Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.mft
File: b2SOPKtgm9FIPKPlGRHOqlPwxqE.mft (raw, json)
Hash identifier: /mSf3u6Sd3nBPviNPy4GgE7TBge1SbM1ew2WjZBYtLo=
Subject key identifier: 57:EA:73:83:A1:FD:49:84:3C:A6:55:D0:AE:4F:97:5A:B8:EB:54:F7
Authority key identifier: 6F:64:8E:3C:AB:60:9B:D1:48:3C:A3:E5:19:11:CE:AA:53:F0:C6:A1
Certificate issuer: /CN=6f648e3cab609bd1483ca3e51911ceaa53f0c6a1
Certificate serial: 019D99CFBBC91E185D226F1BFB5D08C55E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2SOPKtgm9FIPKPlGRHOqlPwxqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.mft
Manifest number: 12B9
Signing time: Fri 17 Apr 2026 05:00:21 +0000
Manifest this update: Fri 17 Apr 2026 05:00:21 +0000
Manifest next update: Sat 18 Apr 2026 05:00:21 +0000
Files and hashes: 1: b2SOPKtgm9FIPKPlGRHOqlPwxqE.crl (hash: nmQnqYxzdSpA2dbQc0MJxN0zAzs4ngi2cjxc9hqIKBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2SOPKtgm9FIPKPlGRHOqlPwxqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:bb:c9:1e:18:5d:22:6f:1b:fb:5d:08:c5:5e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f648e3cab609bd1483ca3e51911ceaa53f0c6a1
Validity
Not Before: Apr 17 05:00:21 2026 GMT
Not After : Apr 18 05:00:21 2026 GMT
Subject: CN=57ea7383a1fd49843ca655d0ae4f975ab8eb54f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c4:a7:87:28:d6:58:60:6d:5a:e6:08:b4:cd:
31:59:56:11:7b:64:c9:94:6b:c4:92:0c:ba:21:55:
52:3e:9d:e1:d3:8d:3d:93:1f:9c:f8:d3:b5:98:02:
fc:e4:da:c8:c0:fb:d6:e4:70:9d:0a:c9:0e:08:04:
26:3c:7f:1f:66:18:7a:e7:d5:19:90:ca:78:f6:7b:
5f:69:06:3c:bb:1e:87:0a:48:d0:ad:9b:30:a2:df:
09:04:75:05:b9:56:eb:31:91:b9:93:e9:ac:0b:29:
67:5f:ea:b5:3e:59:f6:91:4b:c0:e1:7f:1f:9f:b1:
cd:0d:f6:53:17:ae:30:39:fb:77:ce:34:d4:87:e3:
5f:46:36:74:8f:2e:02:29:94:3f:09:7c:a2:ac:b4:
6f:6d:f2:7d:61:fe:aa:58:91:d6:ba:12:34:3c:28:
6a:22:6a:df:69:c4:66:47:45:1a:f1:4d:25:d8:97:
13:16:5b:ce:43:2b:f2:3d:49:99:a1:9d:8f:e3:b6:
02:f9:ae:a3:b8:bf:42:01:a9:5c:2a:f7:98:29:2e:
05:ae:ce:66:9d:ba:b3:84:7a:95:cc:87:78:db:a6:
51:40:08:ee:af:25:b5:93:0c:fc:d6:bb:5c:b9:85:
20:68:9c:ba:70:4f:4f:47:46:3f:90:79:d7:18:fc:
f5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EA:73:83:A1:FD:49:84:3C:A6:55:D0:AE:4F:97:5A:B8:EB:54:F7
X509v3 Authority Key Identifier:
keyid:6F:64:8E:3C:AB:60:9B:D1:48:3C:A3:E5:19:11:CE:AA:53:F0:C6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2SOPKtgm9FIPKPlGRHOqlPwxqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ba:db:4b:cc:58:b3:9b:9d:c7:2f:17:72:a7:18:a9:38:2c:
78:e1:3b:19:fa:38:f2:c5:c5:c7:98:86:6d:00:b3:17:56:7f:
b1:36:94:d9:5b:e0:f4:24:d2:56:bf:26:d7:f3:7f:7e:ed:04:
d1:50:2a:ac:0a:d2:2b:0d:34:80:6f:11:3e:0f:fb:10:b2:7d:
80:fb:6b:6d:51:8e:bb:a1:23:b5:6b:11:b1:ea:c8:eb:07:ca:
82:3e:63:78:00:5b:05:38:01:26:83:a3:96:d5:45:2d:8c:ed:
a9:14:11:d5:b1:6a:3e:1b:15:1b:47:f4:f7:0c:3d:20:ea:e6:
1b:32:d0:9b:1f:c7:a1:3c:ff:b5:a8:5d:48:e7:30:f6:d5:d2:
c0:db:68:63:0f:75:d8:78:4f:9a:0e:c7:ca:85:5e:92:07:b7:
14:16:b3:6a:47:2c:e2:d5:53:ac:cd:b3:d1:9a:30:d2:d4:73:
05:df:66:47:1c:4d:62:db:82:02:61:89:ee:a6:e7:cc:74:49:
05:ec:f1:7d:32:bf:66:62:87:17:74:17:b6:3d:16:58:ce:23:
d5:10:ca:da:40:17:43:99:a8:db:e5:f6:9a:cc:da:e8:37:6f:
97:4d:71:5a:c6:7a:15:69:86:f0:2f:3c:2f:e8:5c:a6:26:30:
26:76:76:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:56:18 2026 by rpki-client