Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
File: a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft (raw, json)
Hash identifier: Ix9i3q4DwbMKAWOajo5m+gUO+NdZbGtjoYb+awP3gPo=
Subject key identifier: D0:A6:2F:67:8F:94:75:A1:FE:04:A9:2C:A5:03:1A:8D:11:23:60:19
Authority key identifier: 6B:B0:CB:2A:E4:6D:23:82:58:1F:E8:B7:47:E3:31:B4:68:24:F4:1E
Certificate issuer: /CN=6bb0cb2ae46d2382581fe8b747e331b46824f41e
Certificate serial: 019D98F43CBB4312B336FC75C8A8CD64B296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 01:00:36 +0000
Manifest this update: Fri 17 Apr 2026 01:00:36 +0000
Manifest next update: Sat 18 Apr 2026 01:00:36 +0000
Files and hashes: 1: a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl (hash: WAkXNeXORaqeGGt81+D0cwF5KtQD+RLocYDhiY85hAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:3c:bb:43:12:b3:36:fc:75:c8:a8:cd:64:b2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb0cb2ae46d2382581fe8b747e331b46824f41e
Validity
Not Before: Apr 17 01:00:36 2026 GMT
Not After : Apr 18 01:00:36 2026 GMT
Subject: CN=d0a62f678f9475a1fe04a92ca5031a8d11236019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1c:7d:3e:da:14:30:39:64:c8:44:de:40:ae:
86:c6:5c:b3:63:64:09:a9:ab:cc:b1:37:ca:b5:0a:
8a:b0:64:97:01:a0:fa:05:ed:b4:5c:3a:80:57:d6:
68:06:52:59:36:99:14:bd:80:d5:a6:3c:2c:d7:d0:
d3:dc:30:14:14:23:d0:80:b2:30:c2:fd:d2:9c:f7:
3a:c8:1b:3a:1e:a7:86:ea:d4:b4:f7:d2:d6:a7:6b:
b9:cd:4b:c6:28:c0:52:7a:a3:cc:7e:35:3c:66:9d:
35:01:98:f7:6b:49:cf:ca:9d:2e:84:f3:d9:b6:88:
ca:db:8f:17:4f:ec:e3:17:34:3e:a7:92:37:a7:14:
94:6d:0d:22:4b:2f:d0:8e:a3:1e:47:43:5d:56:29:
f6:c5:ae:07:37:92:5e:e6:7b:db:ca:fe:62:30:e4:
b4:c9:49:6c:9e:6d:65:86:77:e2:77:9a:89:5b:5e:
9a:ca:65:52:1f:d8:de:c2:48:c4:c3:b0:e0:82:de:
7c:a4:7f:8a:61:6e:d2:6d:34:a3:2d:a4:e6:ec:3a:
bc:9e:09:5b:e4:f8:dc:c8:58:bc:c7:d7:7b:f5:e8:
5d:dd:0e:3a:13:99:56:51:c6:5c:4a:2f:db:f3:4a:
81:4c:93:f2:ab:97:1b:3a:6c:ed:50:42:ad:af:2a:
dc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A6:2F:67:8F:94:75:A1:FE:04:A9:2C:A5:03:1A:8D:11:23:60:19
X509v3 Authority Key Identifier:
keyid:6B:B0:CB:2A:E4:6D:23:82:58:1F:E8:B7:47:E3:31:B4:68:24:F4:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:69:3d:41:c3:03:a3:12:e8:ef:3d:12:55:2a:b4:7a:ee:0f:
0b:3d:a7:5d:6a:40:31:9e:18:4a:93:77:84:d5:fd:4c:e6:64:
