Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
File: d7tRRrULW8gaNXR6K75lKqC3Fnw.mft (raw, json)
Hash identifier: nHKKaYb6XTHH/gIwi5zKoA+zxOmJeawBgSyFCiKx80k=
Subject key identifier: CA:42:A9:24:F0:B5:20:4D:5A:A7:99:51:82:F3:B6:F9:C6:78:52:9E
Authority key identifier: 77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C
Certificate issuer: /CN=77bb5146b50b5bc81a35747a2bbe652aa0b7167c
Certificate serial: 019D9BBEAC6F382905BE8DE2E11984B00757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
Manifest number: 1567
Signing time: Fri 17 Apr 2026 14:00:57 +0000
Manifest this update: Fri 17 Apr 2026 14:00:57 +0000
Manifest next update: Sat 18 Apr 2026 14:00:57 +0000
Files and hashes: 1: d7tRRrULW8gaNXR6K75lKqC3Fnw.crl (hash: WraEuPY55puOQQ01LlzeZhrHd8aeAOSOScNMQDcgNyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:ac:6f:38:29:05:be:8d:e2:e1:19:84:b0:07:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bb5146b50b5bc81a35747a2bbe652aa0b7167c
Validity
Not Before: Apr 17 14:00:57 2026 GMT
Not After : Apr 18 14:00:57 2026 GMT
Subject: CN=ca42a924f0b5204d5aa7995182f3b6f9c678529e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:d3:3c:8f:05:9e:e1:90:97:e2:c0:62:96:
fd:3a:d6:06:bd:d8:87:37:e3:65:d7:e7:7d:ef:b8:
13:2d:34:4a:bf:e8:a3:5b:ab:8c:d9:15:7f:60:d7:
37:11:98:84:98:25:d4:d5:6c:50:de:3e:b6:81:4b:
6c:b7:0f:ae:d2:df:1a:03:f2:4c:c7:cb:73:30:33:
12:47:c6:45:99:a4:30:d3:fe:91:de:86:ed:e3:0a:
94:0a:ec:36:a1:e5:ec:3e:09:1d:0c:35:0d:7a:b1:
10:7f:e9:e1:45:61:fd:06:a9:e3:2b:11:65:f5:40:
e9:4f:f0:52:19:13:08:6d:ed:30:d9:89:d0:81:8b:
e8:ff:15:5d:f3:7e:cd:7b:a0:b2:e5:02:56:d5:4b:
45:73:dd:31:64:22:12:1f:c7:1b:2f:4e:fc:a2:ea:
9e:3d:75:35:d0:bd:24:73:3e:fb:4f:6c:de:00:2d:
aa:18:e3:95:f5:4e:ec:47:f0:b3:dd:7e:2e:2e:7b:
23:41:20:25:04:82:7c:7d:3e:ef:e6:cf:e3:5b:2f:
d7:26:ba:12:a4:03:89:e2:6a:ed:80:61:84:54:a8:
80:c3:81:d0:cd:54:19:1a:0d:71:bb:d3:54:98:65:
16:3e:5b:4c:4c:8f:5b:76:15:38:c4:17:fb:fa:f9:
a8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:42:A9:24:F0:B5:20:4D:5A:A7:99:51:82:F3:B6:F9:C6:78:52:9E
X509v3 Authority Key Identifier:
keyid:77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:61:b1:72:0f:66:3e:92:c1:72:4f:1f:76:59:e0:cd:25:c0:
be:1d:ae:c9:7c:5c:56:ed:9e:73:20:6f:a3:5c:70:4b:b1:24:
9a:87:16:63:08:be:92:8f:88:ec:e3:3c:cc:b2:98:72:b4:96:
21:1a:5a:d8:1b:91:ae:1a:a3:5c:48:be:05:46:41:9f:bb:3c:
b6:2e:9e:d9:40:cf:5d:85:00:09:d7:cc:bc:ed:bb:aa:4a:a0:
be:c0:c2:eb:c7:80:6e:90:3f:4c:71:1f:c2:cc:bd:5c:c8:07:
05:51:7c:4f:be:1d:e0:40:4c:fb:42:b6:b4:ab:ee:51:a6:03:
5b:dd:af:28:76:f7:dd:ff:61:6b:c2:eb:10:70:90:1c:11:b1:
83:60:33:85:9d:7e:74:c3:b9:ce:55:15:ca:f1:ff:97:71:99:
87:21:27:19:d0:0b:62:e1:78:1e:99:12:72:42:5b:36:60:e9:
c0:98:52:91:27:eb:2e:f6:c9:28:c2:12:a1:05:b1:34:ac:e2:
1d:a4:19:4c:3c:9b:b4:d7:bb:40:c8:59:a2:44:f2:e6:73:f5:
c3:6b:e3:34:21:02:64:50:99:20:ed:32:67:1c:9b:06:8e:7b:
f7:b8:b5:c2:68:a8:f3:fd:d5:8e:2e:a9:02:32:14:25:6f:56:
73:24:44:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:14:37 2026 by rpki-client