Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
File: mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft (raw, json)
Hash identifier: So8tkBhhvITKUb6INLoXsb7a6wh1d9N1ZibkEeJF15Y=
Subject key identifier: 59:B7:34:7D:E9:50:24:E1:E6:B5:26:A2:EC:12:C7:47:04:2B:48:9A
Authority key identifier: 98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63
Certificate issuer: /CN=983ea291971990dc486f93812783fadd87ade863
Certificate serial: 019D98F4236A746E987F09D64596E7EDB13B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
Manifest number: 0C89
Signing time: Fri 17 Apr 2026 01:00:29 +0000
Manifest this update: Fri 17 Apr 2026 01:00:29 +0000
Manifest next update: Sat 18 Apr 2026 01:00:29 +0000
Files and hashes: 1: mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl (hash: AWboqUS8TKA4wPZyZ5WarX28z+AM4TeHGVDT8XSuVvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:23:6a:74:6e:98:7f:09:d6:45:96:e7:ed:b1:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983ea291971990dc486f93812783fadd87ade863
Validity
Not Before: Apr 17 01:00:29 2026 GMT
Not After : Apr 18 01:00:29 2026 GMT
Subject: CN=59b7347de95024e1e6b526a2ec12c747042b489a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2b:ad:8a:5b:cd:7a:00:68:aa:b2:3e:95:fd:
c5:9f:9d:e6:2a:9f:da:32:c6:dc:62:95:b6:2d:66:
8e:fe:66:94:bb:da:45:56:82:a7:c8:f8:40:4e:8f:
80:7e:d7:34:ff:c5:ca:e2:c6:1c:ac:b6:5b:a2:a4:
e7:ff:2e:f9:f7:3e:18:a2:fc:4e:b1:97:f9:ea:c4:
46:1c:44:88:30:7a:63:34:f7:5f:88:45:85:6d:93:
53:f7:88:ae:db:77:d1:fa:ac:8a:ac:c5:5d:17:1d:
45:78:2b:f2:a9:8c:b5:7d:36:81:43:fc:c7:ab:c1:
00:32:1e:45:bb:7b:98:7b:ea:a1:7d:e9:f9:9e:59:
ac:a8:98:cb:50:a4:dc:8a:41:5f:4a:5a:a8:e4:32:
eb:7d:3b:e4:23:5d:83:6e:93:0c:d7:8c:14:bb:f3:
71:f5:8c:11:ff:35:cb:bf:67:5d:76:0a:07:da:d9:
15:14:c4:03:1c:4b:ef:fc:fb:c6:b6:5e:f3:57:c5:
94:7b:c6:df:cc:36:d6:03:b8:bc:64:c1:43:23:8f:
ac:41:dd:4e:1d:83:1a:1d:43:c1:d7:01:f0:4a:70:
5c:e6:a8:c5:36:52:ad:c0:f5:cf:fb:5c:77:2f:fc:
1a:61:1f:d6:17:e1:75:26:ab:48:4c:9a:21:ce:aa:
cd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B7:34:7D:E9:50:24:E1:E6:B5:26:A2:EC:12:C7:47:04:2B:48:9A
X509v3 Authority Key Identifier:
keyid:98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:3d:35:bf:ea:e1:94:f6:34:d9:e8:bc:15:c9:48:21:23:bc:
0d:fa:51:d2:4e:fd:79:15:8e:c9:03:9d:31:12:39:9a:3f:12:
fd:70:77:73:2d:ab:37:75:8a:92:2a:f4:8a:f2:e3:76:47:f1:
d3:49:8a:d4:e8:96:0b:b6:d5:12:c4:71:5e:06:98:4f:7a:9a:
34:95:78:79:0a:49:4f:d5:59:34:2f:3e:4f:c5:b6:a2:df:b7:
4a:e0:91:b2:91:ad:13:eb:49:ee:9e:20:42:d9:d1:f7:d0:6a:
1b:53:0c:44:f8:ac:58:1b:dc:be:e2:c4:6f:a3:0f:ff:fd:80:
a8:40:6f:ab:cc:ea:14:b2:29:24:fb:2b:fa:1a:a2:88:a9:1d:
df:4e:69:a8:96:68:20:c1:b0:6d:9f:24:83:71:c4:1e:50:59:
d7:52:f9:f8:a1:74:d0:bf:05:0b:fb:d6:82:f5:64:b8:25:da:
c7:03:0e:57:ea:a3:b2:67:70:87:cd:f0:ba:a0:8e:79:bc:5b:
7e:da:95:da:c4:c3:80:b0:25:ae:2c:67:88:89:fa:b9:23:75:
ea:47:8e:70:2a:f9:1b:5d:19:54:92:12:28:9a:5f:0c:e3:b4:
44:65:e2:af:ba:bc:03:9f:c8:b7:e4:10:45:d4:8b:fb:8b:57:
22:b0:b5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:27 2026 by rpki-client