Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft
File: cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft (raw, json)
Hash identifier: JStW36SvlhA9w1jsDGrxXBvgdcT9luh0qcQeDvVZ0ek=
Subject key identifier: C4:A9:07:61:1B:8A:0F:BB:5A:15:53:87:6B:A6:C6:4F:30:33:DC:BE
Authority key identifier: 70:CE:E6:2B:79:47:2D:CA:E5:1E:AD:4D:8E:A0:69:23:87:0F:51:97
Certificate issuer: /CN=70cee62b79472dcae51ead4d8ea06923870f5197
Certificate serial: 019D9B511E4F13A10C930809112F24B07484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cM7mK3lHLcrlHq1NjqBpI4cPUZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 12:01:17 +0000
Manifest this update: Fri 17 Apr 2026 12:01:17 +0000
Manifest next update: Sat 18 Apr 2026 12:01:17 +0000
Files and hashes: 1: cM7mK3lHLcrlHq1NjqBpI4cPUZc.crl (hash: 3IylfazKiCepX1mFXK5sSDQ98SkmOGMFzHkostGRIvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cM7mK3lHLcrlHq1NjqBpI4cPUZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:1e:4f:13:a1:0c:93:08:09:11:2f:24:b0:74:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cee62b79472dcae51ead4d8ea06923870f5197
Validity
Not Before: Apr 17 12:01:17 2026 GMT
Not After : Apr 18 12:01:17 2026 GMT
Subject: CN=c4a907611b8a0fbb5a1553876ba6c64f3033dcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d0:77:8e:d2:19:41:2b:52:3f:74:88:54:6a:
8c:c5:a1:65:d0:c1:9b:db:dc:2d:25:1e:83:9b:d1:
50:08:4c:1c:8c:34:fb:c5:d9:ce:16:57:95:36:0f:
07:0d:71:dd:f7:f7:78:4b:43:ca:33:38:97:0b:81:
06:54:bd:91:ba:c5:7b:ea:18:84:8d:22:0a:89:4b:
35:20:f8:ba:aa:10:d2:d1:1e:93:de:cf:04:c4:a1:
99:2e:c0:b8:73:e8:86:39:34:b9:63:74:67:71:ec:
ee:93:e6:55:e0:54:30:ca:ce:5c:d6:47:ca:a4:80:
06:bf:9c:4c:c9:cf:13:03:dc:db:79:3f:bc:ee:df:
cd:f4:a0:68:db:72:35:d3:45:fd:79:6e:b9:6d:26:
e0:66:11:e5:39:70:ef:ef:4a:46:6a:f7:0a:1b:0f:
fc:ea:c6:93:75:63:ff:d2:33:5b:e8:df:27:1f:81:
0c:c4:79:e8:73:b2:15:b8:74:81:a0:ba:da:15:8f:
b5:11:b4:07:a4:8c:25:3b:40:dc:98:aa:69:e6:99:
b6:01:f6:88:b7:35:2f:e2:b3:63:45:23:4e:ad:d8:
5e:2a:a7:c2:a6:ad:62:3c:9a:ef:13:f3:8f:04:d4:
6c:43:78:32:31:5a:c8:cb:b2:f2:85:28:6b:3b:2f:
8f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A9:07:61:1B:8A:0F:BB:5A:15:53:87:6B:A6:C6:4F:30:33:DC:BE
X509v3 Authority Key Identifier:
keyid:70:CE:E6:2B:79:47:2D:CA:E5:1E:AD:4D:8E:A0:69:23:87:0F:51:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cM7mK3lHLcrlHq1NjqBpI4cPUZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d1:59:02:91:cf:b9:9e:8d:e2:07:71:cd:49:50:96:eb:37:
ae:4d:53:9e:a0:81:80:49:af:ed:1a:45:4c:90:82:67:ec:54:
e9:90:fb:7a:49:0c:32:86:37:f7:91:72:8e:b0:d7:68:b8:40:
3a:c7:c9:1a:5c:34:67:4e:e6:c0:20:94:63:7f:f7:2f:a2:02:
9a:e9:28:cc:06:32:33:43:58:4c:a4:4b:37:9c:14:d7:78:41:
40:ac:9a:03:4e:26:9b:9b:ec:21:7a:e7:fe:49:b0:94:d2:5a:
7d:6d:f8:41:e1:bd:8a:ee:fc:3d:ae:28:ae:87:86:14:ee:0b:
97:6f:48:a9:86:f6:6b:cf:5d:f3:b9:0a:16:ee:33:05:19:c1:
07:ac:7c:d6:07:e3:11:3a:86:92:c4:90:e2:30:84:4b:5c:ac:
0f:15:08:1e:cd:8f:a5:2e:e4:54:de:40:7c:c3:8f:2a:51:2f:
d0:a4:6f:b4:69:7c:f0:fe:cc:86:f2:5e:e0:9e:55:d7:8d:53:
b9:fc:07:d5:4c:4c:e8:cb:d1:d0:a4:51:0d:ed:af:df:69:94:
e0:b7:be:65:d6:79:76:7b:3b:8d:52:d5:af:07:09:19:1a:31:
2d:10:93:10:a5:da:39:89:79:64:6d:48:31:10:25:d5:d3:98:
3e:45:15:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:02:25 2026 by rpki-client