Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft
File: pU3VdP7HLUOUwlU2uoUyydOPQLo.mft (raw, json)
Hash identifier: gmq7Ef31oxNGBACZtzcqcY6o3mCgS1ytoEK+YCpHOpM=
Subject key identifier: 01:B7:51:10:AC:3F:8A:F3:06:07:1D:4B:45:3C:33:C0:14:AD:A5:CE
Authority key identifier: A5:4D:D5:74:FE:C7:2D:43:94:C2:55:36:BA:85:32:C9:D3:8F:40:BA
Certificate issuer: /CN=a54dd574fec72d4394c25536ba8532c9d38f40ba
Certificate serial: 019D98F4FB5EDA23B7B31A5E79DD0F2627B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pU3VdP7HLUOUwlU2uoUyydOPQLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft
Manifest number: 0BD6
Signing time: Fri 17 Apr 2026 01:01:24 +0000
Manifest this update: Fri 17 Apr 2026 01:01:24 +0000
Manifest next update: Sat 18 Apr 2026 01:01:24 +0000
Files and hashes: 1: pU3VdP7HLUOUwlU2uoUyydOPQLo.crl (hash: cE5cpzXzff21V9BOaHtyTfw7KghipHI873JebW9oCPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pU3VdP7HLUOUwlU2uoUyydOPQLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:fb:5e:da:23:b7:b3:1a:5e:79:dd:0f:26:27:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a54dd574fec72d4394c25536ba8532c9d38f40ba
Validity
Not Before: Apr 17 01:01:24 2026 GMT
Not After : Apr 18 01:01:24 2026 GMT
Subject: CN=01b75110ac3f8af306071d4b453c33c014ada5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:a9:21:7e:98:7b:9f:88:e6:22:dd:30:19:
7e:4d:b5:56:fe:8e:cb:f4:25:34:a4:fd:e9:6c:6a:
91:30:6b:85:49:67:aa:05:72:75:af:3a:2b:44:53:
a7:c8:5b:5f:1b:f3:d0:89:6f:aa:94:1b:ed:f6:7e:
c3:6f:fa:8c:b8:32:7a:c3:58:7a:20:03:0b:0a:0e:
50:71:a6:73:8d:d6:e1:b5:79:44:1b:de:bc:a5:66:
f0:ab:41:68:12:d0:d2:e8:ee:70:09:f1:03:ef:dd:
fd:36:5c:0e:dc:c5:e0:80:29:91:9a:27:c2:b0:23:
93:d1:c1:55:ef:02:4e:e1:46:fa:e2:eb:c4:5d:c6:
3b:0b:51:e3:14:11:e7:29:aa:77:2c:d4:e9:da:f8:
76:e7:41:84:a3:ba:7c:b8:43:2e:86:5f:26:ae:c4:
6d:27:74:c0:0b:4e:aa:e1:a7:0c:e9:75:41:0f:f4:
2b:ea:56:b4:eb:c6:cb:16:48:bf:33:d8:c0:7c:f1:
a0:23:20:2a:15:65:55:35:3e:aa:8e:41:a1:32:de:
ad:66:f4:0d:99:34:4e:97:0a:8c:0b:4d:3e:8e:69:
dc:b8:c5:73:6a:b1:6f:eb:64:df:af:6d:b8:4e:85:
68:ec:a5:aa:d5:79:d2:f9:8d:40:10:25:e8:e6:b7:
bd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B7:51:10:AC:3F:8A:F3:06:07:1D:4B:45:3C:33:C0:14:AD:A5:CE
X509v3 Authority Key Identifier:
keyid:A5:4D:D5:74:FE:C7:2D:43:94:C2:55:36:BA:85:32:C9:D3:8F:40:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pU3VdP7HLUOUwlU2uoUyydOPQLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:67:b3:f5:10:57:09:26:1a:47:80:c1:60:09:f8:13:bd:8a:
3e:17:d1:07:e9:30:dd:00:26:d7:80:09:5c:e6:10:1f:90:92:
0e:01:e0:0a:c2:4b:ee:30:57:f7:0f:fe:f5:4f:2a:86:03:54:
af:76:02:91:0a:87:22:2f:36:b6:cd:b6:d3:fd:85:cc:eb:64:
87:29:e6:fb:3b:a9:4e:42:77:e7:6a:9b:60:c5:99:61:d1:ae:
46:5c:40:cf:e7:56:e0:c6:97:88:19:59:80:1f:ee:dc:35:15:
01:17:a3:5e:41:86:30:fe:6f:c3:a0:f5:76:3c:f6:11:2b:ed:
7f:8b:10:e6:90:35:49:a3:d3:23:b2:2b:69:38:92:db:73:18:
5e:cd:49:6b:e4:ef:ee:4b:e2:01:3a:94:4a:6e:2c:9e:76:be:
a2:b6:8c:aa:b2:f3:12:1f:7c:10:b9:68:4b:22:9b:02:f0:a9:
39:75:ac:90:86:96:2d:33:d1:1b:60:b6:b5:db:8c:54:33:9c:
9d:a5:b6:dd:45:d0:de:f7:ed:68:3c:44:12:76:4d:c3:37:ff:
0b:e1:56:e8:0b:52:63:67:66:09:12:3c:93:25:1a:98:15:0e:
4d:27:23:1f:25:5f:d0:a8:07:14:d0:29:de:02:82:c4:65:ed:
f9:77:29:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:24 2026 by rpki-client