Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
File: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft (raw, json)
Hash identifier: y6/iTRTG4Dpyi3vkl3exL2AIHKcjapG7z4oc7U4nP84=
Subject key identifier: BF:9E:F5:F0:14:5B:EE:5B:F0:07:C4:71:6B:AB:D5:34:1C:BE:97:37
Authority key identifier: D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
Certificate issuer: /CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Certificate serial: 019D9962057C02DC057BC9B59D30FA0D7017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
Manifest number: 1519
Signing time: Fri 17 Apr 2026 03:00:31 +0000
Manifest this update: Fri 17 Apr 2026 03:00:31 +0000
Manifest next update: Sat 18 Apr 2026 03:00:31 +0000
Files and hashes: 1: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl (hash: KWZvv/OYnYaI0A3kK3UXyig/jWBDQUp97Rk0cb338a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:05:7c:02:dc:05:7b:c9:b5:9d:30:fa:0d:70:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Validity
Not Before: Apr 17 03:00:31 2026 GMT
Not After : Apr 18 03:00:31 2026 GMT
Subject: CN=bf9ef5f0145bee5bf007c4716babd5341cbe9737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:9b:92:cb:d7:e4:a4:30:23:68:d0:d6:31:
45:28:2d:36:d4:1b:31:1c:fb:87:c3:1a:64:83:08:
c7:cd:d3:42:70:f5:50:b7:c6:af:95:df:4d:b3:38:
5d:25:67:4f:27:46:e4:8b:7b:25:c4:c4:54:ab:59:
cb:48:28:68:d5:1e:b1:bb:87:8a:8f:76:6a:75:ee:
88:49:ab:95:c9:4c:2f:98:12:3d:d4:51:96:89:35:
a7:20:3d:a5:4f:5a:16:89:fe:57:a3:83:27:be:52:
78:ff:b7:d3:d9:dd:e8:17:dd:03:02:a3:0b:2e:b9:
e9:c5:15:6e:9c:b7:ae:da:00:d2:8f:6f:b4:b4:e0:
cc:fd:a6:30:30:b8:c9:9e:15:41:50:c1:7d:80:81:
ee:9d:c7:18:95:87:11:6b:eb:c9:e5:13:8b:5d:4f:
90:19:c2:7b:70:88:d3:c3:c1:83:3b:fc:45:56:b3:
2b:98:ec:ce:dc:37:25:1a:3f:7c:b6:ba:7b:12:cd:
93:49:f4:09:2e:c6:ea:90:ff:3c:66:1b:b5:93:ee:
8b:90:d8:2f:69:1f:c3:50:ac:be:a6:58:a4:29:13:
5a:e6:25:d4:92:ed:93:9f:56:ec:84:e0:77:56:ba:
e5:c2:ae:08:65:7b:a5:05:b6:52:f5:63:bf:3e:39:
a6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9E:F5:F0:14:5B:EE:5B:F0:07:C4:71:6B:AB:D5:34:1C:BE:97:37
X509v3 Authority Key Identifier:
keyid:D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:82:95:e0:1f:32:5b:93:20:cb:5c:d3:d3:03:35:d1:6b:04:
9b:25:8d:90:19:05:9c:cc:7d:45:a4:51:58:7b:40:7d:05:e6:
34:79:5a:ae:c8:08:d8:6a:07:55:ee:82:8b:41:36:05:93:a6:
ff:30:c2:98:98:7e:a6:54:28:0d:39:3e:67:1b:79:ed:28:81:
af:fa:a7:da:58:68:fb:ae:c3:f6:93:d7:12:6c:3f:12:78:a0:
74:29:35:ec:19:0c:9f:25:ad:9b:11:51:97:85:67:fe:90:6a:
8d:d2:33:4d:d0:14:2c:35:8c:07:3a:ba:fa:c9:04:6e:9f:44:
6e:62:58:df:65:21:38:2a:1e:a6:6e:43:99:02:f7:d0:f2:dc:
b8:30:a6:cf:da:e3:c7:bd:ae:19:bf:e5:93:8e:14:42:6b:bf:
f0:ba:c7:64:10:1c:7f:b3:4c:1f:f2:fa:2a:da:1b:58:99:3d:
12:08:51:74:63:0c:ad:6d:9f:44:e0:0e:5a:79:97:26:13:58:
75:b8:22:b6:22:ab:2e:88:a6:be:e0:99:32:02:17:5d:a5:06:
b1:4b:8a:b1:5a:ab:ae:a6:80:6a:08:71:ed:7d:b8:c8:dc:5a:
2f:3a:31:b1:f1:c1:c8:9f:f7:31:05:da:b5:3c:45:34:d8:5a:
78:d6:36:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:37 2026 by rpki-client