f4:64:4c:ee:e4:72:f2:86:2f:59:c9:f1:3a:5a:2b:22:f9:fb:
0d:fb:3f:c4:60:3f:66:16:16:9e:1b:58:cb:0b:ff:fa:ca:8a:
9c:92:47:6e:48:84:a5:70:9b:6c:d1:bb:ee:63:e8:24:a3:2c:
bd:28:c6:11:83:3b:7c:8d:ff:a7:df:fc:c5:63:47:6f:41:18:
e9:ca:d9:b3:cc:0a:cf:75:82:25:9b:fe:1d:9a:12:c0:07:c0:
cb:d6:ea:f3:28:e6:1e:52:19:d6:b1:25:6f:a3:26:2d:4f:51:
31:84:23:00:57:6f:07:97:1e:7a:8c:e7:7b:3a:fd:fb:1e:1e:
f3:7a:b6:fe:fe:5e:1c:45:dd:d6:64:d5:f9:64:6d:04:73:69:
7a:21:8f:62:a9:aa:37:80:06:bb:5a:88:22:a6:46:ac:da:23:
74:e0:c7:b5:88:e1:2b:95:3f:85:c2:e3:72:70:f2:67:99:d6:
fe:27:37:f0:05:4c:af:99:1b:a4:3e:60:20:b9:71:29:36:72:
82:3a:2b:23:f5:9e:ae:d3:77:df:a8:b8:1b:0e:c4:ec:8e:d2:
32:39:82:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9Dy7QxKzNvx1yKjNZLKWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYjBjYjJhZTQ2ZDIzODI1ODFmZThiNzQ3ZTMzMWI0Njgy
NGY0MWUwHhcNMjYwNDE3MDEwMDM2WhcNMjYwNDE4MDEwMDM2WjAzMTEwLwYDVQQD
EyhkMGE2MmY2NzhmOTQ3NWExZmUwNGE5MmNhNTAzMWE4ZDExMjM2MDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphx9PtoUMDlkyETeQK6GxlyzY2QJ
qavMsTfKtQqKsGSXAaD6Be20XDqAV9ZoBlJZNpkUvYDVpjws19DT3DAUFCPQgLIw
wv3SnPc6yBs6HqeG6tS099LWp2u5zUvGKMBSeqPMfjU8Zp01AZj3a0nPyp0uhPPZ
tojK248XT+zjFzQ+p5I3pxSUbQ0iSy/QjqMeR0NdVin2xa4HN5Je5nvbyv5iMOS0
yUlsnm1lhnfid5qJW16aymVSH9jewkjEw7Dggt58pH+KYW7SbTSjLaTm7Dq8nglb
5PjcyFi8x9d79ehd3Q46E5lWUcZcSi/b80qBTJPyq5cbOmztUEKtryrcBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCmL2ePlHWh/gSpLKUDGo0RI2AZMB8GA1UdIwQY
MBaAFGuwyyrkbSOCWB/ot0fjMbRoJPQeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTdETEt1UnRJNEpZSC1pM1ItTXh0R2drOUI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZjZjNWYtZWFmOS00NmNlLTllMTYt
ZjI5MGM1NjNmZjUwLzEvYTdETEt1UnRJNEpZSC1pM1ItTXh0R2drOUI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZjZjNWYtZWFmOS00NmNlLTllMTYtZjI5MGM1NjNmZjUw
LzEvYTdETEt1UnRJNEpZSC1pM1ItTXh0R2drOUI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWk9QcMD
oxLo7z0SVSq0eu4PCz2nXWpAMZ4YSpN3hNX9TOZk9GRM7uRy8oYvWcnxOlorIvn7
Dfs/xGA/ZhYWnhtYywv/+sqKnJJHbkiEpXCbbNG77mPoJKMsvSjGEYM7fI3/p9/8
xWNHb0EY6crZs8wKz3WCJZv+HZoSwAfAy9bq8yjmHlIZ1rElb6MmLU9RMYQjAFdv
B5ceeoznezr9+x4e83q2/v5eHEXd1mTV+WRtBHNpeiGPYqmqN4AGu1qIIqZGrNoj
dODHtYjhK5U/hcLjcnDyZ5nW/ic38AVMr5kbpD5gILlxKTZygjorI/WertN336i4
Gw7E7I7SMjmCuA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:34:43 2026 by rpki-client