Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
File: 0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft (raw, json)
Hash identifier: oNwk32hJq0Wn9uZb0VqGwPOcEwu8extwxudcxfU8pOc=
Subject key identifier: E3:AC:9E:EA:44:0E:1B:FF:04:C0:16:E4:A6:15:7E:44:AB:19:5C:AE
Authority key identifier: D1:DB:4A:7D:1E:6A:BF:FB:CD:A7:8B:FC:33:12:50:DD:16:BE:3D:E0
Certificate issuer: /CN=d1db4a7d1e6abffbcda78bfc331250dd16be3de0
Certificate serial: 019D9B5170BFD55961CD77B0BA46DCFBFA30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
Manifest number: 0F6C
Signing time: Fri 17 Apr 2026 12:01:38 +0000
Manifest this update: Fri 17 Apr 2026 12:01:38 +0000
Manifest next update: Sat 18 Apr 2026 12:01:38 +0000
Files and hashes: 1: 0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl (hash: F3ilJ5idfXm4QmwqrAeAJ4WUoZS0RsLVyHcMDnZIRds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:70:bf:d5:59:61:cd:77:b0:ba:46:dc:fb:fa:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1db4a7d1e6abffbcda78bfc331250dd16be3de0
Validity
Not Before: Apr 17 12:01:38 2026 GMT
Not After : Apr 18 12:01:38 2026 GMT
Subject: CN=e3ac9eea440e1bff04c016e4a6157e44ab195cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6e:f1:49:5e:54:a6:99:d3:00:9c:58:03:6e:
cb:66:88:92:6f:ed:80:8e:70:6b:57:40:95:0d:d5:
b8:2d:78:89:18:98:49:cc:9f:2f:9d:9b:ef:a0:6a:
32:7e:e4:b1:05:f9:a5:ed:bb:41:3d:f8:a4:78:af:
51:3f:c1:d1:a2:60:5e:05:b8:97:12:3d:c8:75:f0:
11:74:5c:bb:82:66:cc:d7:b4:5d:3c:9b:7f:43:41:
38:f8:80:9a:e0:5b:ac:17:23:0a:05:1a:cf:05:76:
69:ba:e3:b2:2e:9c:63:44:29:24:21:3a:cd:cb:35:
22:ec:02:58:9a:cd:e0:c9:6b:58:ed:02:7f:ec:47:
8a:7f:d5:7d:b6:97:2d:87:60:d7:a2:86:3b:a1:75:
bc:40:50:87:ee:dd:4d:80:92:19:e0:3b:e8:b5:6a:
64:c0:7e:ae:6a:e5:ef:60:ff:11:c4:8f:e4:d0:b0:
9f:f8:6f:2b:91:e9:f1:3e:79:1b:a3:b7:61:f0:29:
8a:ea:aa:76:53:ad:f2:a6:13:71:f5:14:0f:78:05:
ff:ae:bf:f4:50:06:2b:1c:89:08:e3:e6:a3:05:2d:
e6:40:bf:1f:ff:d7:9c:0e:75:fc:0a:50:ac:f6:f6:
a7:55:b9:63:56:b4:d7:75:1e:05:02:fc:6b:bb:06:
83:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AC:9E:EA:44:0E:1B:FF:04:C0:16:E4:A6:15:7E:44:AB:19:5C:AE
X509v3 Authority Key Identifier:
keyid:D1:DB:4A:7D:1E:6A:BF:FB:CD:A7:8B:FC:33:12:50:DD:16:BE:3D:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:13:76:52:ce:4d:48:07:35:bf:c4:32:a2:2e:ee:45:88:cd:
7d:68:fc:4b:88:9c:07:53:99:b3:8c:bb:88:5f:41:61:ec:b3:
cb:38:99:7a:0f:26:66:ec:cb:c5:d4:e9:67:29:5b:77:6f:c2:
a9:1e:90:a8:89:ac:78:cf:23:c4:5a:3c:4b:ac:29:61:0b:df:
fc:4d:bf:2d:cc:b1:d8:ed:14:13:a5:b7:8e:a7:9e:d5:eb:7f:
75:44:0c:28:a6:71:a4:af:1d:a5:ab:40:b2:e7:a3:33:53:6b:
97:f4:bf:ca:63:35:9e:89:b3:a5:79:0a:54:1a:c1:9c:23:aa:
e8:70:57:d0:dd:81:66:1c:c2:df:d9:c3:13:1a:4f:6f:31:e7:
c2:00:bc:35:01:bf:3d:88:17:db:96:2c:ab:35:79:98:9d:85:
49:8d:62:ee:2a:f0:b7:57:cb:e0:82:82:e3:f5:17:f5:03:3e:
15:e2:56:86:49:4f:67:41:55:66:1d:44:b8:71:91:dd:50:a8:
00:f8:fe:12:ce:5c:7e:2b:4c:4f:35:23:9f:1b:50:88:fd:e7:
43:32:56:ff:34:8c:3e:28:ec:05:96:ad:a8:f8:aa:c2:a6:a7:
b8:b9:e4:58:27:67:53:a9:b3:80:e5:ce:c5:cf:df:21:c7:a3:
39:98:2a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:06:45 2026 by rpki-client