Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
File: r_HNv5fWyiB-XciFq8_2ccwVyRA.mft (raw, json)
Hash identifier: YJIyvBZQCsAN9Gl75yNmaZMeFdP1sKhxvNgQzkd3yVk=
Subject key identifier: 58:F5:8F:1B:58:09:16:A6:79:9B:43:F0:E3:A1:89:A9:B3:15:62:64
Authority key identifier: AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10
Certificate issuer: /CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910
Certificate serial: 019D9AABC912B82D1D3287C4D08D393F73FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
Manifest number: 0DB7
Signing time: Fri 17 Apr 2026 09:00:42 +0000
Manifest this update: Fri 17 Apr 2026 09:00:42 +0000
Manifest next update: Sat 18 Apr 2026 09:00:42 +0000
Files and hashes: 1: r_HNv5fWyiB-XciFq8_2ccwVyRA.crl (hash: 2KretQZIZNPbx9zOWSrpaEvlYtCqsODSO+uOK3t3Mk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:c9:12:b8:2d:1d:32:87:c4:d0:8d:39:3f:73:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910
Validity
Not Before: Apr 17 09:00:42 2026 GMT
Not After : Apr 18 09:00:42 2026 GMT
Subject: CN=58f58f1b580916a6799b43f0e3a189a9b3156264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3d:22:b4:30:28:3b:0d:ed:0a:37:10:ea:74:
72:e1:89:68:75:cb:94:7d:8e:97:2d:d3:93:f4:c9:
a8:37:46:8a:33:1c:f3:c6:2c:18:62:83:04:f3:e8:
8c:fc:4d:37:12:4c:9e:ca:fc:b4:21:3c:f0:dd:a9:
84:84:37:f2:63:c0:53:26:e2:0c:65:c5:44:24:18:
be:c2:4a:20:e3:88:04:0d:43:c1:38:31:ce:bc:4a:
c2:db:ae:ed:db:0c:86:2a:9d:c4:8a:23:c6:9f:99:
9a:a2:f3:19:f5:13:ec:6d:f1:56:f3:50:9d:93:8d:
cf:32:f8:4a:e3:af:83:91:2e:56:40:a5:82:05:9b:
d7:9d:c2:e2:43:8b:eb:49:08:89:02:4e:75:49:9a:
1c:a4:1a:21:c9:bf:85:26:44:54:0d:a2:f5:09:87:
92:3c:3f:5f:26:49:53:cf:2c:31:f4:40:5c:6f:03:
88:5d:27:43:ba:52:58:8d:d5:92:ac:6f:45:47:3e:
3b:27:a0:f6:2d:35:65:94:a6:ac:3f:1c:39:fc:ab:
66:d4:9c:58:14:51:7c:3b:0d:5a:3d:9a:c9:f4:9d:
d3:ac:05:10:76:79:8c:2b:df:99:e3:9f:39:d1:71:
15:6b:03:84:39:7d:55:a4:da:85:06:90:da:0e:8c:
d3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F5:8F:1B:58:09:16:A6:79:9B:43:F0:E3:A1:89:A9:B3:15:62:64
X509v3 Authority Key Identifier:
keyid:AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7d:e0:2b:19:03:37:37:1d:b8:f4:34:ab:37:75:5a:3a:47:
5d:d2:a5:a9:6b:f1:65:48:16:1b:47:c1:ec:8c:b4:d7:ba:23:
85:69:67:8f:ec:30:62:be:2e:d4:a1:8c:88:b9:14:6c:e7:0b:
c0:c5:8f:e0:c7:49:bf:b4:86:13:72:73:e5:92:9b:6c:33:e1:
96:d2:31:ba:54:d9:5a:13:c5:72:db:1d:72:7e:54:b1:53:09:
cc:6d:f4:00:12:a4:01:3a:21:80:79:42:57:0e:72:30:df:09:
25:6e:10:d0:cf:42:a1:34:23:0e:38:58:47:43:19:b2:5c:a1:
83:9a:5a:41:3f:cf:c3:f5:16:0f:b1:9e:08:33:6c:f8:9a:78:
8a:99:bb:c7:2d:51:10:77:d3:cd:0c:ab:96:50:af:01:ba:4a:
5e:85:36:57:1e:04:fd:70:75:a7:18:e2:7b:f4:71:c9:25:5f:
fa:4d:42:19:a7:65:90:cc:07:53:14:ca:ac:0c:1a:fc:b0:c2:
c5:72:bf:d5:c5:0e:21:6b:1b:94:14:e6:61:09:29:b1:d3:f2:
ca:7e:e6:17:ce:fd:4d:5f:24:7c:e6:8d:1b:bc:61:47:24:07:
21:bd:f7:fe:73:5e:50:e1:fd:c8:92:6c:ff:16:19:49:d6:9a:
06:72:fd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:01:24 2026 by rpki-client