Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
File: pr640lzi1AsMuuWcEeKSvTcXDfo.mft (raw, json)
Hash identifier: egTIQY0hVJvhRTKAM+pJZ+sZUeAq6Xb6LSBO6fTZ9P8=
Subject key identifier: BB:A4:6D:01:CD:C1:78:24:23:70:60:36:CF:0D:92:CF:81:60:FC:E4
Authority key identifier: A6:BE:B8:D2:5C:E2:D4:0B:0C:BA:E5:9C:11:E2:92:BD:37:17:0D:FA
Certificate issuer: /CN=a6beb8d25ce2d40b0cbae59c11e292bd37170dfa
Certificate serial: 019D9BBF5283683334E8002B7376CCEB0ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pr640lzi1AsMuuWcEeKSvTcXDfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
Manifest number: 12BA
Signing time: Fri 17 Apr 2026 14:01:40 +0000
Manifest this update: Fri 17 Apr 2026 14:01:40 +0000
Manifest next update: Sat 18 Apr 2026 14:01:40 +0000
Files and hashes: 1: pr640lzi1AsMuuWcEeKSvTcXDfo.crl (hash: 71zByUuLbshKnVTYnjMtMEsDSuY4zUpToulI0a86LXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pr640lzi1AsMuuWcEeKSvTcXDfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:52:83:68:33:34:e8:00:2b:73:76:cc:eb:0a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6beb8d25ce2d40b0cbae59c11e292bd37170dfa
Validity
Not Before: Apr 17 14:01:40 2026 GMT
Not After : Apr 18 14:01:40 2026 GMT
Subject: CN=bba46d01cdc1782423706036cf0d92cf8160fce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:00:84:33:ab:07:55:bb:5c:35:e6:8c:47:d6:
b6:67:8d:1f:65:db:e0:cd:03:a3:a2:64:a3:68:98:
b0:3f:54:1d:5a:cb:e3:5a:4c:05:a7:96:8c:7f:7a:
52:a1:83:11:01:26:c6:aa:dd:77:25:fb:a3:21:0d:
49:35:09:2e:7c:4e:cf:04:66:f8:3e:e1:3e:87:a3:
94:54:e9:49:e6:f8:11:d2:c5:f3:86:c4:6f:05:f4:
37:11:c3:b9:71:d7:a7:2e:3a:89:32:46:fb:4e:93:
8d:5d:e7:f1:df:5c:18:7f:47:cb:2f:84:9f:63:9c:
b6:5b:03:8a:f4:04:6d:2c:06:f3:de:b7:e2:cc:f6:
dc:2a:19:50:d8:39:a0:d1:73:94:93:1f:f3:5b:1d:
dc:3b:f9:d6:ad:c2:65:ec:46:f4:d8:62:d0:50:b8:
00:07:d8:22:97:2e:95:bf:16:3e:28:77:14:5a:1f:
73:7a:2a:33:52:f2:94:c9:53:65:a1:4f:fe:7f:36:
f9:c3:3f:33:9a:c1:7e:b8:6a:3a:bb:b2:1c:fa:9e:
c1:f1:1b:29:99:bb:15:26:dd:c6:fe:55:0c:74:9d:
05:ef:2d:88:d2:7d:e8:ea:a5:dc:9a:65:25:c1:71:
45:62:02:12:5e:c6:d4:a9:ee:ed:9d:2e:82:ab:59:
c9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A4:6D:01:CD:C1:78:24:23:70:60:36:CF:0D:92:CF:81:60:FC:E4
X509v3 Authority Key Identifier:
keyid:A6:BE:B8:D2:5C:E2:D4:0B:0C:BA:E5:9C:11:E2:92:BD:37:17:0D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pr640lzi1AsMuuWcEeKSvTcXDfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b7:ba:07:28:54:b2:0c:a5:f1:8e:c6:38:b5:82:48:ed:5d:
61:1d:71:ef:84:81:a8:5e:6c:7c:88:1c:7e:f3:59:03:02:89:
f3:3e:17:83:9b:eb:94:82:2c:13:47:53:e2:b3:1a:23:11:2b:
0e:69:5f:a3:a0:2d:fb:90:dd:91:77:78:84:62:74:70:24:45:
fe:4d:b8:22:e4:b4:4b:ad:d1:f4:df:3a:b0:14:4d:69:fa:2b:
98:34:db:a3:38:83:13:4e:a1:ec:80:e4:c3:ec:4a:ec:7b:87:
6e:29:16:5f:be:75:82:22:80:e5:45:9c:e6:24:13:c8:90:6f:
17:15:27:d4:43:b4:bc:e8:fe:95:85:9c:89:b5:d2:16:15:8b:
25:be:6d:3c:ad:92:e9:06:ad:46:27:67:48:5b:f3:7e:6a:ee:
92:84:0e:f2:02:1c:ab:cd:8f:fd:d0:59:f7:24:02:41:2f:78:
ca:63:93:7e:8c:41:cc:cd:9d:e7:4c:a8:84:e3:6e:15:9d:b1:
d2:4a:8f:71:ef:d5:51:2d:be:fe:c8:c3:c1:af:5f:11:4f:4d:
bf:a7:bf:87:0c:9b:0d:7b:d1:bf:af:fd:03:50:21:b1:a8:95:
02:99:60:59:8a:82:31:d2:2d:b6:8e:f4:06:7e:b8:c7:8c:52:
7a:ba:ac:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:28:11 2026 by rpki-client