Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
File: c63mtioyesxAP-7D4asctt4tXgw.mft (raw, json)
Hash identifier: lrDHirysu5xvSq6VWjKSirRU39ILH7RlSLjXf1TmQEw=
Subject key identifier: 45:11:9A:D9:B4:51:72:16:52:23:03:60:EF:91:C7:33:8A:D4:F8:3D
Authority key identifier: 73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C
Certificate issuer: /CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c
Certificate serial: 019DA48B1DBEC5750B031935BA58F9E7CF7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
Manifest number: 128E
Signing time: Sun 19 Apr 2026 07:01:13 +0000
Manifest this update: Sun 19 Apr 2026 07:01:13 +0000
Manifest next update: Mon 20 Apr 2026 07:01:13 +0000
Files and hashes: 1: c63mtioyesxAP-7D4asctt4tXgw.crl (hash: sroffAXqHq3SgBU8ywH57m3kKVwUaGEXeipb2cNCKTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:1d:be:c5:75:0b:03:19:35:ba:58:f9:e7:cf:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c
Validity
Not Before: Apr 19 07:01:13 2026 GMT
Not After : Apr 20 07:01:13 2026 GMT
Subject: CN=45119ad9b451721652230360ef91c7338ad4f83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:42:63:ac:0e:d2:3d:65:8a:1c:38:11:49:73:
f3:13:71:d2:91:ab:4c:10:60:17:a6:ad:58:fd:28:
f8:66:98:1b:b1:2b:65:b6:c2:91:32:09:e8:a0:40:
e5:20:22:df:0a:b2:62:5f:d2:76:cc:a9:d6:24:d5:
db:3d:a2:41:69:13:b1:1d:60:0e:8b:0a:6b:36:56:
d2:10:65:98:e7:2f:b9:9d:fd:ae:56:6e:27:d7:f7:
29:b1:73:63:c4:68:41:04:eb:3b:8c:2c:ec:43:25:
5e:83:bf:81:39:54:c9:b8:ed:da:e8:5a:53:da:63:
fe:e0:34:30:7d:e2:cb:c4:ee:ef:12:79:34:52:50:
8e:86:7b:63:ce:9f:df:67:6e:c8:88:e4:d0:de:3e:
28:33:69:a2:ca:33:e8:fe:89:41:d6:0a:53:b7:c7:
9f:55:5c:83:ca:87:07:c5:ad:0d:33:42:aa:a7:0b:
3d:9c:3c:8c:c3:2b:3c:7f:cd:b4:d9:0c:bf:78:b0:
07:83:93:5a:85:42:0b:0b:20:af:77:2c:a0:29:5e:
8d:47:21:8f:ef:a1:ff:06:23:94:12:83:cd:18:c1:
81:0b:df:bf:c5:f8:21:7b:fc:e8:dc:69:6a:d3:4f:
25:a6:9d:c9:ef:00:c1:ec:a1:e7:66:6b:10:0d:21:
6a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:11:9A:D9:B4:51:72:16:52:23:03:60:EF:91:C7:33:8A:D4:F8:3D
X509v3 Authority Key Identifier:
keyid:73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:fd:fe:ea:ac:49:43:87:a6:41:82:4a:a5:66:c8:38:ed:d1:
13:38:79:4e:ef:73:09:fd:60:e0:2e:d1:77:20:13:36:55:63:
6e:33:25:64:e8:06:dd:1f:5e:4c:9d:ff:56:f9:c0:0a:b3:50:
58:98:84:c0:fd:2e:bb:f9:87:95:29:4e:b7:e6:65:bf:bf:b9:
c8:11:72:5f:37:a1:7b:f1:da:1e:a2:49:d1:35:bf:e4:88:62:
50:88:a0:92:79:9e:a0:ea:d9:8e:72:92:f5:89:d5:93:9a:f8:
b9:b2:15:c5:69:76:e1:7a:82:3a:23:72:76:2c:19:28:71:6e:
6b:76:30:b6:05:87:4a:14:e4:55:0b:7b:83:af:c4:32:00:d9:
a5:e9:37:d4:5a:17:59:c7:9b:d9:2a:e1:f6:9f:2c:4d:6b:33:
02:dd:ae:e6:ab:5e:70:2e:ce:38:68:a7:86:00:d5:4c:c5:b1:
b6:e4:08:83:f9:6f:2a:46:f2:29:77:ff:5e:1c:37:08:30:9c:
e0:de:c8:6a:0a:17:9e:72:0c:b6:25:6b:1f:a1:11:27:eb:b8:
d8:00:89:84:4d:90:8b:ae:08:2f:9d:54:7a:39:12:e8:48:1a:
3f:b4:d7:ec:b8:c0:82:18:8e:da:1a:9f:1b:d7:f7:d0:71:b7:
13:94:8d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:49:06 2026 by rpki-client