Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
File: F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft (raw, json)
Hash identifier: ANZzcr8HEHHTZ6bi0hO+p3x0LYM/T3Ih1/XF4jc3PMo=
Subject key identifier: 03:29:00:85:99:EF:0E:84:08:83:41:B1:93:B2:AA:FF:32:71:25:1C
Authority key identifier: 17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5
Certificate issuer: /CN=17a16657a2497737ca03621cc668d20c762136d5
Certificate serial: 019D99CFC4B17151E7FD9D5232E87D2E1242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
Manifest number: 1063
Signing time: Fri 17 Apr 2026 05:00:23 +0000
Manifest this update: Fri 17 Apr 2026 05:00:23 +0000
Manifest next update: Sat 18 Apr 2026 05:00:23 +0000
Files and hashes: 1: F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl (hash: DEtTmdn9nDAhziS238womGsqYUVyFYeta2BYwxP3wBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:c4:b1:71:51:e7:fd:9d:52:32:e8:7d:2e:12:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17a16657a2497737ca03621cc668d20c762136d5
Validity
Not Before: Apr 17 05:00:23 2026 GMT
Not After : Apr 18 05:00:23 2026 GMT
Subject: CN=0329008599ef0e84088341b193b2aaff3271251c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:22:45:0b:9e:fe:69:81:c1:f3:c5:86:98:ce:
bc:b5:73:00:67:3d:e1:a2:d6:d0:36:ce:09:8b:16:
07:95:3d:81:15:84:eb:cf:6e:6c:98:ac:c9:4f:ab:
00:c3:c3:85:85:ae:1c:e7:06:37:ff:f6:f6:52:0c:
e7:a5:7d:7e:63:83:e4:a2:dc:2d:de:22:11:1e:9f:
d3:ac:bc:d2:bc:80:c1:04:fc:1c:ce:5a:5b:32:6c:
f2:63:2d:68:a0:13:1e:7f:eb:ea:f7:31:9b:50:34:
64:b5:18:aa:b7:41:0d:2b:3c:b6:85:32:4a:f2:ba:
af:69:fe:bd:1c:04:43:18:6e:51:32:56:6d:ea:bc:
8a:ca:bf:78:72:29:3c:80:c4:d5:e2:fc:30:56:ac:
20:81:98:78:13:24:01:d8:3f:ce:f3:17:19:be:85:
d4:24:3f:ae:01:f9:15:a3:7a:85:67:c5:95:e0:e8:
e2:2a:e5:e8:40:30:67:64:21:a5:49:f6:c6:db:52:
4d:04:c7:be:ca:46:fd:04:c8:48:89:48:88:82:1d:
1f:6f:4f:a9:86:a1:d5:f9:45:15:05:38:d3:d8:d1:
eb:3c:eb:27:6b:ef:f3:3e:f5:16:43:f2:cb:d3:b5:
49:68:6d:fe:94:dc:4a:cf:c5:df:ac:aa:c0:62:b1:
ed:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:29:00:85:99:EF:0E:84:08:83:41:B1:93:B2:AA:FF:32:71:25:1C
X509v3 Authority Key Identifier:
keyid:17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:60:d5:ae:d1:ca:8f:9d:47:e7:1f:89:af:bf:24:b2:6a:e7:
2c:12:01:62:fb:04:a2:13:00:71:2e:11:ca:ad:1b:14:82:17:
1f:72:2f:ce:9b:63:7b:b1:e9:ef:23:fb:c5:bd:e7:68:f8:28:
e4:3b:c8:45:66:e2:95:a1:93:1e:90:c2:bc:57:fb:96:2b:73:
9a:78:b7:6a:1c:8f:29:02:80:0f:0d:46:5b:27:a6:d3:4a:5f:
cc:b5:c6:18:61:3a:8e:52:9b:48:a6:11:29:16:a8:e4:d0:31:
32:a4:95:ec:be:c1:c3:af:fd:2f:20:a9:73:0e:52:e0:c2:3c:
44:95:cc:29:d1:47:d2:21:00:a5:05:9f:df:1d:73:2a:87:7c:
c8:d0:25:f3:6c:e8:99:05:73:a2:ee:67:7e:f5:be:1d:d0:26:
4d:ad:4d:54:f9:86:ff:8c:7a:31:41:27:c9:5a:0f:f8:40:48:
a9:e2:96:fd:9c:73:22:48:01:5f:cc:6a:5c:28:d7:53:67:59:
24:c0:a9:7a:25:9f:d0:d7:d9:41:66:14:97:1c:e9:e7:0c:21:
c2:ef:82:c3:0d:f5:1a:e5:68:9e:7a:dc:8f:db:92:9b:1f:53:
41:9e:e5:12:64:57:f8:1c:c8:46:8f:2b:db:f8:f3:a4:4e:a0:
da:66:92:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:25:48 2026 by rpki-client