Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
File: 468Yd0OnoHf2oeBmX92q700SSfs.mft (raw, json)
Hash identifier: zsIENMuG/+oCiSO5qfTJ40Ivl2u9DzdbjJf69PuOa5M=
Subject key identifier: 85:0B:C9:31:37:72:DA:07:A6:65:98:24:79:22:B1:7D:82:73:15:E4
Authority key identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
Certificate issuer: /CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Certificate serial: 019EBE7F9D000C4C149F08A89B9D2E05D7FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
Manifest number: 0CB5
Signing time: Sat 13 Jun 2026 01:01:34 +0000
Manifest this update: Sat 13 Jun 2026 01:01:34 +0000
Manifest next update: Sun 14 Jun 2026 01:01:34 +0000
Files and hashes: 1: 468Yd0OnoHf2oeBmX92q700SSfs.crl (hash: da7uIVQFxn53rAizyxBf4lvvDfrnO9pO5JyIUEFUNN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:9d:00:0c:4c:14:9f:08:a8:9b:9d:2e:05:d7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Validity
Not Before: Jun 13 01:01:34 2026 GMT
Not After : Jun 14 01:01:34 2026 GMT
Subject: CN=850bc9313772da07a66598247922b17d827315e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:86:31:87:fc:24:1f:a6:0a:0f:1d:47:10:
06:f0:de:d8:86:be:de:62:c5:21:06:34:d1:31:d7:
81:3f:64:52:55:37:18:f2:93:c7:fe:9c:49:7f:5e:
23:f6:0b:33:1b:bf:8d:8d:fe:01:94:79:33:0f:d1:
6e:81:ab:9c:bd:b5:62:5e:26:07:0a:02:af:a2:dc:
18:a1:3e:68:a5:06:11:16:79:c8:ca:d0:ad:dd:cc:
85:a1:a3:d9:c8:51:78:16:3b:08:9a:8e:4c:60:dc:
03:09:c0:96:f3:fc:7d:22:5a:22:7a:9a:f1:a9:a5:
84:f6:b0:0a:6b:98:22:a2:5d:f1:f9:e7:df:cc:ab:
b4:87:a2:ae:ad:12:2c:44:0a:95:71:ea:a4:89:7e:
d3:f8:de:8f:01:66:01:19:d2:cf:cd:05:30:ce:4c:
84:24:f9:75:30:8a:7d:67:b2:1f:90:9a:a4:17:4e:
3f:9e:56:a3:2f:a0:50:c1:af:4e:8c:38:ff:35:73:
7d:3e:12:f2:e7:96:07:13:23:d2:c8:c5:08:50:ed:
f3:05:1b:25:25:07:9f:00:f5:dd:b2:ff:97:be:05:
e4:27:d6:04:53:56:60:17:b4:de:e1:cf:a6:e7:b5:
24:07:e9:c6:90:00:27:6a:c3:7f:42:40:eb:f1:4f:
f9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0B:C9:31:37:72:DA:07:A6:65:98:24:79:22:B1:7D:82:73:15:E4
X509v3 Authority Key Identifier:
keyid:E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:40:e6:24:aa:78:32:5a:03:8b:95:f8:4c:aa:c4:8e:0f:28:
4f:2d:8b:cd:2f:9f:1d:32:5b:f4:2d:e2:7e:8d:a6:0f:fb:d9:
46:db:cd:16:b5:b1:f2:ec:b9:c3:43:43:71:5b:41:0a:5c:f9:
1d:a8:10:17:3e:f7:04:1b:dc:db:98:af:61:72:bb:9e:2a:7c:
d1:73:b0:0e:f2:bb:7b:69:5e:86:25:37:23:e1:b5:8a:6e:df:
6d:3a:0b:4d:f7:24:3a:f5:db:fc:4a:1a:21:4e:85:b3:a5:d0:
c0:88:01:88:f2:e4:e8:22:42:c2:e5:64:07:4e:98:99:79:02:
a6:70:f9:44:19:88:3a:99:23:90:20:a4:b5:22:ce:bf:3a:ca:
67:76:fc:97:ca:5b:38:a7:de:45:26:0c:71:9d:86:dd:15:a8:
83:a8:78:3b:3b:34:87:d4:20:32:5e:f2:4c:73:3b:80:96:1a:
38:90:1f:65:e6:aa:19:69:0e:a0:3f:fa:78:bd:f4:76:a8:e7:
3e:b9:81:4d:2a:10:fb:cb:f9:e2:0a:41:cb:4c:fc:04:db:5e:
b4:27:05:7a:ba:68:a8:22:74:d7:03:61:fe:ef:47:60:68:08:
d3:79:0d:3f:e2:3a:1a:aa:a2:04:8c:38:13:7f:d1:ad:61:64:
d6:74:3c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:07:54 2026 by rpki-client