Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
File: 468Yd0OnoHf2oeBmX92q700SSfs.mft (raw, json)
Hash identifier: JJqbv98RMUvxJTB8CluD3yx6tWedvZb4ptqbKsLGBoI=
Subject key identifier: 8E:23:87:B7:30:3F:68:DA:0E:86:70:B9:2B:48:E4:35:77:2B:67:E2
Authority key identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
Certificate issuer: /CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Certificate serial: 019FA82BE305B559FC1512DA8742D5F1884E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
Manifest number: 0D2E
Signing time: Tue 28 Jul 2026 10:01:16 +0000
Manifest this update: Tue 28 Jul 2026 10:01:16 +0000
Manifest next update: Wed 29 Jul 2026 10:01:16 +0000
Files and hashes: 1: 468Yd0OnoHf2oeBmX92q700SSfs.crl (hash: adMttIdLWrvMhc2Lhsg00lXygfdQ/q6xviw+/en00Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:e3:05:b5:59:fc:15:12:da:87:42:d5:f1:88:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Validity
Not Before: Jul 28 10:01:16 2026 GMT
Not After : Jul 29 10:01:16 2026 GMT
Subject: CN=8e2387b7303f68da0e8670b92b48e435772b67e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:44:aa:05:b2:74:19:cb:d8:83:38:f3:b2:9d:
d9:5c:e9:59:3f:fd:5a:d5:49:ff:03:85:a8:3a:1a:
a5:75:f7:f2:7f:f7:7c:9c:ae:69:09:b2:71:4c:6d:
a9:f9:18:44:fb:be:79:0f:55:3d:77:6f:49:b0:22:
c2:c8:48:9c:11:1e:3d:af:ef:ab:ea:0e:6c:2d:8e:
14:9e:10:1e:ea:08:22:c4:e5:5b:b4:b6:0c:ee:30:
e7:fe:74:2c:3b:bb:c3:49:53:f9:ae:0b:a0:4e:02:
74:66:c4:f1:9d:76:ef:a8:b1:74:f5:74:e5:84:c2:
ff:7d:4f:dd:d6:e8:5c:ef:f9:0c:3c:95:b6:f7:6a:
af:ca:be:ad:0b:e8:da:9d:0d:cc:62:e5:fa:42:df:
2e:1e:e4:71:b9:ad:45:d1:a8:6e:c4:28:49:7a:51:
67:af:43:92:55:c6:85:8f:6a:61:55:de:4e:eb:9e:
b1:ab:99:30:cf:e2:3e:df:af:56:7c:ec:4b:ea:66:
a8:59:6b:ff:14:70:0c:4d:8f:07:51:0b:0b:5e:48:
7a:b6:87:8c:b3:06:27:1d:a8:e4:22:8c:66:0e:75:
dd:be:05:f8:af:0b:8a:2d:40:bc:dc:cc:d9:ea:56:
d7:0b:a4:a2:47:f4:14:8f:19:a1:5b:2f:ba:d5:a9:
0d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:23:87:B7:30:3F:68:DA:0E:86:70:B9:2B:48:E4:35:77:2B:67:E2
X509v3 Authority Key Identifier:
keyid:E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:56:a1:5b:7c:a7:b8:08:9e:73:c8:a2:b4:d2:e4:12:0e:5f:
71:f3:0c:db:67:ea:1b:7e:8b:85:6f:71:a6:66:7c:8f:4f:ce:
a0:6d:15:7e:8d:5a:1d:e5:bc:5f:44:c0:63:41:0f:88:18:dd:
f0:25:c0:22:66:61:81:ee:3d:71:52:dc:10:47:09:81:da:7f:
e0:87:7d:2c:9a:92:47:c0:9d:56:07:69:41:6c:41:fb:99:fc:
31:d2:f2:89:45:7f:c5:4c:44:dc:c5:f2:40:75:f5:85:31:66:
65:c8:63:d2:a8:f7:06:c3:75:40:39:2f:10:d3:10:f0:a3:4a:
f2:b2:8b:d8:1d:1c:d2:b3:5f:1b:de:4d:5c:78:90:b5:1d:b4:
38:13:c9:66:d0:09:e4:5c:aa:62:d7:fc:51:45:3b:fa:79:31:
37:16:29:2b:53:cf:ab:33:1e:e2:27:57:73:78:bb:81:93:30:
87:76:a4:53:e8:0c:27:77:f1:a8:71:e5:1c:4a:b7:81:68:a9:
9a:71:7d:00:10:9e:25:79:7d:a3:5c:dc:0c:b7:ff:63:aa:33:
2d:83:3d:80:96:27:b1:c5:8a:38:28:72:e7:08:5b:ca:ce:28:
24:8a:07:47:52:74:85:c0:37:b8:1a:6e:6f:08:7f:e7:63:8f:
5b:42:eb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:20 2026 by rpki-client