Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
File: t64i7alidO6Wl8qqy1PfkXNwngM.mft (raw, json)
Hash identifier: xFka0XpOVOIKzLlKQ0g5FVP0aH58DYz0AIAeOLNVGpk=
Subject key identifier: 66:9E:D3:51:FF:F7:77:2E:8F:7B:E5:DC:70:4C:1A:5C:98:7E:56:B8
Authority key identifier: B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03
Certificate issuer: /CN=b7ae22eda96274ee9697caaacb53df9173709e03
Certificate serial: 019D9B199ABECE9B1896CE455F3A347A9654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
Manifest number: 1621
Signing time: Fri 17 Apr 2026 11:00:39 +0000
Manifest this update: Fri 17 Apr 2026 11:00:39 +0000
Manifest next update: Sat 18 Apr 2026 11:00:39 +0000
Files and hashes: 1: t64i7alidO6Wl8qqy1PfkXNwngM.crl (hash: 0JoyHcMpb5RE6gKOyVzhy9Xq8VrrBqiDWO9cPJ/l0oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:9a:be:ce:9b:18:96:ce:45:5f:3a:34:7a:96:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ae22eda96274ee9697caaacb53df9173709e03
Validity
Not Before: Apr 17 11:00:39 2026 GMT
Not After : Apr 18 11:00:39 2026 GMT
Subject: CN=669ed351fff7772e8f7be5dc704c1a5c987e56b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:66:3d:0c:a5:71:6a:73:38:7e:2b:ed:17:25:
89:1a:ed:68:d5:23:8f:ba:c1:75:dc:89:92:4d:70:
2c:97:89:95:5a:4f:be:19:7d:47:23:70:9c:50:3e:
ae:0b:03:82:97:95:61:ea:c7:3c:06:d1:b2:0a:f4:
b5:ca:11:a0:f7:89:86:5b:5a:ae:45:9a:fa:bc:2c:
f5:3e:82:48:7e:d1:42:c7:6f:d6:8b:df:fc:c7:ae:
48:59:36:67:ca:64:0a:0c:d0:26:7e:0c:14:8b:f1:
55:00:c6:a1:f0:ed:0b:f2:9b:58:bd:b6:15:63:d3:
9a:27:07:5e:9d:b2:7d:3a:a2:42:b9:05:12:50:7a:
15:b1:bf:75:49:27:83:c2:62:01:3f:84:dd:b1:01:
59:75:29:48:5d:e7:f5:2c:8f:1d:33:a6:6e:70:7b:
cf:58:4d:2c:49:1d:51:27:d4:1f:b4:d2:86:90:ee:
6e:ea:f7:27:6d:44:08:9b:0f:0c:0e:cf:ea:14:02:
95:76:7c:da:82:2e:b4:72:1a:d7:23:2d:e5:ef:1d:
6d:20:b7:90:36:25:b9:13:63:32:ec:30:ac:64:f9:
79:52:16:8f:b1:cf:e0:ae:93:24:9d:65:e1:c0:12:
69:67:7c:98:fd:4e:de:2b:c2:76:62:b5:8e:6e:1a:
26:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9E:D3:51:FF:F7:77:2E:8F:7B:E5:DC:70:4C:1A:5C:98:7E:56:B8
X509v3 Authority Key Identifier:
keyid:B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:21:47:60:ec:b8:86:72:d6:95:f9:a3:9a:24:74:57:7e:19:
86:62:87:2e:f3:c2:45:e2:34:89:97:9f:d1:33:f4:48:7d:82:
29:84:20:72:85:e7:e6:41:3b:bf:15:79:e3:9c:ec:2b:f6:e6:
