Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
File: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft (raw, json)
Hash identifier: lr/RZ9uiGoAVmcpbamGYtHWvg/lHWBLKjVF+laUAiDY=
Subject key identifier: C5:55:BB:8A:53:10:05:97:9D:3C:21:11:55:A2:1C:10:F9:CA:FB:09
Authority key identifier: 21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00
Certificate issuer: /CN=21d85d231ad54b8439c2aaed91a577586ac46000
Certificate serial: 019D9A3E229F17D11DE58FCF06405EBEB368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
Manifest number: 13C3
Signing time: Fri 17 Apr 2026 07:00:56 +0000
Manifest this update: Fri 17 Apr 2026 07:00:56 +0000
Manifest next update: Sat 18 Apr 2026 07:00:56 +0000
Files and hashes: 1: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl (hash: 6F6Ytv1b0INDPtN9pI5djPb06r+SY7N2d5YTv6QBbpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:22:9f:17:d1:1d:e5:8f:cf:06:40:5e:be:b3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21d85d231ad54b8439c2aaed91a577586ac46000
Validity
Not Before: Apr 17 07:00:56 2026 GMT
Not After : Apr 18 07:00:56 2026 GMT
Subject: CN=c555bb8a531005979d3c211155a21c10f9cafb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bb:0b:97:3e:c4:ff:aa:3d:34:c7:99:1f:d5:
0c:83:fb:56:2f:53:76:1b:b7:14:13:c7:38:fe:36:
62:b4:c5:4a:2c:2b:db:ec:4a:e6:f0:a4:3d:51:8e:
c0:b5:d3:b2:61:6f:c7:6d:1c:30:bd:f1:f4:f8:0b:
5c:82:65:13:17:fe:9f:ec:b0:5b:6a:c6:37:c1:17:
8f:28:cf:b4:54:a3:1e:db:48:7a:8f:c7:9a:2e:13:
78:9f:9f:b5:a6:a3:db:1c:96:b4:47:2e:87:85:de:
0a:f8:51:89:37:f2:d8:83:70:54:9e:1b:4b:eb:90:
1f:3b:0c:4d:80:72:94:62:fa:d8:b6:20:90:18:fa:
7a:3f:6b:49:8c:b2:8e:fc:1c:9f:9d:53:f9:93:48:
de:b0:7b:d2:a2:fb:86:c6:e9:e9:0d:cf:8f:8a:3a:
20:d8:8c:be:9b:8f:54:62:a9:17:47:35:e2:ef:24:
71:75:4e:5c:69:c7:8d:0c:82:cc:dc:f5:06:2c:56:
51:41:38:2f:99:df:c9:5b:48:b1:dd:b7:9f:6e:31:
3c:e0:c3:7d:ee:05:4a:a8:ae:b8:76:29:25:ac:e9:
ee:23:3d:b7:48:35:30:f5:3b:aa:f6:0d:ae:84:1a:
57:cc:b9:d2:8a:67:1f:a0:3f:0a:56:10:da:1e:7f:
89:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:55:BB:8A:53:10:05:97:9D:3C:21:11:55:A2:1C:10:F9:CA:FB:09
X509v3 Authority Key Identifier:
keyid:21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7b:08:a6:f6:7b:d2:79:46:bb:b2:6d:b5:6a:1f:ec:d3:e2:
ef:a0:c5:63:4d:ef:b3:c6:d4:74:47:84:9b:5e:64:e4:0a:48:
d1:37:5e:e1:97:34:58:a5:ef:be:53:4a:28:65:17:45:13:93:
7a:64:55:7d:60:aa:54:26:02:2f:6b:f0:d0:01:92:86:13:1b:
6b:b1:d5:21:94:5d:17:37:0a:4d:47:78:ce:67:d2:8f:97:74:
54:4f:1f:6f:08:24:06:74:3c:bb:31:d1:e0:bd:56:4a:00:4a:
8c:bb:e6:28:8b:ba:72:fd:07:2a:8c:13:92:2a:f6:23:03:b1:
06:7c:11:ae:b8:ef:88:ba:fd:16:36:a2:ef:aa:07:8e:fb:93:
40:79:d5:9d:95:31:7d:d6:87:fa:64:e8:e3:76:f4:df:a7:b3:
49:48:55:30:d1:80:93:1e:64:1e:9d:a0:d4:bf:f5:3f:e6:0b:
74:61:2e:be:84:c9:07:61:7b:bc:8f:67:3e:88:71:90:83:9d:
80:70:59:a1:df:cb:38:fc:3f:a1:74:50:ee:c3:d6:1c:88:a3:
95:f3:31:19:58:83:c0:e4:6e:8c:2f:7d:db:a8:99:ab:97:5b:
5e:80:68:2c:c4:ad:88:b1:7d:5d:d9:69:31:de:98:a6:61:8a:
6b:15:ea:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:25:08 2026 by rpki-client