Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
File: p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft (raw, json)
Hash identifier: D3cEF3ODpwJTgYnicgxD8Xv6AfoJM+y01kCjyid+Kos=
Subject key identifier: B6:61:9D:72:9E:FD:26:58:53:58:96:32:BB:C5:3A:13:CC:67:46:CC
Authority key identifier: A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
Certificate issuer: /CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Certificate serial: 019D98508494C6A02FE59DFC7AA5B65EC62A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
Manifest number: 1023
Signing time: Thu 16 Apr 2026 22:01:46 +0000
Manifest this update: Thu 16 Apr 2026 22:01:46 +0000
Manifest next update: Fri 17 Apr 2026 22:01:46 +0000
Files and hashes: 1: p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl (hash: PgPWaLoX6Lr4d3Y/3s6dTCAZvUY5xE5ZBo5CtgOrGpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:84:94:c6:a0:2f:e5:9d:fc:7a:a5:b6:5e:c6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Validity
Not Before: Apr 16 22:01:46 2026 GMT
Not After : Apr 17 22:01:46 2026 GMT
Subject: CN=b6619d729efd265853589632bbc53a13cc6746cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0a:a2:e4:81:06:0f:a0:a7:1f:74:43:ef:92:
9d:3b:50:d9:80:33:c4:ca:d8:5f:d1:6a:3f:2c:ad:
a6:3f:ca:2f:93:33:a8:32:3a:bf:3c:9a:7f:7e:69:
08:6b:3b:e2:44:5a:b0:86:02:d9:58:c0:c6:4e:1f:
45:80:9b:4a:69:3d:72:89:c2:3d:b7:00:23:71:75:
9e:2d:29:ed:58:24:fe:ed:28:93:e0:0b:36:89:86:
6e:33:4b:10:68:cf:cc:8a:2f:bc:50:17:c0:2e:a8:
79:db:64:5a:38:37:0f:85:80:f3:49:f5:62:b4:52:
23:c7:dc:81:23:d4:8c:fc:48:89:04:bc:02:57:8d:
7d:dd:65:70:3e:46:5d:65:f8:5c:01:dd:23:97:e8:
a5:a1:d3:6d:03:02:7f:7c:80:fc:9e:9f:2d:af:17:
99:1d:26:78:d8:fc:ff:62:26:8e:41:b8:d7:05:b1:
27:5a:a1:d9:6e:37:0b:8d:fe:47:11:c0:5f:54:30:
d9:ea:bb:c1:89:54:6c:3e:b2:90:15:d5:ec:1b:32:
a5:a2:df:28:b0:28:c3:a7:cd:ca:e5:11:cb:2d:e9:
84:41:ec:4c:5a:26:15:39:8b:cb:28:64:09:50:7c:
6a:e8:26:f3:6d:43:10:b8:0e:c4:e0:2c:c9:40:a1:
f7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:61:9D:72:9E:FD:26:58:53:58:96:32:BB:C5:3A:13:CC:67:46:CC
X509v3 Authority Key Identifier:
keyid:A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:7e:9e:67:c8:a8:56:21:f0:51:df:51:cb:b3:d8:8c:bd:90:
87:4b:26:c9:44:06:f5:06:4d:6e:df:11:88:69:7f:4e:b8:5e:
99:ad:45:91:c5:72:40:d0:e5:8d:cf:a4:b3:7d:8f:de:26:1e:
65:5f:2a:f7:56:bc:13:99:91:34:f2:c9:21:e7:89:8f:50:73:
85:e2:ba:05:72:88:c1:f3:8b:b3:2e:5d:23:c2:9a:07:40:4d:
72:b7:94:61:66:b9:fe:48:fc:83:1d:19:15:e4:ba:d0:19:0f:
34:76:ee:80:f7:80:1d:e1:ae:6b:a7:e2:84:3e:b9:66:98:e7:
63:5a:3e:af:30:62:2e:04:eb:3e:f2:c0:bd:7b:58:67:8c:8a:
94:2b:a6:ed:dd:e7:34:f6:41:27:54:59:62:77:60:ca:a4:f7:
56:e0:5b:c0:31:64:6b:50:d5:45:9c:00:ec:0a:0d:e5:15:95:
5e:b3:b5:4e:13:89:9d:e8:ca:d1:82:75:71:96:43:3d:24:85:
1b:e5:15:7e:cb:3e:cb:36:e4:df:02:45:27:00:57:df:b9:39:
33:fe:64:2a:1a:d4:0b:2b:55:06:80:a7:ff:15:df:da:61:fe:
b0:9c:a9:b5:62:ce:ac:25:68:5d:45:07:05:74:b2:a1:b7:5c:
e1:02:14:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:48:52 2026 by rpki-client