Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
File: Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft (raw, json)
Hash identifier: AShLKY5l3WRHVTfIRQp4BnOIhhb3QW1HrxJzAZ6Npoc=
Subject key identifier: C5:A4:AF:F1:B8:56:A0:43:B8:0A:A6:2C:29:BF:62:8E:3B:B1:D6:C6
Authority key identifier: 47:1D:73:71:24:13:46:C6:EA:9A:47:69:46:80:21:72:CA:07:56:6B
Certificate issuer: /CN=471d7371241346c6ea9a476946802172ca07566b
Certificate serial: 019D98F5087467460DBE752A683652F71A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
Manifest number: 0BF6
Signing time: Fri 17 Apr 2026 01:01:28 +0000
Manifest this update: Fri 17 Apr 2026 01:01:28 +0000
Manifest next update: Sat 18 Apr 2026 01:01:28 +0000
Files and hashes: 1: Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl (hash: U9ZIqXm1aBbUkfGgM1yTggh5Dm7luBZxHhixck/L+yI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:08:74:67:46:0d:be:75:2a:68:36:52:f7:1a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=471d7371241346c6ea9a476946802172ca07566b
Validity
Not Before: Apr 17 01:01:28 2026 GMT
Not After : Apr 18 01:01:28 2026 GMT
Subject: CN=c5a4aff1b856a043b80aa62c29bf628e3bb1d6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a4:57:9b:cb:81:57:7e:54:78:d7:f6:c5:8a:
73:54:a3:ef:b7:3a:78:56:a8:ef:d2:b8:a7:f2:db:
55:92:f0:2f:1a:4d:84:21:37:3e:80:b0:7d:89:c7:
fc:6f:2c:93:db:6f:ae:34:18:5e:b5:32:1c:16:db:
78:31:f5:91:83:83:1c:19:ce:dc:96:b0:3a:5b:b2:
c0:24:65:9a:15:4e:31:34:49:41:5b:7c:96:2e:06:
c1:6d:f8:0f:74:28:37:08:52:98:e0:49:b9:b6:fa:
d6:31:44:ad:0d:c8:d3:28:6f:9c:b3:c1:41:1b:03:
2f:11:ff:28:7d:4e:43:a0:5d:6f:2e:e3:3a:2b:bd:
d6:8c:33:47:f8:a4:f6:62:9c:2e:1f:d0:e9:b2:be:
81:f9:9a:d0:27:8c:5f:c3:81:dc:a4:1e:a5:ee:e5:
09:16:77:0e:a3:7d:22:df:2a:b8:3c:89:ad:ce:8e:
d7:a5:b2:01:73:03:3b:91:51:c0:d2:71:4f:f4:e1:
f8:05:e5:4e:07:d5:53:d0:2a:f9:08:a0:1b:bb:89:
39:89:53:6f:bd:4e:7f:f8:5f:d5:53:64:4b:9a:88:
1b:12:4d:bd:58:b7:6b:63:34:a3:01:9b:a5:03:b6:
01:94:8d:3a:c6:d5:bc:9a:b7:da:85:ab:a1:70:79:
d1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A4:AF:F1:B8:56:A0:43:B8:0A:A6:2C:29:BF:62:8E:3B:B1:D6:C6
X509v3 Authority Key Identifier:
keyid:47:1D:73:71:24:13:46:C6:EA:9A:47:69:46:80:21:72:CA:07:56:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:90:3a:47:fa:e2:67:eb:37:0b:2c:a0:a0:c3:7d:f2:b2:aa:
73:75:e9:fb:1a:4e:a0:88:61:d9:d8:9e:06:fd:0f:9e:2e:cc:
01:eb:7b:da:6f:3b:76:6b:67:02:2e:e4:ff:4d:96:41:8e:0e:
68:3e:d6:24:e1:50:ee:f6:4c:05:6b:a4:fe:d9:0b:9a:12:57:
97:52:7c:1b:2a:35:e7:08:24:86:25:d5:17:7c:2e:8c:1e:b7:
a9:8d:ae:78:2c:24:ae:f8:d9:6c:07:76:d8:6f:b0:8e:d5:fc:
5d:61:5f:e0:33:6c:61:a4:c0:84:49:a9:78:47:fb:f5:22:85:
f1:c2:88:96:61:1f:53:1e:00:d9:59:3f:2b:e6:23:4e:9c:fb:
57:58:ed:b8:95:b8:ec:c6:a8:ad:67:32:dc:11:94:8d:9b:b8:
12:f9:f2:51:10:96:c0:60:16:ac:e3:33:4d:c0:1c:0e:4a:8b:
84:5e:c8:cf:9d:7b:40:02:fc:15:62:5c:91:52:86:22:37:6e:
0b:aa:6c:43:f2:cf:91:b7:9e:e4:39:36:ea:f7:de:9f:f6:ff:
c9:d4:c1:98:ae:db:1c:00:bb:24:70:03:ec:a3:6c:4c:ac:86:
d1:dc:93:d4:3a:b3:0a:95:0a:ef:fc:b2:45:22:ec:33:8b:4c:
d7:80:5f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:56:59 2026 by rpki-client