Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
File: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft (raw, json)
Hash identifier: F0373cSDrEpxMQAlAZ6I8giqWua1IB/vhsYiVLyYtjg=
Subject key identifier: 97:4B:97:6D:10:F0:4D:B6:D8:BD:60:EB:12:19:7B:85:39:C0:F3:BB
Authority key identifier: 44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
Certificate issuer: /CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Certificate serial: 019D98F460ABB5FB85BE4E7EBD745D978573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
Manifest number: 067A
Signing time: Fri 17 Apr 2026 01:00:45 +0000
Manifest this update: Fri 17 Apr 2026 01:00:45 +0000
Manifest next update: Sat 18 Apr 2026 01:00:45 +0000
Files and hashes: 1: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl (hash: wd26zZdHHVzwPE4fx0mgOg1AvNnCZfrRnzNB4Gi+LBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:60:ab:b5:fb:85:be:4e:7e:bd:74:5d:97:85:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Validity
Not Before: Apr 17 01:00:45 2026 GMT
Not After : Apr 18 01:00:45 2026 GMT
Subject: CN=974b976d10f04db6d8bd60eb12197b8539c0f3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dd:76:f8:e3:da:43:bd:3b:40:6e:0d:7d:3f:
78:dc:49:8f:65:28:e0:a9:e4:99:0f:c3:c5:3a:d1:
1d:76:78:2e:fc:f5:5f:77:49:32:b7:a8:e5:6d:3c:
aa:31:23:02:49:ee:f2:c5:ab:df:bb:1e:7c:31:4b:
fd:18:50:4c:94:ca:6b:84:c0:91:35:d8:fd:a5:5a:
30:63:c2:1e:08:fa:74:95:f5:29:52:c9:15:4f:7a:
a0:93:22:7c:43:2c:9f:14:f2:cb:b7:c6:05:66:f1:
04:ad:0c:60:d1:5a:41:be:57:36:5a:98:18:57:18:
f7:0a:55:9a:9a:96:7e:38:13:90:09:3d:b9:12:82:
ac:b4:c5:ab:a3:bc:a7:b4:53:ac:10:54:b2:ab:71:
02:9b:c7:18:27:7d:ec:b1:52:fd:96:68:a3:8d:82:
e6:33:c2:d8:8c:d0:16:e3:c8:60:08:16:36:16:2f:
8c:2b:16:a7:84:28:b4:ae:b8:7b:f0:25:19:2a:b6:
8f:6c:f8:8d:9c:62:2f:c3:df:54:dd:a0:34:c2:c0:
81:81:61:6a:4f:7a:4f:94:e2:20:74:76:53:04:e9:
2c:0c:69:d1:8f:88:dc:96:5f:85:b8:b8:c7:8a:2b:
74:09:71:e1:dc:71:6c:17:52:17:44:f8:ba:87:e0:
80:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4B:97:6D:10:F0:4D:B6:D8:BD:60:EB:12:19:7B:85:39:C0:F3:BB
X509v3 Authority Key Identifier:
keyid:44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:59:8d:ba:b4:77:b8:5f:75:18:39:6f:e9:a7:ae:67:9a:9b:
b5:3a:50:6a:63:e8:cd:49:ae:c8:16:f3:64:c9:d4:49:d9:05:
0d:e5:f1:3e:31:8b:81:57:bc:f8:9f:39:6f:8f:58:93:29:b4:
8a:19:e6:d1:8b:e8:e3:98:59:73:aa:d5:7a:e4:b2:14:e2:cc:
2d:12:0d:75:44:1b:6d:9c:21:01:2e:a8:01:53:42:1a:90:cc:
31:5c:c3:75:bb:73:7c:36:f6:62:43:c3:b6:57:f8:ab:1e:5b:
1b:c5:4a:c8:5a:e4:ed:38:2b:ec:66:fa:6c:78:5b:f2:19:61:
ef:fa:f1:15:fc:0e:db:7e:fc:36:ec:03:f5:e2:6c:c2:10:c6:
e6:ab:07:e2:66:10:5e:44:5f:fa:fa:a2:6a:57:58:42:9c:ad:
62:f6:18:23:a3:c5:73:c0:fe:9a:b8:46:cb:ab:4b:3d:f1:45:
83:7a:07:be:6e:bf:9d:1f:5a:1c:fb:b7:a3:6c:a7:b2:c9:45:
7a:ff:13:cb:82:57:44:12:9f:3b:51:7e:6a:73:76:97:4d:12:
4f:95:b2:59:95:8b:a4:d2:95:da:5a:06:95:84:18:80:01:0b:
f3:83:88:d8:eb:4b:94:38:26:ae:47:7c:e5:1d:85:d3:4d:5e:
f4:8b:37:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:33:04 2026 by rpki-client