Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
File: p2H8O2oE10MHa9KG3oIURfBlTvc.mft (raw, json)
Hash identifier: jn958O8u26kfzoYmvOE0urHKs2k54MEd+5p6FvU6d+8=
Subject key identifier: 6C:DD:4D:55:85:4B:E2:73:F9:33:BF:18:9F:68:73:76:5E:E4:2B:69
Authority key identifier: A7:61:FC:3B:6A:04:D7:43:07:6B:D2:86:DE:82:14:45:F0:65:4E:F7
Certificate issuer: /CN=a761fc3b6a04d743076bd286de821445f0654ef7
Certificate serial: 019D999981FED6595BDF55266AD618D2BCF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
Manifest number: 1850
Signing time: Fri 17 Apr 2026 04:01:07 +0000
Manifest this update: Fri 17 Apr 2026 04:01:07 +0000
Manifest next update: Sat 18 Apr 2026 04:01:07 +0000
Files and hashes: 1: p2H8O2oE10MHa9KG3oIURfBlTvc.crl (hash: i1D6pAtXSA8engntSJgdOZv/++7iQRsRvQFnLOGeUUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:81:fe:d6:59:5b:df:55:26:6a:d6:18:d2:bc:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a761fc3b6a04d743076bd286de821445f0654ef7
Validity
Not Before: Apr 17 04:01:07 2026 GMT
Not After : Apr 18 04:01:07 2026 GMT
Subject: CN=6cdd4d55854be273f933bf189f6873765ee42b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:c5:a5:e8:c1:08:38:5a:a0:4f:4c:89:cd:
a1:62:6c:db:71:5a:87:2c:9d:ac:f5:53:2e:2c:3a:
74:8c:56:b5:2f:1f:2c:56:8f:38:ac:05:29:73:d3:
bd:d8:84:ec:5f:a0:a1:33:11:8c:94:d7:05:cd:b1:
88:17:4b:28:4e:13:99:eb:a4:81:de:c0:56:5e:c9:
10:a3:60:d3:0e:08:a8:44:24:25:9b:fd:48:a7:30:
01:7c:8b:a5:ff:e2:f1:ad:e0:44:c7:cf:62:95:c1:
f8:33:03:b9:ea:50:3f:03:76:de:9f:5e:2b:3b:c6:
9b:20:92:d1:d4:53:b1:b8:5a:68:d7:90:71:84:f0:
03:49:ce:9b:ac:e1:8d:31:f1:67:56:2e:5b:0f:a6:
40:77:99:2c:4d:47:51:24:21:80:61:fc:f9:fe:f9:
ad:b0:b9:91:f8:07:41:b5:17:13:e3:6a:2b:34:de:
f3:aa:33:c4:e8:62:a2:aa:0b:d5:68:34:00:06:c7:
f5:01:0c:aa:b6:00:da:04:33:87:73:db:f7:04:5a:
ef:40:4d:1b:e9:f5:18:41:37:95:d7:da:6f:0a:63:
08:78:73:c2:bc:89:c8:f0:ea:2a:11:5d:c9:e5:10:
1b:a5:e0:1c:05:0a:27:38:f8:0a:74:2a:c9:8d:6f:
be:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DD:4D:55:85:4B:E2:73:F9:33:BF:18:9F:68:73:76:5E:E4:2B:69
X509v3 Authority Key Identifier:
keyid:A7:61:FC:3B:6A:04:D7:43:07:6B:D2:86:DE:82:14:45:F0:65:4E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d4:c3:24:dc:52:4e:28:8c:17:51:8a:7a:d8:87:62:a9:15:
a3:e8:70:b7:14:23:c1:4f:4b:f4:d4:cf:94:ef:5a:8b:47:fb:
12:c1:c2:52:ca:32:c7:ab:82:34:b1:66:c1:d0:ac:c7:c5:78:
e2:b0:23:74:19:2d:e3:3c:dd:d2:4d:13:d4:37:d6:af:b5:a5:
ba:a7:2e:80:d9:b0:49:6b:bb:08:c0:ae:8b:7d:fc:fd:7d:95:
fb:37:9b:87:a2:13:b2:4e:f0:e8:c8:a1:27:72:ed:2a:62:01:
22:18:26:c1:91:09:66:50:88:c8:11:2a:f3:f2:c7:0e:3e:60:
7f:71:a3:89:66:ab:0c:c8:88:4d:7b:d1:cb:3b:f6:be:b3:d9:
00:88:56:81:bf:e0:99:ea:aa:9a:a1:1e:af:86:da:b8:f4:a3:
e5:f3:df:6f:b0:52:a8:05:34:66:e5:a0:ee:e6:21:b9:ff:99:
81:01:f9:2f:1a:57:3c:0e:e8:fc:7b:2d:76:54:69:af:6c:c1:
76:01:fe:4d:7d:b7:0f:91:d4:f3:7a:45:50:93:41:2c:0a:a0:
48:7b:4d:4d:dc:10:a4:bb:08:aa:ff:18:b3:55:c9:79:df:41:
1e:89:9d:d8:3a:1f:d1:57:6e:ec:5e:98:44:7c:7b:04:b4:f0:
94:86:83:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:25:13 2026 by rpki-client