Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
File: rl81puj7U5sZVMtDps516X-q4XU.mft (raw, json)
Hash identifier: qyvf+epjm9vV12cYYQqX9iezqv+Q/ky94HGa69wxMw0=
Subject key identifier: D7:43:2C:69:FF:ED:3F:26:54:71:04:63:53:70:20:75:C3:09:71:90
Authority key identifier: AE:5F:35:A6:E8:FB:53:9B:19:54:CB:43:A6:CE:75:E9:7F:AA:E1:75
Certificate issuer: /CN=ae5f35a6e8fb539b1954cb43a6ce75e97faae175
Certificate serial: 019D98F479431ADFBE02985B93941F76D88C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
Manifest number: 0CB8
Signing time: Fri 17 Apr 2026 01:00:51 +0000
Manifest this update: Fri 17 Apr 2026 01:00:51 +0000
Manifest next update: Sat 18 Apr 2026 01:00:51 +0000
Files and hashes: 1: rl81puj7U5sZVMtDps516X-q4XU.crl (hash: liQFISlvbh29aCOXTK/8/mXaAotFlkmRCbAH0XIkrD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:79:43:1a:df:be:02:98:5b:93:94:1f:76:d8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae5f35a6e8fb539b1954cb43a6ce75e97faae175
Validity
Not Before: Apr 17 01:00:51 2026 GMT
Not After : Apr 18 01:00:51 2026 GMT
Subject: CN=d7432c69ffed3f265471046353702075c3097190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:23:4a:4d:12:d7:b6:56:4d:8e:55:d6:b2:fe:
31:a6:84:b2:7c:f2:62:99:06:45:ff:3c:7f:df:b6:
d2:56:8f:03:8a:46:03:48:6d:03:ab:cb:50:6a:a3:
03:41:dd:d5:83:89:bb:9c:4a:08:e8:4f:ff:a9:27:
76:33:9a:88:50:2b:33:33:bc:14:50:20:3b:0b:3f:
26:2d:fd:9e:7b:7d:c2:fb:c1:a5:81:41:dc:de:ae:
81:a0:15:9c:b8:80:23:55:25:cd:f2:7e:dc:96:34:
7e:0e:a9:40:99:b6:31:0e:4d:73:77:37:37:b7:53:
72:ea:5f:94:5d:8e:9d:73:61:1a:a3:0d:ab:0e:9b:
85:18:b6:c9:2d:89:2c:07:45:9d:d1:3d:3d:a2:01:
75:7c:1c:80:68:ff:15:5d:59:f8:c5:57:96:c3:97:
da:ee:77:3e:ee:46:16:6c:47:89:e7:2c:09:a6:2f:
20:0a:17:e1:62:ad:f5:5b:a6:84:03:2f:55:88:4c:
f3:d7:e3:32:9b:7a:b6:58:ca:fe:49:86:d5:c7:29:
ec:f0:47:18:65:37:64:05:e0:25:fd:2f:58:01:21:
31:82:fa:b7:6d:90:19:bb:2e:32:34:05:28:2a:9f:
00:7b:a0:84:ce:55:45:35:ca:d7:dd:e8:7b:a7:15:
f5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:43:2C:69:FF:ED:3F:26:54:71:04:63:53:70:20:75:C3:09:71:90
X509v3 Authority Key Identifier:
keyid:AE:5F:35:A6:E8:FB:53:9B:19:54:CB:43:A6:CE:75:E9:7F:AA:E1:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:75:7c:c3:c8:18:10:e1:4b:03:96:0a:60:fb:a7:ae:f3:a6:
81:39:ad:ed:b2:09:67:1c:df:c6:1e:ac:a3:1f:a6:7e:60:44:
