Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
File: t6K9aUc7So6Fp2r72OW77ptLs0s.mft (raw, json)
Hash identifier: /C7Bw1XCfZZQNn0FY1Mo4u+4kjHuj7Q2KU+kSNH0Fug=
Subject key identifier: E9:53:F4:69:07:8D:D5:C6:C6:42:77:C9:7D:AF:3B:5B:73:75:D1:09
Authority key identifier: B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B
Certificate issuer: /CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
Certificate serial: 019DA48AA0BC1274A2C3F2C2A71F1C5DB011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
Manifest number: 122B
Signing time: Sun 19 Apr 2026 07:00:41 +0000
Manifest this update: Sun 19 Apr 2026 07:00:41 +0000
Manifest next update: Mon 20 Apr 2026 07:00:41 +0000
Files and hashes: 1: t6K9aUc7So6Fp2r72OW77ptLs0s.crl (hash: 82EOXxkkslbCf73Bo7Ux3sqfqWzmmjI8CW2X8mjDe9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:a0:bc:12:74:a2:c3:f2:c2:a7:1f:1c:5d:b0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
Validity
Not Before: Apr 19 07:00:41 2026 GMT
Not After : Apr 20 07:00:41 2026 GMT
Subject: CN=e953f469078dd5c6c64277c97daf3b5b7375d109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:6b:8a:44:3e:80:31:f0:d5:60:b3:8b:b3:
80:8e:71:50:ff:f7:d8:3f:ae:cf:1a:5f:70:40:1f:
8c:1d:c4:83:83:4b:70:20:9e:ae:49:20:f9:15:70:
c8:5f:a3:1e:e9:09:d5:b8:d5:d0:4b:fb:20:63:93:
5b:17:17:bf:bd:ec:44:e4:cf:5d:ce:dd:b1:47:94:
5c:86:68:e8:28:01:d8:4a:47:73:f7:fd:d9:29:bc:
c3:e8:01:bb:2c:85:33:48:c6:13:a1:a5:c1:cd:fb:
95:21:9b:e0:4e:00:75:90:4b:0c:d4:e1:9f:a5:7d:
36:f7:e6:99:b4:ef:1d:73:b3:94:9d:3d:ad:af:75:
25:61:88:08:21:7a:63:8e:09:19:3c:33:e1:03:07:
da:5a:77:6f:cf:91:00:88:22:80:ed:09:cb:db:1e:
38:e5:1b:59:fd:48:47:ee:2c:c0:e6:17:9b:33:29:
76:5c:3b:fc:97:e1:87:83:b7:2c:cd:60:94:5f:99:
10:1d:69:98:5f:b4:f0:a7:ad:f2:9d:5a:06:5b:d2:
dc:54:53:b5:ae:c6:97:06:65:c4:a2:3f:0e:a2:1a:
75:21:f5:43:c3:f3:84:2c:c2:ad:b4:38:6f:1f:3a:
17:29:a3:8c:14:be:5e:2e:c6:95:4a:69:08:56:73:
9a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:53:F4:69:07:8D:D5:C6:C6:42:77:C9:7D:AF:3B:5B:73:75:D1:09
X509v3 Authority Key Identifier:
keyid:B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:08:0b:98:a5:03:77:33:e8:d2:d3:b8:c5:36:1a:5b:6b:09:
74:ce:f2:10:6d:2e:4b:12:05:e7:bd:28:66:bd:b7:97:a2:67:
7f:41:3f:2a:26:c6:16:38:0b:ee:5e:3a:f7:af:00:af:aa:d4:
92:60:38:e2:38:5a:44:97:62:a5:81:bf:75:d7:67:7a:8f:e5:
96:9b:b7:da:dc:4d:8b:a9:42:97:4b:94:26:49:fb:bf:92:c1:
a4:45:27:ab:48:c8:63:b0:e9:a9:1e:ff:a6:3e:cd:b1:05:a3:
ef:02:95:32:2d:6b:fd:a4:8c:ca:ff:80:48:f3:55:bd:a9:2e:
d1:b0:30:4d:2b:fa:21:8f:48:58:f4:c9:68:d2:f7:d0:65:13:
cd:7a:b4:ea:b0:0b:83:48:6c:06:29:01:4a:21:aa:6e:07:a7:
ef:59:78:83:5f:cc:32:b8:cc:40:a8:65:94:ab:72:9a:5b:65:
bd:c3:2d:e4:83:e3:1b:d2:91:80:1f:97:76:74:52:5d:bc:f2:
4a:31:e7:ff:7a:8b:3c:97:52:1a:df:03:bb:9d:ed:58:12:93:
23:9b:ab:01:19:ab:2e:ae:f4:83:00:25:3a:d8:a1:a8:28:8c:
ad:f9:a2:30:f7:54:85:1f:81:d8:ce:7d:b9:87:ec:9f:20:3d:
29:3d:54:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:04:41 2026 by rpki-client