Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
File: cI7ctL7wrwFvBYdt285M0kx9968.mft (raw, json)
Hash identifier: UVwjJ1x7LPy9GSB+KamG0f8xaXyahaqVRyzZnSp54MU=
Subject key identifier: B2:A2:9C:F9:5B:9C:B8:A6:4F:E5:01:C6:7B:DD:5B:44:3C:EB:42:E2
Authority key identifier: 70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
Certificate issuer: /CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Certificate serial: 019D9B51374E3491F80353D4800EE190584C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
Manifest number: 06E7
Signing time: Fri 17 Apr 2026 12:01:24 +0000
Manifest this update: Fri 17 Apr 2026 12:01:24 +0000
Manifest next update: Sat 18 Apr 2026 12:01:24 +0000
Files and hashes: 1: cI7ctL7wrwFvBYdt285M0kx9968.crl (hash: EE139ETRLwCfkmEj93AruXmYwEQ86dZ3jhysc4OVKc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:37:4e:34:91:f8:03:53:d4:80:0e:e1:90:58:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Validity
Not Before: Apr 17 12:01:24 2026 GMT
Not After : Apr 18 12:01:24 2026 GMT
Subject: CN=b2a29cf95b9cb8a64fe501c67bdd5b443ceb42e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:03:fc:65:ba:42:7a:75:51:11:10:c1:5f:
d2:3c:dd:0e:82:88:d5:f0:d4:23:96:91:82:b5:7b:
92:3d:e7:dd:90:85:b6:77:e6:97:47:95:31:51:47:
c2:d0:7f:eb:66:6b:6f:6a:38:bf:30:63:9a:5f:72:
1f:18:9c:80:91:07:72:6f:2c:fe:dd:3a:aa:f3:fe:
92:81:a7:5f:f1:b1:8b:f0:8a:61:c2:68:e6:58:73:
5d:59:14:53:f1:35:91:0a:ef:80:ba:44:0b:15:f3:
de:9e:56:0a:ad:21:e9:96:11:86:e4:c9:ad:e8:1c:
ed:27:95:34:75:f6:d0:e6:32:e0:5f:e9:07:74:f5:
1c:11:67:23:62:76:95:4c:d2:a4:63:09:34:aa:07:
78:4d:b5:9d:93:a8:71:8d:98:83:d8:97:d4:82:1b:
43:4b:1e:a2:e2:35:85:ea:2e:76:9d:97:2b:42:6b:
36:49:23:73:42:d3:c7:9c:3d:71:16:5c:74:dc:33:
32:af:7b:8d:f2:b6:03:70:6f:73:cf:74:6f:e2:0b:
2e:8b:1f:0d:22:02:ea:a7:bb:d2:c2:29:69:31:ee:
42:21:bb:b7:d9:8f:24:85:94:c0:ab:64:fc:e0:49:
50:da:b5:c4:0e:72:13:04:c6:06:f0:d4:d8:90:b1:
d1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A2:9C:F9:5B:9C:B8:A6:4F:E5:01:C6:7B:DD:5B:44:3C:EB:42:E2
X509v3 Authority Key Identifier:
keyid:70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ab:f9:c9:18:4e:ac:8c:71:73:81:a5:25:15:33:fb:92:72:
f3:07:80:22:9f:af:09:10:f9:65:d9:0c:0d:46:fc:ba:aa:b1:
10:f8:e7:49:ef:5f:30:2d:9b:72:11:f2:e3:59:ab:93:f2:39:
61:d1:46:c2:9e:16:a6:8e:d5:15:8e:8a:c3:d0:a6:73:31:07:
b8:e9:79:26:9d:63:02:2a:e9:e5:28:0e:bc:f8:10:9d:ad:0c:
38:c8:dd:5e:c5:07:15:b8:ec:54:15:86:28:31:5b:83:b2:42:
e0:b3:8d:b0:bb:34:bd:44:84:9b:71:d2:c3:1c:6d:5e:c4:83:
4e:83:31:ea:f3:08:de:b4:c5:72:e9:0a:8e:9e:0d:d7:ce:15:
ab:1b:3f:b0:1a:a3:07:dc:e1:5c:58:39:9d:25:1d:d7:4e:3d:
37:50:de:cd:bc:af:73:d5:12:e9:63:1c:57:e2:ff:1d:69:4a:
bc:df:a4:aa:51:e2:f0:4e:e5:d7:55:cc:e6:a3:c2:9d:6b:b3:
d4:64:59:88:27:8d:7e:2f:9b:1f:2c:be:06:04:59:89:52:88:
ff:ae:b9:e2:68:98:60:f3:cb:50:f4:5b:ad:e9:3b:ec:ce:4c:
56:4f:c8:25:cc:62:fc:ad:2c:0c:d5:d5:e3:a6:7c:61:45:1e:
02:25:ab:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUTdONJH4A1PUgA7hkFhMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwOGVkY2I0YmVmMGFmMDE2ZjA1ODc2ZGRiY2U0Y2QyNGM3
ZGY3YWYwHhcNMjYwNDE3MTIwMTI0WhcNMjYwNDE4MTIwMTI0WjAzMTEwLwYDVQQD
EyhiMmEyOWNmOTViOWNiOGE2NGZlNTAxYzY3YmRkNWI0NDNjZWI0MmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxMD/GW6Qnp1UREQwV/SPN0OgojV
8NQjlpGCtXuSPefdkIW2d+aXR5UxUUfC0H/rZmtvaji/MGOaX3IfGJyAkQdybyz+
3Tqq8/6Sgadf8bGL8IphwmjmWHNdWRRT8TWRCu+AukQLFfPenlYKrSHplhGG5Mmt
6BztJ5U0dfbQ5jLgX+kHdPUcEWcjYnaVTNKkYwk0qgd4TbWdk6hxjZiD2JfUghtD
Sx6i4jWF6i52nZcrQms2SSNzQtPHnD1xFlx03DMyr3uN8rYDcG9zz3Rv4gsuix8N
IgLqp7vSwilpMe5CIbu32Y8khZTAq2T84ElQ2rXEDnITBMYG8NTYkLHRBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKinPlbnLimT+UBxnvdW0Q860LiMB8GA1UdIwQY
MBaAFHCO3LS+8K8BbwWHbdvOTNJMffevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZDYwNjItMTg1OC00ZGNlLTliZTYt
NTdhMjQ3ZDM4MTcwLzEvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9hZDYwNjItMTg1OC00ZGNlLTliZTYtNTdhMjQ3ZDM4MTcw
LzEvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuqv5yRhO
rIxxc4GlJRUz+5Jy8weAIp+vCRD5ZdkMDUb8uqqxEPjnSe9fMC2bchHy41mrk/I5
YdFGwp4Wpo7VFY6Kw9CmczEHuOl5Jp1jAirp5SgOvPgQna0MOMjdXsUHFbjsVBWG
KDFbg7JC4LONsLs0vUSEm3HSwxxtXsSDToMx6vMI3rTFcukKjp4N184Vqxs/sBqj
B9zhXFg5nSUd1049N1Dezbyvc9US6WMcV+L/HWlKvN+kqlHi8E7l11XM5qPCnWuz
1GRZiCeNfi+bHyy+BgRZiVKI/6654miYYPPLUPRbrek77M5MVk/IJcxi/K0sDNXV
46Z8YUUeAiWrOA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:17:21 2026 by rpki-client