14:60:f6:fb:11:f1:25:f5:cd:84:81:b9:56:f0:71:5d:b3:4a:
c7:15:23:08:0f:8b:8a:5d:90:d5:72:1d:6a:0f:46:a2:a0:8e:
a1:82:c8:b8:99:63:28:88:dc:4e:7f:d7:de:1a:95:5c:e4:c1:
91:fe:0f:67:34:d9:94:80:84:18:3d:1a:4f:f2:aa:b9:ef:82:
c6:89:31:2d:ef:0f:4d:13:91:eb:ea:8e:7c:04:62:58:44:d6:
74:94:05:5a:25:cb:c3:9a:77:79:78:f7:0c:3d:4f:06:0f:62:
4e:dc:95:4e:f7:71:ae:e4:f1:8e:04:67:f8:81:4f:ef:13:b8:
40:5a:b3:80:c4:a1:4c:5b:d6:dc:c2:82:ea:8c:4a:53:70:a1:
66:cb:93:68:66:1a:8e:01:5e:7f:58:11:d3:1e:7d:c2:0c:64:
a5:44:13:83:6f:7c:e1:e7:f0:14:24:3d:82:e7:92:a5:c6:2c:
1f:4c:92:86:74:32:c3:b9:fe:b0:55:df:62:aa:72:fb:e7:4c:
cf:03:62:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGZq+zpsYls5FXzo0epZUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YWUyMmVkYTk2Mjc0ZWU5Njk3Y2FhYWNiNTNkZjkxNzM3
MDllMDMwHhcNMjYwNDE3MTEwMDM5WhcNMjYwNDE4MTEwMDM5WjAzMTEwLwYDVQQD
Eyg2NjllZDM1MWZmZjc3NzJlOGY3YmU1ZGM3MDRjMWE1Yzk4N2U1NmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72Y9DKVxanM4fivtFyWJGu1o1SOP
usF13ImSTXAsl4mVWk++GX1HI3CcUD6uCwOCl5Vh6sc8BtGyCvS1yhGg94mGW1qu
RZr6vCz1PoJIftFCx2/Wi9/8x65IWTZnymQKDNAmfgwUi/FVAMah8O0L8ptYvbYV
Y9OaJwdenbJ9OqJCuQUSUHoVsb91SSeDwmIBP4TdsQFZdSlIXef1LI8dM6ZucHvP
WE0sSR1RJ9QftNKGkO5u6vcnbUQImw8MDs/qFAKVdnzagi60chrXIy3l7x1tILeQ
NiW5E2My7DCsZPl5UhaPsc/grpMknWXhwBJpZ3yY/U7eK8J2YrWObhomvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGae01H/93cuj3vl3HBMGlyYfla4MB8GA1UdIwQY
MBaAFLeuIu2pYnTulpfKqstT35FzcJ4DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDY0aTdhbGlkTzZXbDhxcXkxUGZrWE53bmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yNDQwODYtZTk3NC00YjQ4LWFlNzQt
MzcwZjAwMGMzYzBlLzEvdDY0aTdhbGlkTzZXbDhxcXkxUGZrWE53bmdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yNDQwODYtZTk3NC00YjQ4LWFlNzQtMzcwZjAwMGMzYzBl
LzEvdDY0aTdhbGlkTzZXbDhxcXkxUGZrWE53bmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSFHYOy4
hnLWlfmjmiR0V34ZhmKHLvPCReI0iZef0TP0SH2CKYQgcoXn5kE7vxV545zsK/bm
FGD2+xHxJfXNhIG5VvBxXbNKxxUjCA+Lil2Q1XIdag9GoqCOoYLIuJljKIjcTn/X
3hqVXOTBkf4PZzTZlICEGD0aT/Kque+CxokxLe8PTROR6+qOfARiWETWdJQFWiXL
w5p3eXj3DD1PBg9iTtyVTvdxruTxjgRn+IFP7xO4QFqzgMShTFvW3MKC6oxKU3Ch
ZsuTaGYajgFef1gR0x59wgxkpUQTg2984efwFCQ9gueSpcYsH0yShnQyw7n+sFXf
Yqpy++dMzwNiLw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:23:42 2026 by rpki-client