8d:d4:0d:cb:0b:e7:e0:2b:cd:86:b3:ac:ed:4b:85:9e:12:b6:
d3:8d:c8:36:5e:be:bf:8d:9b:9d:ec:53:1c:1a:e8:26:93:96:
09:64:6a:1a:6c:2a:fc:99:86:d0:9f:c1:de:7a:e3:e0:b8:10:
c7:f6:de:69:fc:39:a2:57:12:e9:0d:ce:13:26:a3:75:60:b5:
90:48:e8:2a:f6:78:55:48:01:7c:04:a8:f8:de:c3:1b:35:3d:
88:a1:6f:5a:09:09:25:8e:ff:aa:57:42:2d:05:25:74:74:5b:
29:a3:95:df:2b:5b:1a:86:b4:72:fc:5b:9d:54:2f:43:cb:4e:
32:f1:04:12:b5:5f:e1:1e:5d:92:69:a8:cd:e7:59:d1:9b:c6:
4a:03:fb:2a:53:4e:43:1c:18:48:07:d9:88:3c:71:de:a0:17:
0a:ed:14:bf:39:90:f1:d9:e0:7b:26:3f:ee:8a:c8:0a:02:2b:
be:6c:8c:59:59:66:9d:f1:1c:9c:98:79:d0:24:78:09:1f:db:
29:37:bf:11:0f:57:5e:1f:80:80:c7:a6:ad:d8:31:24:80:c1:
20:3a:47:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9HlDGt++Aphbk5QfdtiMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNWYzNWE2ZThmYjUzOWIxOTU0Y2I0M2E2Y2U3NWU5N2Zh
YWUxNzUwHhcNMjYwNDE3MDEwMDUxWhcNMjYwNDE4MDEwMDUxWjAzMTEwLwYDVQQD
EyhkNzQzMmM2OWZmZWQzZjI2NTQ3MTA0NjM1MzcwMjA3NWMzMDk3MTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSNKTRLXtlZNjlXWsv4xpoSyfPJi
mQZF/zx/37bSVo8DikYDSG0Dq8tQaqMDQd3Vg4m7nEoI6E//qSd2M5qIUCszM7wU
UCA7Cz8mLf2ee33C+8GlgUHc3q6BoBWcuIAjVSXN8n7cljR+DqlAmbYxDk1zdzc3
t1Ny6l+UXY6dc2Eaow2rDpuFGLbJLYksB0Wd0T09ogF1fByAaP8VXVn4xVeWw5fa
7nc+7kYWbEeJ5ywJpi8gChfhYq31W6aEAy9ViEzz1+Mym3q2WMr+SYbVxyns8EcY
ZTdkBeAl/S9YASExgvq3bZAZuy4yNAUoKp8Ae6CEzlVFNcrX3eh7pxX1iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdDLGn/7T8mVHEEY1NwIHXDCXGQMB8GA1UdIwQY
MBaAFK5fNabo+1ObGVTLQ6bOdel/quF1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmw4MXB1ajdVNXNaVk10RHBzNTE2WC1xNFhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9mZWI3ZTAtMmI3ZS00MjZjLWIwMzct
MjA5MWNjYThiYzQ4LzEvcmw4MXB1ajdVNXNaVk10RHBzNTE2WC1xNFhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9mZWI3ZTAtMmI3ZS00MjZjLWIwMzctMjA5MWNjYThiYzQ4
LzEvcmw4MXB1ajdVNXNaVk10RHBzNTE2WC1xNFhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw3V8w8gY
EOFLA5YKYPunrvOmgTmt7bIJZxzfxh6sox+mfmBEjdQNywvn4CvNhrOs7UuFnhK2
043INl6+v42bnexTHBroJpOWCWRqGmwq/JmG0J/B3nrj4LgQx/beafw5olcS6Q3O
EyajdWC1kEjoKvZ4VUgBfASo+N7DGzU9iKFvWgkJJY7/qldCLQUldHRbKaOV3ytb
Goa0cvxbnVQvQ8tOMvEEErVf4R5dkmmozedZ0ZvGSgP7KlNOQxwYSAfZiDxx3qAX
Cu0UvzmQ8dngeyY/7orICgIrvmyMWVlmnfEcnJh50CR4CR/bKTe/EQ9XXh+AgMem
rdgxJIDBIDpHtA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:05 2026 by rpki-client