Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
File: meKI93yZhWTyY056Lh0AnfLviH8.mft (raw, json)
Hash identifier: EfgNKlBhD3/fSWRAy/yN07XE5zGL+zSKJVqXq49uIU4=
Subject key identifier: CB:70:8A:07:8A:88:85:96:E7:8F:4B:E4:E6:96:42:F4:C4:10:16:5C
Authority key identifier: 99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
Certificate issuer: /CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Certificate serial: 019D9AE28D2A5986D660F56A3C1C4AD77ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
Manifest number: 1104
Signing time: Fri 17 Apr 2026 10:00:31 +0000
Manifest this update: Fri 17 Apr 2026 10:00:31 +0000
Manifest next update: Sat 18 Apr 2026 10:00:31 +0000
Files and hashes: 1: meKI93yZhWTyY056Lh0AnfLviH8.crl (hash: Jqy+XZrckmZ0kfcfowBQlOvQo7pQ93WX+5eRy6iTe48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:8d:2a:59:86:d6:60:f5:6a:3c:1c:4a:d7:7a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Validity
Not Before: Apr 17 10:00:31 2026 GMT
Not After : Apr 18 10:00:31 2026 GMT
Subject: CN=cb708a078a888596e78f4be4e69642f4c410165c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e0:27:45:23:54:d7:22:5f:ed:9c:fa:48:39:
3e:9c:80:0c:ab:42:2f:ff:da:b1:13:fb:83:07:19:
b3:d3:2a:f5:79:47:3a:22:7b:00:38:bb:fa:4e:c7:
6c:7d:b5:53:27:ec:79:0b:c3:28:ca:2d:16:53:98:
86:b4:70:78:9c:ef:f0:bb:a1:77:30:e9:e3:e0:30:
f2:55:83:25:d3:51:5f:ec:88:f6:3d:e9:8f:de:ed:
61:e1:89:0c:56:e6:83:1a:04:35:36:ba:7c:fb:82:
1d:c8:07:82:6a:bd:66:2b:97:59:2b:a1:45:c9:d8:
9b:fa:0f:cc:98:ab:58:8f:e3:1e:41:f8:bd:02:9b:
74:77:98:81:18:60:39:28:48:52:3c:88:bc:7f:e6:
ac:7e:fc:f4:42:0c:da:7f:67:e5:9c:35:f8:bb:1d:
62:40:9b:3b:ee:d2:16:34:16:c4:2a:8a:b8:ea:6c:
bd:61:1f:3e:fc:0e:32:dc:0e:1a:d2:8c:31:c8:c0:
86:a7:39:d8:b6:c3:be:7e:4e:c6:3a:fc:a4:89:ad:
93:da:40:f2:c6:ac:13:3e:c3:bb:e5:3b:98:65:19:
44:e9:d8:1b:f8:50:49:f7:bf:34:d4:0d:7b:ec:98:
b6:83:43:a9:4d:24:43:7e:b0:e0:a2:b6:50:f4:32:
f4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:70:8A:07:8A:88:85:96:E7:8F:4B:E4:E6:96:42:F4:C4:10:16:5C
X509v3 Authority Key Identifier:
keyid:99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3d:c2:f7:54:be:9d:13:15:28:13:d9:3e:9e:bc:58:40:da:
bf:be:88:a2:e6:46:42:12:56:70:5c:2d:78:f5:a5:e8:f9:6c:
23:b1:da:3a:ec:fe:67:1e:4e:74:95:1d:f1:60:92:17:c3:95:
0c:cf:a2:94:83:f1:eb:cc:04:a1:ba:95:c5:ab:fd:90:52:1a:
04:b9:52:3d:f5:f6:da:d3:83:db:90:8d:6f:04:9c:92:ce:8e:
43:55:5e:81:6f:9d:b2:33:d2:8a:5d:99:1d:e3:c2:32:d4:e9:
8b:37:ce:b1:b1:d5:f4:ad:6c:f3:63:7c:70:84:65:17:1c:a4:
3d:c7:e6:17:29:5d:f7:d5:b2:77:6a:6f:e2:1f:3f:54:a3:e7:
da:b4:7b:31:42:b5:f1:4d:d9:78:6e:55:ba:20:be:7c:1b:a2:
0b:e3:60:bf:a6:40:26:a6:3d:69:9c:f7:9a:6d:66:cd:4b:3c:
ea:88:4a:a6:f9:94:80:88:a5:6c:50:8f:15:23:9d:58:0a:47:
ca:07:9b:75:47:9d:f5:04:6f:81:ad:c3:c3:28:2c:f1:66:22:
5e:6e:94:12:6b:f3:80:73:96:83:3c:52:2d:0e:2a:19:a0:b5:
c2:d2:01:7c:1a:b1:dd:87:b4:3b:8f:d0:36:08:5e:a8:8c:3c:
c3:86:ea:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:45:37 2026 by rpki-client