Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
File: my2tSBy6VIO6qw16DM3BregyrRY.mft (raw, json)
Hash identifier: 3WokFIy6RsRQTLfUA1jSYJwmOXv+Z2Oj8tz+pK7yBj0=
Subject key identifier: 38:49:EC:8F:85:17:40:53:D0:27:A3:AC:5C:88:1A:1B:71:F6:ED:0E
Authority key identifier: 9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16
Certificate issuer: /CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16
Certificate serial: 019D984FB8EEEC3442DFAE9450FA4214A1B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
Manifest number: 0A5C
Signing time: Thu 16 Apr 2026 22:00:54 +0000
Manifest this update: Thu 16 Apr 2026 22:00:54 +0000
Manifest next update: Fri 17 Apr 2026 22:00:54 +0000
Files and hashes: 1: my2tSBy6VIO6qw16DM3BregyrRY.crl (hash: U70tFS++AOu2PW78YN14G3ogPRHBhey85CABFYRNWts=)
2: qi2McZp71fHBoWBI2ZHbtQCvE4o.roa (hash: i0mtBmOyDYgRrM3+GxWl4R2NJ84ChiPy81fprThNQJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:b8:ee:ec:34:42:df:ae:94:50:fa:42:14:a1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16
Validity
Not Before: Apr 16 22:00:54 2026 GMT
Not After : Apr 17 22:00:54 2026 GMT
Subject: CN=3849ec8f85174053d027a3ac5c881a1b71f6ed0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:28:d5:cb:55:28:03:ff:d1:dc:41:da:0a:
28:0a:98:eb:85:44:22:2d:3a:e5:76:01:7d:8d:6b:
78:a4:29:a4:da:f2:9b:96:08:87:22:ff:b8:4b:69:
5c:90:a2:3f:d4:cb:0f:08:09:04:9c:93:d4:bd:25:
24:fa:f3:eb:0c:9a:60:73:83:3f:e5:96:2c:10:7c:
37:50:ab:91:ac:67:16:e2:5a:e3:e2:c8:71:a5:82:
3d:2f:19:d4:9f:7f:7d:af:61:b7:8c:59:81:6a:9b:
77:cd:de:61:fc:e6:4c:f4:6f:08:b1:66:9c:40:06:
cf:b5:be:0c:8a:8c:e3:3f:c3:58:af:55:af:71:3e:
84:a0:43:1d:d1:85:f7:f1:ee:52:67:43:05:4f:e1:
57:5a:9a:2e:1c:59:45:b6:1e:33:38:b7:9f:db:13:
20:d2:20:87:fb:21:ee:ce:1f:a1:0d:3d:c2:27:bc:
72:c8:11:7b:81:70:ae:f5:a8:d9:c8:a0:56:b5:ba:
40:b9:fa:b8:e8:c4:5b:18:52:59:53:e6:62:03:71:
39:64:74:10:3c:4f:e6:1b:a9:05:94:e1:21:99:26:
55:aa:9b:ee:64:6d:7a:5b:8d:a5:75:e6:a3:16:98:
dc:59:fa:72:48:69:56:d4:7c:74:a8:63:3c:42:a2:
6a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:49:EC:8F:85:17:40:53:D0:27:A3:AC:5C:88:1A:1B:71:F6:ED:0E
X509v3 Authority Key Identifier:
keyid:9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:dc:fc:a1:a9:cf:b4:02:db:2b:1d:c3:c6:d4:08:48:be:a3:
ae:e0:ac:af:26:fb:4a:45:73:8e:e6:21:90:3b:d6:a2:c0:01:
43:57:5e:c5:a7:0d:c9:ec:39:dc:3a:d8:92:7e:52:3f:b8:f6:
1f:42:be:a4:0b:d7:d6:6c:33:03:de:e0:3f:65:6e:43:9b:33:
d4:cb:2d:4e:82:b5:23:bb:5e:bc:81:01:d4:fd:61:3d:23:26:
9a:f0:96:64:99:da:aa:9b:be:99:8b:f6:cf:e9:83:5b:50:b1:
72:26:54:af:e2:5d:6b:51:0f:cd:09:90:ba:84:ca:77:ff:52:
26:d2:20:42:94:a6:ae:2f:f7:20:36:93:8d:83:cf:da:31:bf:
7c:1b:df:e0:75:da:25:d6:1e:e8:4e:94:d2:6f:6c:52:7e:3d:
8b:53:09:eb:bd:c0:47:64:88:a7:d5:20:c9:2c:7f:76:5b:21:
f8:bc:9b:d1:b5:c2:1e:15:d9:e8:d8:1d:45:85:1c:e7:f3:c4:
41:51:52:ae:e8:6b:f8:cb:53:12:f5:f5:de:7f:82:b8:ee:fb:
1f:b9:1b:a3:a4:5c:a0:1e:3f:42:33:22:ca:b4:67:f9:90:92:
0b:36:a5:04:d8:41:2e:71:7c:ca:d3:31:f1:d5:b4:e8:c7:10:
ad:4d:b9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:35 2026 by rpki-client