Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
File: 468Yd0OnoHf2oeBmX92q700SSfs.mft (raw, json)
Hash identifier: hMePEYHS5OlRXbT6zjul4n88CTZnDns4qd7+Z4AVFps=
Subject key identifier: 3D:D7:2B:2F:FA:85:E1:5D:40:19:13:AE:A5:CB:AE:7A:B4:3B:50:9C
Authority key identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
Certificate issuer: /CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Certificate serial: 019DA48B2441B38A02F21E75D2168CF4DD80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
Manifest number: 0C23
Signing time: Sun 19 Apr 2026 07:01:15 +0000
Manifest this update: Sun 19 Apr 2026 07:01:15 +0000
Manifest next update: Mon 20 Apr 2026 07:01:15 +0000
Files and hashes: 1: 468Yd0OnoHf2oeBmX92q700SSfs.crl (hash: FjEaOb8vov2QioJV8dsCsapQ8tBJhrYzXSX/Hh1hYE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:24:41:b3:8a:02:f2:1e:75:d2:16:8c:f4:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Validity
Not Before: Apr 19 07:01:15 2026 GMT
Not After : Apr 20 07:01:15 2026 GMT
Subject: CN=3dd72b2ffa85e15d401913aea5cbae7ab43b509c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4f:0e:fd:e4:70:5f:9f:a6:c7:dd:c9:2a:47:
b9:d6:96:ad:49:5f:ab:d6:3d:ef:e1:d3:2e:af:a5:
ed:f0:e8:e6:66:16:74:f4:76:74:dd:30:f4:16:44:
5b:dd:63:ec:35:5d:3d:4c:28:ce:2d:a7:15:b2:61:
32:74:1e:7a:1d:ff:45:78:3b:a7:79:f4:51:b5:aa:
be:bb:7f:43:21:ba:30:20:67:b2:e3:cb:2a:97:57:
c5:a7:a0:69:97:70:f3:30:85:46:18:c2:16:da:3a:
04:72:02:29:af:c7:4f:1e:a2:d1:e6:cb:50:5a:81:
65:66:78:88:ee:7c:8f:44:be:1e:9d:e7:16:8a:29:
01:98:b3:fd:11:3d:4e:9a:ad:ee:29:f5:ca:18:3e:
1a:34:3a:43:55:bf:85:6f:fa:1d:a6:fc:9c:13:81:
60:3a:6e:f7:d1:89:14:39:57:4b:0a:ab:f3:a4:10:
bc:b6:06:e0:3b:bb:27:58:34:a8:c4:b8:9a:a2:62:
23:c3:de:d5:fe:10:cd:d5:58:99:21:3f:43:45:d9:
67:07:a9:b7:82:28:62:bd:a8:3c:fe:aa:87:98:34:
86:94:81:d4:d4:25:24:0d:ef:45:85:16:64:d3:a3:
fd:43:c6:1c:da:e5:69:a3:80:67:8f:36:6a:ae:76:
86:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D7:2B:2F:FA:85:E1:5D:40:19:13:AE:A5:CB:AE:7A:B4:3B:50:9C
X509v3 Authority Key Identifier:
keyid:E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ae:41:be:bc:da:c8:af:96:53:22:b3:ba:ef:0b:e1:f1:a4:
d8:c0:c7:8d:3c:a9:18:48:43:0b:bc:0b:63:c2:52:b3:ac:f5:
8f:b3:de:b1:7b:1a:8b:e1:6b:62:a9:c8:eb:6e:f8:77:de:83:
6c:c7:b7:b6:c5:89:09:88:b9:07:4d:ab:88:63:33:ba:4a:7c:
29:b0:bc:2c:8f:92:c8:0d:3b:fd:0e:3d:83:f3:76:32:4f:b4:
83:02:40:13:e1:80:6d:dd:4d:11:38:8e:4d:b8:a8:cd:6c:9f:
cc:ef:a1:cc:c3:4a:67:a2:b6:a0:f0:74:9c:f1:e2:fa:dc:20:
90:ee:0e:fc:18:cf:8f:fe:e1:ee:e0:cc:6b:95:ba:80:fc:46:
a1:84:b5:a1:b1:29:7b:be:f8:87:c8:19:8e:8e:ad:51:fd:19:
8c:25:d8:18:d2:4b:92:bb:c5:55:d6:b4:7d:e7:33:93:67:b8:
9f:78:a1:03:2e:93:70:6c:74:47:b9:38:41:64:dd:65:c3:81:
ba:34:d8:3a:2b:f5:31:47:c6:ac:0b:87:ad:d5:d8:af:04:f8:
e3:5d:03:c8:05:ad:aa:66:b2:c3:0b:ff:3f:fb:b8:73:bf:d1:
ee:5c:7b:0c:88:b8:5f:c5:ca:82:29:6b:b8:57:d2:6f:78:fa:
be:e5:09:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:09:07 2026 by rpki-client