Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
File: r4j95vrbtrLB22_kH4KdHyAVvgs.mft (raw, json)
Hash identifier: fKMGcn5g5Y+9hc4Lwk4oRvsES/BeIaYqe6SIBpjkHBs=
Subject key identifier: EE:00:6C:B3:C6:24:21:92:86:6D:8F:58:BC:66:C7:54:98:62:0B:C8
Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
Certificate issuer: /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Certificate serial: 019D992B14A56173FC68F9102B360EF71C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
Manifest number: 0F5D
Signing time: Fri 17 Apr 2026 02:00:30 +0000
Manifest this update: Fri 17 Apr 2026 02:00:30 +0000
Manifest next update: Sat 18 Apr 2026 02:00:30 +0000
Files and hashes: 1: r4j95vrbtrLB22_kH4KdHyAVvgs.crl (hash: qCVJ0axp7VLf5anPKERSK0zw4Tu0+D8iEKgd0Zrxp1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:14:a5:61:73:fc:68:f9:10:2b:36:0e:f7:1c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Validity
Not Before: Apr 17 02:00:30 2026 GMT
Not After : Apr 18 02:00:30 2026 GMT
Subject: CN=ee006cb3c6242192866d8f58bc66c75498620bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f1:bc:02:55:af:5f:da:64:35:79:60:98:65:
9f:52:83:3c:1d:e5:dd:16:eb:69:c5:a0:bd:15:c9:
f2:7f:73:5e:50:43:4c:9f:8f:92:59:b7:b4:7e:96:
50:89:0d:18:51:6e:13:0e:2d:05:49:2a:92:0c:50:
b7:eb:e3:ba:22:36:41:bc:af:1d:c0:5d:30:9f:1c:
77:7b:b6:7c:e0:e1:98:a8:1e:d6:24:f8:63:cc:b7:
79:47:fd:ac:64:b6:d6:4b:52:4b:f6:7d:03:e0:a7:
88:c6:19:de:5e:26:23:dd:4a:11:db:d8:b6:dc:1b:
03:73:7b:52:12:af:d8:58:df:1e:4b:73:87:2b:94:
42:3e:5b:0c:03:0a:af:a1:57:e8:cc:06:6d:17:44:
b8:d4:93:a7:49:db:a6:96:38:60:fe:08:7c:e4:56:
69:3d:3d:c5:9b:31:00:43:28:a9:0b:c9:fd:95:8c:
17:6a:fc:3d:f7:79:48:81:d4:e0:23:ef:4d:95:df:
cf:3c:ad:87:37:c3:ab:8a:91:a2:99:f7:d5:2c:c6:
50:7a:25:8a:48:ba:fc:fd:71:01:30:0a:10:82:c3:
a3:a2:92:76:30:d8:68:52:e2:91:55:48:ed:bd:12:
e7:4c:e2:2a:a2:6e:59:dc:f5:29:b1:3c:9a:fd:de:
f5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:00:6C:B3:C6:24:21:92:86:6D:8F:58:BC:66:C7:54:98:62:0B:C8
X509v3 Authority Key Identifier:
keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d9:39:50:92:93:fe:5f:d4:9d:44:47:b4:04:f4:2e:ce:a3:
9f:fc:d9:4a:a5:8a:d8:e1:8b:2d:92:e8:2e:bb:eb:9d:16:be:
ac:f7:f9:c8:94:cd:99:da:05:98:f1:fa:30:74:8b:56:01:e9:
e5:d1:4a:7c:2f:89:e3:ce:67:40:ca:d8:41:2c:af:a5:ca:b9:
4f:f9:b9:1e:2e:ab:96:e5:62:54:3b:98:db:7e:3a:a5:04:9c:
f2:52:c6:60:c5:fe:63:cc:7a:7e:ed:25:d9:7a:94:03:97:8c:
53:0c:7a:e4:f4:80:43:95:0c:ef:1c:f6:9a:8e:86:fe:8c:19:
8a:5f:92:5e:32:18:24:00:d2:b0:34:c5:65:b1:dd:34:5a:41:
58:4b:ad:37:15:31:1b:14:f4:16:72:cc:fe:36:dc:c6:d1:2a:
e6:df:2a:20:bf:87:c0:c7:cb:17:e0:7c:30:cd:24:9c:7e:aa:
22:87:44:21:a3:22:6c:93:c3:c2:e4:1c:44:31:62:8c:2b:e7:
24:18:84:15:18:3a:79:a8:86:22:97:64:74:56:3a:02:5c:da:
50:de:09:6d:f3:d0:86:0c:30:01:5f:de:bc:ab:bb:f7:5e:7b:
de:ef:01:93:3f:e5:33:96:c0:ee:90:4a:cf:9c:7e:0c:28:f7:
e7:1b:4e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:20 2026 by rpki-client