Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
File: 20iBY9r1DbZG3k3yTTTLrJk_RX8.mft (raw, json)
Hash identifier: Z4b1igr+SFMVp1l0S2IFg1pdxx0/9PgNDm2L9LDUZ5Q=
Subject key identifier: 66:99:BC:52:87:47:DD:7D:31:F2:6D:53:72:C9:65:C6:17:48:10:D7
Authority key identifier: DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F
Certificate issuer: /CN=db488163daf50db646de4df24d34cbac993f457f
Certificate serial: 019D984FA8761C6DEE66661B35B6EADC3059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
Manifest number: 18BF
Signing time: Thu 16 Apr 2026 22:00:50 +0000
Manifest this update: Thu 16 Apr 2026 22:00:50 +0000
Manifest next update: Fri 17 Apr 2026 22:00:50 +0000
Files and hashes: 1: 20iBY9r1DbZG3k3yTTTLrJk_RX8.crl (hash: wEXUpXfFt9fUR9Ae8VHkZUtcK7PS7Y/3AiOPK1CTXP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:a8:76:1c:6d:ee:66:66:1b:35:b6:ea:dc:30:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db488163daf50db646de4df24d34cbac993f457f
Validity
Not Before: Apr 16 22:00:50 2026 GMT
Not After : Apr 17 22:00:50 2026 GMT
Subject: CN=6699bc528747dd7d31f26d5372c965c6174810d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:30:45:d9:83:ec:2d:e5:57:7a:3e:7b:55:25:
62:db:b3:de:05:8e:5f:a2:fd:18:7e:8e:4d:9c:6a:
92:ff:7b:e2:ed:15:b5:8f:e4:c5:d4:19:b2:d1:e3:
a2:ab:c3:77:6d:ed:a1:14:90:3c:69:3b:e7:47:e4:
36:76:45:b9:ac:3c:65:4c:9c:b2:06:42:6f:04:92:
ee:95:a3:16:fe:59:b2:50:ee:c6:d0:5e:f2:f0:58:
6b:16:a3:94:c9:a0:6f:74:5f:98:31:ea:4d:4c:af:
f0:70:03:e5:eb:20:e3:dd:2f:e9:2c:1f:25:8f:a8:
bb:c2:41:c9:37:00:93:9c:55:dd:e7:ef:1d:6e:56:
99:3c:e1:26:59:8d:91:b9:83:61:c3:3b:30:14:23:
2d:b3:05:08:a4:d3:f4:ff:3a:42:df:c6:fc:3d:b7:
75:be:40:94:8a:dc:19:4b:d9:9b:0b:a4:9d:e6:1a:
e7:aa:3e:0f:e0:8e:86:b1:7f:20:db:dc:74:3d:09:
5c:8d:f4:a0:3b:5a:27:b9:8f:8d:65:5f:ae:21:08:
09:df:11:1c:21:26:b4:e4:1d:6e:6b:1a:46:77:69:
71:51:95:e6:ce:f6:97:68:05:7a:a1:f0:75:f0:37:
1a:58:ed:9c:b8:ab:ae:1a:47:a6:8d:f5:ac:a9:ec:
81:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:99:BC:52:87:47:DD:7D:31:F2:6D:53:72:C9:65:C6:17:48:10:D7
X509v3 Authority Key Identifier:
keyid:DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:19:8a:60:ce:a0:f6:37:88:1b:b2:d0:47:9f:05:4c:72:dc:
6f:09:63:b8:59:00:36:34:23:27:2c:4d:6a:89:a0:9b:6e:2e:
b5:e0:ec:02:c6:50:5d:d3:ed:a6:a9:55:60:d3:4b:85:f1:36:
e6:93:26:5c:f2:b3:ff:12:d5:00:7e:b3:3b:4c:64:d5:cb:ae:
ea:a9:60:fc:a2:54:2d:c9:71:37:44:29:78:c6:85:20:2f:f9:
5f:6f:ed:40:f0:15:77:8d:66:b5:6b:a4:29:e4:bd:29:83:fc:
c4:6d:e6:f9:9d:c0:0c:17:8f:f0:96:b6:5b:90:3c:93:c8:f4:
16:9c:57:f9:f2:1a:88:4d:c3:90:44:d1:7f:e3:17:c7:38:af:
14:8d:ce:a8:ed:b4:1a:93:46:b3:9d:f7:37:e7:88:03:85:10:
80:95:0e:31:35:ff:0c:70:45:71:69:fe:d5:50:d3:a0:f9:61:
c3:91:9b:2b:d9:b8:fe:90:d6:58:09:8c:60:29:6e:f0:93:3e:
7f:fc:33:83:49:84:01:77:57:4c:e0:b5:f0:06:1e:b2:fc:86:
74:2f:a8:b8:ad:6f:24:5f:4a:a1:e7:22:81:00:3e:b4:bb:ed:
ea:8b:d5:e7:fb:f4:b2:cd:42:e6:1e:e5:55:4c:aa:94:b7:da:
51:8e:0c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:52:02 2026 by rpki-client