Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
File: h66JOPDgseq2FIgzbSPKORh9bqM.mft (raw, json)
Hash identifier: /jv0EQGLGd7SDA6jfGuwLhe9kGHov5eEjWJQTdmasfQ=
Subject key identifier: E0:AB:CD:C5:B7:46:94:85:73:8F:4C:79:1D:D1:9D:3A:3C:63:DC:7B
Authority key identifier: 87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
Certificate issuer: /CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Certificate serial: 019DA34164B0DB17D5F78AAB833C1BDC90E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
Manifest number: 07D9
Signing time: Sun 19 Apr 2026 01:01:04 +0000
Manifest this update: Sun 19 Apr 2026 01:01:04 +0000
Manifest next update: Mon 20 Apr 2026 01:01:04 +0000
Files and hashes: 1: h66JOPDgseq2FIgzbSPKORh9bqM.crl (hash: e11IMTVzEEP53Y+GX7MHTmqn/Sg//G7t+Z5Ad1+d7xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:64:b0:db:17:d5:f7:8a:ab:83:3c:1b:dc:90:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Validity
Not Before: Apr 19 01:01:04 2026 GMT
Not After : Apr 20 01:01:04 2026 GMT
Subject: CN=e0abcdc5b7469485738f4c791dd19d3a3c63dc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ec:9f:20:c4:b6:c1:54:71:7a:ab:99:25:3b:
3e:ca:19:15:38:2d:80:2b:78:cd:c8:60:91:f3:12:
6e:71:71:ca:d5:35:38:ca:94:7a:4b:f9:92:fd:26:
e4:27:c1:4e:f3:60:5e:4a:c9:a2:b3:2d:f5:32:d1:
79:b0:80:49:cd:8c:03:3e:fc:3e:5f:d6:68:ff:53:
5e:75:d7:8f:fc:7e:77:89:49:d8:c1:d1:2b:5d:9c:
9b:6e:54:43:36:83:29:b7:d9:7d:e5:96:39:cb:98:
75:6a:3f:a4:bb:c0:01:d2:ab:28:ac:8e:5b:91:49:
1c:ed:c1:b2:1c:de:a8:01:de:94:09:cb:91:4c:78:
50:92:7a:a4:f3:fd:eb:24:ff:40:8c:4b:6e:ed:cb:
59:40:0d:b7:12:74:d8:cb:d7:71:d6:34:e7:e3:e2:
54:de:dd:19:3f:9f:0c:0c:01:aa:27:77:b9:45:0b:
06:69:de:56:8a:cb:3b:af:1f:7e:df:2a:36:a1:55:
33:48:5a:02:6f:fe:54:dc:af:71:df:05:3f:17:cc:
c4:ec:21:8d:f6:f1:31:b8:b8:5b:11:0b:ab:63:d1:
9b:e4:ef:df:8d:5c:2e:eb:f0:0f:ba:bb:24:ad:8e:
d3:c1:fc:5f:00:30:1a:f4:ed:04:0f:e9:c5:bf:e6:
05:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AB:CD:C5:B7:46:94:85:73:8F:4C:79:1D:D1:9D:3A:3C:63:DC:7B
X509v3 Authority Key Identifier:
keyid:87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7e:7c:a2:62:6b:f0:56:38:10:35:88:12:4b:ac:42:a2:85:
cf:9f:9d:dd:f1:88:be:f6:1c:8c:5c:12:f8:8a:bc:1f:60:92:
0b:44:e9:4f:1d:4f:d1:74:97:87:1a:ec:86:fc:fa:68:3e:87:
9a:c7:c0:0b:3a:59:bd:dd:1e:68:04:ea:35:a2:41:02:7c:d8:
4f:56:e7:a7:e3:d7:61:1a:94:ae:c5:f0:59:e3:92:74:4d:12:
f2:8d:77:53:ef:2f:fc:39:86:16:f6:4e:86:a1:3b:4b:57:96:
6a:1a:96:d9:48:3d:3b:c5:81:a6:5f:bc:bf:f8:48:a8:9b:28:
e5:d8:f9:98:a1:97:e4:e9:7e:83:1f:fe:44:f3:ff:c5:4e:81:
b5:c9:16:e8:84:4a:a4:a8:6e:ae:bf:58:90:72:72:9e:ac:ad:
de:89:a4:0e:dc:a8:5a:56:08:58:45:57:7a:80:c6:e3:84:a2:
d4:cb:8f:e0:a0:7c:bb:99:96:fc:4f:a0:e4:dc:dc:d9:1a:8d:
93:4d:78:9b:9e:64:cd:28:a4:5c:ff:3f:cd:09:39:c7:a3:1f:
29:32:48:5b:df:f7:c6:81:24:3a:f0:c8:c4:59:ee:f6:25:e9:
f3:9f:0d:fc:26:16:89:69:58:54:6f:3c:d1:a7:0d:b5:b1:c5:
d7:d6:80:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:46:21 2026 by rpki-client