Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
File: a-pT2WLWegFI5je0tGib5NCEqeU.mft (raw, json)
Hash identifier: JBZl9SlZuaiWYFfL/ZS9R5hSWpM8/Cmc18ScOw6384s=
Subject key identifier: 27:79:8D:AE:FE:71:EF:D8:81:22:6E:65:F3:B1:14:E3:B6:3A:5F:C9
Authority key identifier: 6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
Certificate issuer: /CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Certificate serial: 019D97749C54019D9667175638AA912C98EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
Manifest number: 089E
Signing time: Thu 16 Apr 2026 18:01:34 +0000
Manifest this update: Thu 16 Apr 2026 18:01:34 +0000
Manifest next update: Fri 17 Apr 2026 18:01:34 +0000
Files and hashes: 1: a-pT2WLWegFI5je0tGib5NCEqeU.crl (hash: CtC6kQiF7WvjoyEjgPa6WeEbVIbJgfp1VShZlVKaU+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:9c:54:01:9d:96:67:17:56:38:aa:91:2c:98:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Validity
Not Before: Apr 16 18:01:34 2026 GMT
Not After : Apr 17 18:01:34 2026 GMT
Subject: CN=27798daefe71efd881226e65f3b114e3b63a5fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:35:59:8c:7d:7e:12:c8:65:8c:7f:cc:b6:8e:
26:2c:c8:7f:95:c0:fa:a3:1c:7a:e9:59:63:b1:85:
9e:99:2d:60:24:c5:23:df:45:01:db:35:df:e7:e9:
7d:46:e1:c7:51:2e:3f:c8:ad:74:19:8e:a2:49:bc:
58:00:99:57:cc:55:e5:6a:fd:88:fa:23:72:6d:fa:
44:1c:3c:8c:30:9d:53:01:e9:05:33:ef:97:a9:e0:
9d:b5:10:43:22:7b:8d:70:17:43:1f:24:c1:24:bd:
cb:28:5f:b9:56:77:89:eb:56:39:b4:9a:eb:5e:4c:
8c:1f:32:dd:6f:0d:c4:b1:09:1a:5d:cc:32:21:e6:
c1:e3:22:b2:31:43:66:c0:b9:18:a8:36:f9:b8:e2:
46:b1:05:b7:10:34:e6:5e:9c:17:02:93:07:51:92:
bc:96:53:08:4e:bd:c3:ba:78:60:4c:e1:4f:ff:c8:
f8:84:b5:39:36:88:94:c9:c7:5b:53:7b:48:7a:ff:
70:8c:78:98:73:a4:58:0f:7d:31:b3:c2:39:88:86:
0e:1a:7e:30:d8:40:6b:38:1c:8a:c7:52:e9:2a:ad:
74:b4:c2:07:d3:e4:06:f3:aa:d6:b2:56:30:83:be:
5c:6b:55:cc:af:2a:02:37:b1:fe:e0:0e:ba:90:d3:
7f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:79:8D:AE:FE:71:EF:D8:81:22:6E:65:F3:B1:14:E3:B6:3A:5F:C9
X509v3 Authority Key Identifier:
keyid:6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a2:65:6d:fa:7c:0d:5e:17:1b:af:94:16:79:9e:37:9b:14:
f0:07:2f:99:e1:79:f8:3c:03:1e:94:8e:53:5e:70:64:b2:23:
60:49:8a:d7:c9:86:d1:56:31:da:67:a2:3f:05:a7:69:fb:b2:
40:1c:9b:90:92:57:35:4f:a5:3e:9d:87:23:6c:3e:4a:b1:02:
4d:09:1a:ec:c7:ad:1f:5c:85:2e:77:3b:68:22:4a:8d:a4:c3:
1b:34:b6:4b:3d:af:d2:d3:48:ef:fe:4f:1d:cf:ae:76:92:6f:
96:92:4b:3b:84:47:cd:f5:0d:96:46:dc:fc:b9:32:3b:24:e4:
f7:f2:5b:b1:26:72:d8:61:0a:74:45:1e:66:75:91:bc:6d:88:
d3:b8:37:08:2c:06:e3:9b:92:1e:ca:ec:0a:e8:cc:04:d0:b8:
c0:de:a6:72:6c:99:7b:da:ff:85:0d:1c:a9:89:95:67:3c:dd:
64:57:b8:19:64:6e:f7:3e:78:00:6f:4f:30:b9:8c:7e:53:f3:
90:94:c7:a0:6d:ff:33:97:4c:74:4c:76:cd:df:16:1d:aa:0f:
30:47:a9:51:16:29:47:66:c8:e5:cd:f6:ce:8e:44:3f:0e:7b:
6f:42:0d:1a:66:07:71:bf:ff:a6:d5:32:6e:5b:89:12:ca:07:
df:3e:10:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:28 2026 by rpki-client