Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
File: RxG7s-u50tFww3xioQzNwikVVEs.mft (raw, json)
Hash identifier: sJwZDLTwhRaJVryNyIRaTV+bRg7JDyY0VANZm6TxL/4=
Subject key identifier: DF:B6:7C:25:21:6D:7F:8A:6F:B0:89:77:40:24:4C:3F:49:1D:EA:52
Authority key identifier: 47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B
Certificate issuer: /CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b
Certificate serial: 019D97E214C63E958D6A794D88CB087E4DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
Manifest number: 09A5
Signing time: Thu 16 Apr 2026 20:01:09 +0000
Manifest this update: Thu 16 Apr 2026 20:01:09 +0000
Manifest next update: Fri 17 Apr 2026 20:01:09 +0000
Files and hashes: 1: RxG7s-u50tFww3xioQzNwikVVEs.crl (hash: d7DUXagj0jk4JtroNHql38h7ND47zKR2HgcmWsMb2+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:14:c6:3e:95:8d:6a:79:4d:88:cb:08:7e:4d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b
Validity
Not Before: Apr 16 20:01:09 2026 GMT
Not After : Apr 17 20:01:09 2026 GMT
Subject: CN=dfb67c25216d7f8a6fb0897740244c3f491dea52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cc:ed:15:95:f4:44:fc:9c:e8:97:7b:cd:b4:
61:18:ca:c8:fd:6d:03:fa:94:4e:9e:d7:29:5b:ea:
ac:59:a2:41:16:76:70:72:af:17:3f:cf:68:98:9b:
0f:66:43:4b:a5:9d:4d:bc:f2:52:40:6a:4c:da:67:
34:35:f7:cf:b5:f0:4a:d1:dc:c3:ab:10:ee:83:22:
82:c9:c4:30:52:f1:62:e8:b1:f2:ca:fe:92:f0:0e:
b0:3f:ba:5b:a9:26:67:2d:2a:7f:b9:b6:98:d9:02:
fa:22:b3:5e:c6:d7:d0:a9:81:a8:72:03:87:13:a4:
a7:16:e7:d4:73:18:91:bf:cf:2c:1d:a1:3a:54:88:
76:52:4c:05:c3:88:92:cd:93:56:88:6c:41:68:fd:
13:a7:f0:c1:d9:23:b6:40:8f:8c:66:b2:65:11:66:
e8:51:aa:cc:ef:a4:e0:c8:c6:b0:66:74:ae:36:85:
b8:48:ef:2d:f6:92:67:23:ad:89:2c:78:ea:3e:20:
84:c6:64:8a:71:9c:58:ac:f8:4c:e0:ea:a0:8e:bb:
56:72:7f:48:87:91:e7:8e:8e:5f:89:7d:11:67:d7:
3d:84:de:cc:32:9c:16:50:71:2f:87:1e:cd:e0:79:
f6:d0:56:ce:f2:64:4e:95:3d:10:f1:41:19:33:d1:
08:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B6:7C:25:21:6D:7F:8A:6F:B0:89:77:40:24:4C:3F:49:1D:EA:52
X509v3 Authority Key Identifier:
keyid:47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a9:a0:75:2d:bc:8d:2d:ff:46:2b:39:62:46:92:a4:11:59:
bd:4f:44:42:c5:28:c8:4e:9b:15:45:eb:b2:ca:9f:f7:b0:88:
d0:dc:25:a6:47:6c:33:8e:53:d5:30:ae:2d:93:76:82:c4:11:
bc:69:c0:6f:53:82:81:be:89:6d:c7:e1:09:37:ce:af:1b:9e:
b1:d9:9b:03:c0:97:19:38:e6:10:8f:4f:2c:bd:8f:aa:85:95:
56:3c:b7:28:77:87:03:d7:6b:12:a1:e6:78:ba:f1:ee:d6:3e:
3d:72:55:c5:fc:60:7b:50:22:68:b5:dd:57:6e:f2:63:3d:2f:
f9:6e:09:3e:66:9e:89:c0:73:1d:0d:f9:a3:d2:d1:9c:dd:83:
41:d5:25:82:78:45:4f:aa:64:73:0d:d4:32:b4:44:0a:0a:69:
7c:7e:09:1e:4e:7c:44:08:b9:fa:77:3c:dc:2f:cd:56:86:b6:
cd:70:1b:9b:ab:68:73:ed:87:d6:48:7b:6e:c2:7f:03:17:4b:
4e:e0:1c:c5:b9:cb:06:e8:d6:45:0c:e1:54:24:b5:74:0e:09:
d2:41:a1:8c:d9:e1:f2:b5:3b:08:4a:dd:1b:91:41:5a:e5:23:
a9:68:fe:3b:ce:08:37:ad:2c:89:b1:85:44:30:1d:27:f6:c1:
13:66:b6:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4hTGPpWNanlNiMsIfk39MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MTFiYmIzZWJiOWQyZDE3MGMzN2M2MmExMGNjZGMyMjkx
NTU0NGIwHhcNMjYwNDE2MjAwMTA5WhcNMjYwNDE3MjAwMTA5WjAzMTEwLwYDVQQD
EyhkZmI2N2MyNTIxNmQ3ZjhhNmZiMDg5Nzc0MDI0NGMzZjQ5MWRlYTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8ztFZX0RPyc6Jd7zbRhGMrI/W0D
+pROntcpW+qsWaJBFnZwcq8XP89omJsPZkNLpZ1NvPJSQGpM2mc0NffPtfBK0dzD
qxDugyKCycQwUvFi6LHyyv6S8A6wP7pbqSZnLSp/ubaY2QL6IrNextfQqYGocgOH
E6SnFufUcxiRv88sHaE6VIh2UkwFw4iSzZNWiGxBaP0Tp/DB2SO2QI+MZrJlEWbo
UarM76TgyMawZnSuNoW4SO8t9pJnI62JLHjqPiCExmSKcZxYrPhM4OqgjrtWcn9I
h5Hnjo5fiX0RZ9c9hN7MMpwWUHEvhx7N4Hn20FbO8mROlT0Q8UEZM9EI6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+2fCUhbX+Kb7CJd0AkTD9JHepSMB8GA1UdIwQY
MBaAFEcRu7PrudLRcMN8YqEMzcIpFVRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnhHN3MtdTUwdEZ3dzN4aW9Rek53aWtWVkVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS80OGViNTctOWZkNC00NTg2LWJmZTkt
ZGExZTNjYjJkZWZhLzEvUnhHN3MtdTUwdEZ3dzN4aW9Rek53aWtWVkVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS80OGViNTctOWZkNC00NTg2LWJmZTktZGExZTNjYjJkZWZh
LzEvUnhHN3MtdTUwdEZ3dzN4aW9Rek53aWtWVkVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqmgdS28
jS3/Ris5YkaSpBFZvU9EQsUoyE6bFUXrssqf97CI0NwlpkdsM45T1TCuLZN2gsQR
vGnAb1OCgb6JbcfhCTfOrxuesdmbA8CXGTjmEI9PLL2PqoWVVjy3KHeHA9drEqHm
eLrx7tY+PXJVxfxge1AiaLXdV27yYz0v+W4JPmaeicBzHQ35o9LRnN2DQdUlgnhF
T6pkcw3UMrRECgppfH4JHk58RAi5+nc83C/NVoa2zXAbm6toc+2H1kh7bsJ/AxdL
TuAcxbnLBujWRQzhVCS1dA4J0kGhjNnh8rU7CErdG5FBWuUjqWj+O84IN60sibGF
RDAdJ/bBE2a2Ig==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:47 2026 by rpki-client