Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
File: mEL3HQwjZ4gu9HCLIGtLbimjezM.mft (raw, json)
Hash identifier: NHeBCKs++O7KCP6YReHLupeglXPCJaSG+LEO8oBO2a4=
Subject key identifier: 79:B9:8F:E8:EC:C3:28:90:51:84:A4:7E:BE:B4:42:BF:3E:B2:C7:97
Authority key identifier: 98:42:F7:1D:0C:23:67:88:2E:F4:70:8B:20:6B:4B:6E:29:A3:7B:33
Certificate issuer: /CN=9842f71d0c2367882ef4708b206b4b6e29a37b33
Certificate serial: 019D9AE2AF13D2AC29674D91924B73FD1B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
Manifest number: 1557
Signing time: Fri 17 Apr 2026 10:00:40 +0000
Manifest this update: Fri 17 Apr 2026 10:00:40 +0000
Manifest next update: Sat 18 Apr 2026 10:00:40 +0000
Files and hashes: 1: mEL3HQwjZ4gu9HCLIGtLbimjezM.crl (hash: wIhPPVQfYaUmEHjWV9Cv93pmNQ3LFOBWzPebEpaa2io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:af:13:d2:ac:29:67:4d:91:92:4b:73:fd:1b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9842f71d0c2367882ef4708b206b4b6e29a37b33
Validity
Not Before: Apr 17 10:00:40 2026 GMT
Not After : Apr 18 10:00:40 2026 GMT
Subject: CN=79b98fe8ecc328905184a47ebeb442bf3eb2c797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e2:3a:a3:10:02:0b:6d:34:a8:0b:11:db:50:
7e:f4:9f:20:86:d5:4e:e0:ff:df:cc:0d:e2:e1:40:
2d:78:c3:03:c7:08:9a:00:af:49:a7:c3:38:ba:eb:
49:3a:a9:d6:9b:3e:98:71:11:51:9f:14:48:64:87:
e2:b9:7d:89:4a:9b:40:d8:8c:3d:55:f7:68:c5:50:
70:74:d3:4e:28:42:da:f1:c5:33:c8:7b:2e:3f:e9:
97:6e:98:ea:6a:1d:da:6d:f6:d1:67:9a:0d:b4:14:
00:a7:01:c4:0d:37:94:46:b9:d9:4d:05:f5:2f:17:
97:ef:e8:4e:1d:2f:cb:38:9a:ea:1e:d1:d9:42:8f:
10:5a:fc:e9:c3:03:21:d9:a9:50:98:a0:4a:de:a1:
36:50:1d:1e:4b:e9:63:a7:6e:c6:a3:87:d4:49:df:
12:08:1d:83:03:2b:1f:87:36:41:44:fe:c3:a6:9b:
6e:5f:35:e5:a9:38:b4:96:87:5c:91:b5:f2:5a:cc:
1d:ad:ed:25:ae:6e:12:32:a7:a7:69:65:48:ae:1b:
13:70:09:36:1c:6d:53:44:28:2d:72:85:4b:13:6f:
d6:60:19:d2:55:9a:b8:af:a0:f9:b3:62:77:f3:a3:
d3:7c:1d:ef:18:48:0a:a3:7b:48:47:14:76:c0:d8:
cc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B9:8F:E8:EC:C3:28:90:51:84:A4:7E:BE:B4:42:BF:3E:B2:C7:97
X509v3 Authority Key Identifier:
keyid:98:42:F7:1D:0C:23:67:88:2E:F4:70:8B:20:6B:4B:6E:29:A3:7B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2a:0d:57:5e:76:c0:d2:14:60:f6:6e:14:3f:a2:16:5c:03:
15:6e:9b:b4:87:ad:df:e5:ab:20:6f:17:47:66:f1:5c:03:0f:
11:fc:91:7e:5c:92:53:fb:18:22:ce:d4:f2:df:0d:c7:6a:77:
a5:dc:da:7f:b3:8f:5f:1e:50:0c:e3:00:30:12:93:7f:c0:a5:
9f:53:9f:a0:04:e7:38:c6:8a:d2:71:50:27:c5:64:4e:68:fb:
01:c4:1f:7d:fc:6d:92:29:c4:28:e0:70:e3:9d:d9:a9:b0:96:
ef:a0:9b:47:29:c8:6f:de:9e:9c:a1:f2:c9:e3:d4:a4:ff:b2:
77:17:28:b8:07:b2:6e:d8:6c:6c:f7:7a:a6:74:de:91:1e:25:
74:35:2e:43:60:0d:76:5c:9b:0d:d4:3f:7b:5b:94:54:d2:26:
ba:21:ca:f8:b1:70:af:aa:d8:fc:2f:1a:65:7a:bf:28:99:7e:
c9:21:f8:5f:d3:2b:70:40:b7:3a:26:69:9f:9e:54:f2:e4:22:
62:30:e5:5b:63:07:2b:30:4c:49:27:4e:ea:4a:1e:f0:15:b2:
41:dd:70:1e:f2:98:ba:b9:66:1e:83:da:ed:7e:ad:13:f1:04:
2c:c5:b2:da:17:eb:65:b4:bf:a3:fb:38:14:f8:aa:ed:e7:29:
ae:1e:9d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:29:11 2026 by rpki-client