Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
File: T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft (raw, json)
Hash identifier: Uht+LIVxO/YkJvJTLwFcic2Zcmp8jxxgbwB49kG7LrU=
Subject key identifier: 1E:94:02:77:5D:B7:7F:F3:73:45:7B:79:FB:0E:BF:E2:63:89:C4:96
Authority key identifier: 4F:A8:93:E3:3A:82:1F:F6:6D:38:F0:EB:CE:49:91:1F:3A:5F:96:4E
Certificate issuer: /CN=4fa893e33a821ff66d38f0ebce49911f3a5f964e
Certificate serial: 019D9BBF3C912FA898DA0737DD93BC1F4AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
Manifest number: 09A7
Signing time: Fri 17 Apr 2026 14:01:34 +0000
Manifest this update: Fri 17 Apr 2026 14:01:34 +0000
Manifest next update: Sat 18 Apr 2026 14:01:34 +0000
Files and hashes: 1: T6iT4zqCH_ZtOPDrzkmRHzpflk4.crl (hash: D4GdOO7b4GTDLb6t2JDPGPc14JCqDQXyiZhJGDa+7j4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:3c:91:2f:a8:98:da:07:37:dd:93:bc:1f:4a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fa893e33a821ff66d38f0ebce49911f3a5f964e
Validity
Not Before: Apr 17 14:01:34 2026 GMT
Not After : Apr 18 14:01:34 2026 GMT
Subject: CN=1e9402775db77ff373457b79fb0ebfe26389c496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:e6:e5:62:9d:30:0d:3f:ce:cc:35:e3:89:
08:1a:fa:37:80:6c:c7:e5:42:b0:62:6b:62:3f:f2:
9b:67:00:b1:c2:63:6f:11:79:37:b5:bd:96:cd:f0:
8e:08:d5:c3:cf:01:2f:20:19:df:28:4f:37:6a:fb:
48:c0:92:e4:66:a3:03:0d:f8:8f:64:34:ee:ab:88:
20:66:47:71:bf:8f:37:3a:40:fe:0e:21:6b:7f:2e:
a1:35:6e:7b:80:39:e0:98:54:91:25:7b:e9:bf:34:
e4:fd:f2:a2:95:b2:d8:d5:37:0d:e0:c8:8a:c6:a0:
91:27:8d:fa:92:54:de:5d:05:be:1c:36:71:73:7c:
00:6f:ff:05:71:c1:a8:8c:e4:3d:80:ae:10:25:29:
1e:86:1e:40:2f:28:57:95:e2:bb:5e:08:a1:ab:66:
14:d7:e2:3b:8b:f3:a0:98:4a:9d:8e:01:12:10:9c:
02:c7:88:e8:4d:fc:a4:48:ae:9e:a1:02:03:56:9f:
e2:73:34:28:35:86:04:be:0c:f2:65:8f:c3:63:ab:
13:1d:6a:20:aa:c6:a2:5d:e1:57:47:1e:13:66:9b:
fc:42:20:07:e0:5b:1d:95:a1:d8:c1:1f:6c:04:4e:
79:41:e0:c4:70:7d:b6:12:81:57:b1:56:31:88:47:
4d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:94:02:77:5D:B7:7F:F3:73:45:7B:79:FB:0E:BF:E2:63:89:C4:96
X509v3 Authority Key Identifier:
keyid:4F:A8:93:E3:3A:82:1F:F6:6D:38:F0:EB:CE:49:91:1F:3A:5F:96:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:af:ec:1f:53:cd:ec:1e:af:86:db:65:4f:0d:ab:09:58:32:
6b:02:34:cb:68:52:75:73:6b:c1:40:88:10:2c:a3:0b:ad:df:
13:85:04:96:a6:d6:05:1f:34:d0:bb:0c:75:b6:08:12:dd:50:
49:29:b5:06:c8:48:da:d5:16:ba:b0:c8:d5:e2:1f:ef:f2:61:
ae:38:2c:07:bb:b4:c7:de:64:3f:5f:dc:c9:3d:e6:15:f1:be:
b5:62:29:39:2e:89:3f:7a:13:32:3a:dc:89:7a:d1:22:41:c0:
6a:9b:95:1c:6d:86:15:df:33:1f:e0:03:d3:ce:c6:89:af:7c:
31:c5:8c:a8:3b:69:0a:d0:58:56:a9:b2:98:bd:63:1e:dc:14:
e8:96:70:1a:09:32:2e:25:b3:8a:a0:9f:0a:b8:31:f4:ce:08:
6b:08:ed:9b:c9:3a:94:6e:ed:8f:82:89:d8:c4:72:3b:23:10:
22:c9:1b:78:88:62:e7:a1:5b:c7:3c:25:a0:96:da:6a:b2:c8:
04:37:86:a9:57:99:10:14:38:31:79:00:d7:7a:5f:19:fd:46:
02:43:09:02:57:af:e3:22:5e:02:49:2e:29:f1:60:fb:34:32:
6f:39:98:fe:e9:5d:26:11:8c:05:c6:7d:1c:c5:29:eb:ba:9a:
cf:54:22:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:46:17 2026 by rpki-client