Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
File: tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft (raw, json)
Hash identifier: Ze9ErpSChlbT8WaASLX2P57rG8lnSRpGncVf8I5fAiw=
Subject key identifier: 9E:93:39:25:D9:37:E9:6F:89:21:89:31:1C:B6:CB:E2:92:5A:7B:F1
Authority key identifier: B5:0E:DF:C9:6D:2B:61:78:86:89:53:31:42:96:9E:65:56:65:12:AA
Certificate issuer: /CN=b50edfc96d2b61788689533142969e65566512aa
Certificate serial: 019D99CFDE0533E6CAB15101E678DCE372EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
Manifest number: 1842
Signing time: Fri 17 Apr 2026 05:00:29 +0000
Manifest this update: Fri 17 Apr 2026 05:00:29 +0000
Manifest next update: Sat 18 Apr 2026 05:00:29 +0000
Files and hashes: 1: tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl (hash: fMfp5B7P6b714RjxSesG7vbmMlKISsV0LXUaYkEnqbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:de:05:33:e6:ca:b1:51:01:e6:78:dc:e3:72:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50edfc96d2b61788689533142969e65566512aa
Validity
Not Before: Apr 17 05:00:29 2026 GMT
Not After : Apr 18 05:00:29 2026 GMT
Subject: CN=9e933925d937e96f892189311cb6cbe2925a7bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9e:59:16:04:b0:96:97:1e:37:18:9b:20:f4:
a9:22:92:15:ea:1a:39:72:b6:0e:c8:7f:6d:2b:b9:
49:44:86:58:a2:6f:1c:e6:7e:3b:1b:16:52:fb:3c:
58:f8:40:55:58:fe:81:b8:74:82:54:ae:27:b5:d0:
cb:ea:fa:ca:ac:82:94:88:2b:84:5d:56:cc:79:a9:
6a:21:f6:72:60:73:2a:ae:3b:e0:3c:f2:8f:66:ee:
32:24:62:23:aa:d9:a4:54:98:a9:b7:e2:e2:b3:06:
c0:fe:03:89:75:a4:8f:b6:bf:f7:58:15:e0:ef:14:
0c:af:98:c3:c9:58:d8:2a:f8:da:68:b4:e2:fa:80:
9c:53:cb:d0:e9:d7:69:76:47:d0:58:c3:c0:04:91:
8b:0f:bc:e9:4f:06:30:00:c0:ae:9f:7d:af:e7:68:
72:92:63:f6:82:6d:5b:af:4e:ee:f6:f7:c7:20:b7:
c6:77:06:8c:65:9d:56:14:d2:94:7b:12:11:9e:49:
91:a2:ba:34:08:78:94:d0:20:f1:2a:e6:39:45:4f:
e0:d8:be:72:a7:f9:3a:d2:77:95:14:4f:34:0f:74:
29:4c:4e:1c:53:81:81:74:1e:e9:1c:02:a5:57:9b:
c9:63:16:9d:69:9d:0a:73:0c:40:b2:ff:c6:17:b4:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:93:39:25:D9:37:E9:6F:89:21:89:31:1C:B6:CB:E2:92:5A:7B:F1
X509v3 Authority Key Identifier:
keyid:B5:0E:DF:C9:6D:2B:61:78:86:89:53:31:42:96:9E:65:56:65:12:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:83:cc:a1:68:2f:b4:62:cc:67:77:44:40:58:17:c5:f5:d5:
d0:e3:e1:65:76:de:e8:dc:fe:99:d6:ae:2f:de:f1:d1:bd:69:
31:c3:86:c1:27:c0:5a:3d:be:1c:c5:52:78:25:4b:8a:09:b1:
1b:2a:7d:06:42:80:73:dc:41:2f:f8:7b:76:66:d6:5a:c3:6b:
d1:7c:d3:e1:a2:7b:2f:d4:a5:0e:0a:5d:8d:9f:0c:bf:61:f4:
82:5c:fb:f3:31:ef:31:db:8b:60:ed:83:66:f7:11:58:ba:f0:
e5:8f:3f:fd:8e:37:5b:fc:6b:20:28:af:54:b1:c7:8c:cc:0b:
55:1f:85:04:51:10:aa:78:8b:40:b5:94:ef:60:b0:7b:70:85:
4d:f9:fd:16:5a:c5:e3:92:9e:85:3f:4d:35:ef:20:eb:a6:e4:
58:e5:64:ea:4b:eb:b7:14:6e:07:0b:3d:cf:19:d4:33:2c:61:
b9:f7:e2:87:3f:b6:8f:d6:78:60:93:78:99:e8:cc:2f:6b:76:
cd:21:4f:26:41:c4:45:e8:4a:f9:6b:48:fa:63:ef:51:ce:3e:
58:48:6d:4c:b7:86:8c:00:f1:cf:3d:71:2e:8a:cf:b5:f2:6e:
06:73:87:56:c5:9c:c1:e2:e2:a7:bc:14:41:fc:93:53:32:22:
db:a3:8e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:29:44 2026 by rpki-client