47:08:88:77:
a2:41:fb:99:e9:73:2b:1b:b0:22:09:a5:e5:66:da:
18:5e:5d:82:66:8a:84:00:89:5b:b2:48:e8:20:94:
dc:8e:d3:59:08:2d:11:57:c5:7d:fb:63:05:fa:dc:
bd:ac:bb:6b:ed:77:8a:42:8c:ee:8c:2f:00:17:da:
99:ba:1e:21:1c:5f:f7:31:f2:9a:26:5b:80:89:c7:
77:30:dc:5c:0a:92:26:d1:56:8f:31:78:9f:c8:60:
5a:20:54:35:1e:47:9a:6f:d4:c5:20:c9:31:dc:62:
8d:85:d0:fa:99:ca:c1:2b:b8:27:90:9d:94:bb:9b:
0d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C8:E6:81:F7:48:AB:88:F5:D6:19:4A:2F:C8:DE:F6:E2:8B:6C:A0
X509v3 Authority Key Identifier:
keyid:45:7E:BF:A9:9C:F5:D3:68:01:8F:A7:FE:0C:11:23:41:F5:D3:65:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:45:ca:9a:a8:c8:11:73:a3:53:bd:06:50:34:e7:be:20:f2:
f8:bc:e0:4d:fb:2b:18:3b:60:69:f3:1f:b2:e4:bc:cf:49:0a:
36:59:49:c6:8f:34:a3:d2:07:32:3a:dd:73:0c:73:b4:f8:ed:
a2:cd:03:0a:5d:b8:9e:8b:84:25:1f:c9:6d:7a:99:8a:bc:34:
65:fc:a2:00:2c:5f:c9:88:66:0b:94:90:d6:56:95:22:5a:85:
d2:4a:c5:dc:ca:08:8a:39:5d:da:db:2b:8a:1d:01:9c:33:8d:
77:71:90:64:92:43:c8:70:11:43:6d:ae:8f:cf:ab:1a:20:c5:
85:a2:56:54:a5:8a:d8:dc:6c:99:be:61:98:7a:45:40:8b:64:
3c:0b:5c:53:49:29:22:67:88:ef:78:ae:b9:83:5c:9e:90:f6:
40:41:d3:5d:16:49:da:86:fa:ae:ee:38:5a:52:9d:ab:38:c1:
b7:97:42:74:99:75:0a:31:6a:b2:29:15:26:8b:2e:68:e5:49:
32:13:91:38:2f:32:35:d0:32:cf:72:2a:b9:11:d6:2e:79:ac:
a7:e3:4d:6a:91:e9:52:83:2b:92:97:8a:49:39:c7:13:a3:b9:
69:5a:4c:01:07:6d:40:85:b6:10:2e:e4:9a:63:62:69:45:a4:
fc:b0:75:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:29 2026 by rpki-client