Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
File: MLepUygLb5mPwRxHy-kbgmM2TrA.mft (raw, json)
Hash identifier: +dafa4iSejmkaFfLQApF7BZ9x511GTmUG4xqTtdQpek=
Subject key identifier: 9C:6F:E8:28:6F:03:61:37:0D:F1:AB:1B:97:39:32:57:A9:07:AC:00
Authority key identifier: 30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0
Certificate issuer: /CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
Certificate serial: 019DA52F45AF4ABFA2F2338AC872FA996F6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
Manifest number: 07A4
Signing time: Sun 19 Apr 2026 10:00:31 +0000
Manifest this update: Sun 19 Apr 2026 10:00:31 +0000
Manifest next update: Mon 20 Apr 2026 10:00:31 +0000
Files and hashes: 1: MLepUygLb5mPwRxHy-kbgmM2TrA.crl (hash: 60IZJdq8sa2BGikn0KtNQ0TX5xBu8+CCYBQTWfQ7I6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:45:af:4a:bf:a2:f2:33:8a:c8:72:fa:99:6f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
Validity
Not Before: Apr 19 10:00:31 2026 GMT
Not After : Apr 20 10:00:31 2026 GMT
Subject: CN=9c6fe8286f0361370df1ab1b97393257a907ac00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4f:6d:39:bb:98:b5:f3:af:ae:c4:1e:f7:7b:
b1:d0:31:ae:46:40:0a:29:9a:71:3f:98:0d:57:a9:
f8:f6:d7:77:1c:17:2f:a3:0a:2d:69:6f:13:0b:f6:
67:28:98:48:d7:f0:23:41:5f:50:d4:fe:08:96:48:
ca:99:27:5d:1f:ce:ed:c8:41:31:90:d6:cf:8e:8c:
ad:c3:93:47:58:84:1d:87:b3:a5:6d:d6:ea:8d:4f:
4f:ba:7c:68:39:8f:4e:88:00:1e:38:a0:e5:82:d9:
7c:be:8f:ad:16:89:1d:d9:f3:61:3c:a4:b4:8f:99:
f6:0b:6b:ee:5a:7c:60:29:d5:7a:88:9b:ef:a8:ba:
a9:6b:0f:73:dc:be:35:da:36:5f:33:b1:1d:a4:39:
8a:c1:34:0a:5c:d1:51:c2:17:d0:0f:e0:79:47:78:
86:74:66:4d:3b:99:0c:20:98:39:4b:be:93:90:74:
5c:42:b9:2a:fa:9c:f3:81:f0:ec:5a:7d:ff:fc:2a:
60:4a:b1:d8:4e:53:95:47:87:23:0e:56:a4:d0:cf:
ae:de:1b:45:59:06:69:47:d8:63:3b:87:0d:94:e7:
a3:a1:06:6b:7a:b9:cf:f4:ac:ba:3d:a2:e5:8b:fc:
1a:0b:9d:1c:5a:3e:aa:13:99:83:2e:18:3e:fa:58:
b1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6F:E8:28:6F:03:61:37:0D:F1:AB:1B:97:39:32:57:A9:07:AC:00
X509v3 Authority Key Identifier:
keyid:30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:46:d4:dc:13:0e:83:a1:4b:1c:55:d4:43:ba:9a:7f:b7:6a:
06:17:c2:e6:46:37:91:22:f6:73:bf:90:d8:21:e1:f6:be:11:
00:a9:dd:8a:ff:35:0d:65:3d:8a:d4:af:6c:cf:3d:dc:59:dd:
5b:fa:ec:ec:e6:df:f8:0e:3c:ef:4e:c6:be:0a:5a:aa:e3:0a:
9d:04:95:c0:7f:e9:6a:9a:f7:ab:79:57:89:69:3a:81:eb:4a:
2c:97:97:26:f9:51:6f:46:7b:66:ab:39:ad:37:22:85:95:7e:
9d:4f:d4:c8:8c:a6:ed:bd:08:c0:85:73:3e:0f:0d:41:85:c2:
25:1a:ae:c8:8c:5b:e8:9b:cc:f1:d9:40:74:7b:ae:b6:01:42:
4d:33:17:88:6d:2f:1e:bd:e2:79:44:26:8a:c3:26:43:77:80:
89:0c:db:42:2f:23:60:4d:00:4d:cf:39:0b:92:bb:13:c1:47:
06:8a:e8:67:23:53:2c:00:90:b2:fc:bf:41:32:31:18:68:38:
08:de:07:ce:0b:01:b2:28:81:5f:52:44:c5:50:8d:28:17:82:
47:db:95:c8:dd:dd:77:40:5d:1a:86:65:e4:ea:46:6f:5a:fb:
b9:c4:f7:dd:a9:4b:a8:79:f2:f4:e3:bd:5b:7e:c4:c0:4e:89:
fd:be:07:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:28:20 2026 by rpki-client