Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
File: RI63RgCeGCwI7YT4F30ACKZIWD0.mft (raw, json)
Hash identifier: sK+5W7OQrl+JiWPzjdfV/JFPHpBXavZF4o1CTtV4Pwg=
Subject key identifier: A8:39:E3:CF:61:42:60:B1:7A:25:81:CA:CD:FD:E1:B6:D9:3E:D0:79
Authority key identifier: 44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
Certificate issuer: /CN=448eb746009e182c08ed84f8177d0008a648583d
Certificate serial: 019D9BF54480694BA0189940BC7DCF7AE68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
Manifest number: 70
Signing time: Fri 17 Apr 2026 15:00:35 +0000
Manifest this update: Fri 17 Apr 2026 15:00:35 +0000
Manifest next update: Sat 18 Apr 2026 15:00:35 +0000
Files and hashes: 1: RI63RgCeGCwI7YT4F30ACKZIWD0.crl (hash: wz3JDYEkTaQXpzaOA/WSG4mTMcghgxyNxbkXuIR8YDk=)
2: cEhdSETnWKK4jrdkC6FnzE635Q4.asa (hash: bWN8e6H8xy6wbC86M9g/MXHvY7mj1QVH0ZniAmaPgBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:44:80:69:4b:a0:18:99:40:bc:7d:cf:7a:e6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448eb746009e182c08ed84f8177d0008a648583d
Validity
Not Before: Apr 17 15:00:35 2026 GMT
Not After : Apr 18 15:00:35 2026 GMT
Subject: CN=a839e3cf614260b17a2581cacdfde1b6d93ed079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:e0:65:e8:a0:5d:67:83:3c:a6:1c:43:77:
e3:9e:be:c5:29:d3:0d:b3:d6:b9:4d:62:44:62:bc:
32:af:48:fc:d5:46:74:e3:b1:2e:82:40:92:d7:d1:
07:83:4b:57:db:f1:fe:5b:f4:e5:e5:cf:69:db:a0:
b4:ee:33:12:fc:89:a1:e0:d6:7d:61:77:3f:d0:69:
21:50:69:28:ff:b0:91:82:2f:7d:80:c1:2e:78:0d:
09:0d:a8:33:bb:ba:08:77:c6:fa:d1:49:74:d0:c7:
9f:63:d3:c5:6d:d6:e0:57:48:2a:5d:1b:c8:d6:94:
37:76:db:f9:81:77:b5:8e:80:26:d8:6c:c3:2b:82:
b0:63:53:9d:c1:ee:bb:1c:98:70:6e:e0:89:76:c0:
b9:f4:97:e3:d7:83:d9:73:4d:74:63:1b:cc:7f:f4:
37:e6:e0:3f:2b:d0:15:e4:0b:c6:fc:4c:b4:d1:e4:
7f:5c:68:e8:fc:dd:a4:e8:70:8c:c7:81:97:c9:f6:
40:42:57:53:5c:48:af:2b:ae:50:ee:c0:4c:ee:cc:
c2:49:38:86:21:76:2b:7c:dd:92:64:ec:89:d7:c5:
15:c5:3d:8f:ce:ac:22:ed:0a:55:ec:7d:2c:45:b3:
86:37:d0:d3:43:78:f4:86:b9:4c:27:a4:e7:00:d9:
51:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:39:E3:CF:61:42:60:B1:7A:25:81:CA:CD:FD:E1:B6:D9:3E:D0:79
X509v3 Authority Key Identifier:
keyid:44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4d:3f:cc:f0:bb:9b:0e:22:a6:aa:5b:f9:c6:df:72:a9:7a:
a0:75:85:29:cc:49:14:f2:18:9b:17:5f:d9:96:18:da:ff:4a:
67:e3:a9:e8:ad:df:e6:81:5d:0b:97:d6:53:0c:37:91:b0:6d:
4a:9f:e2:32:90:96:e3:fb:cc:f9:57:34:8a:74:e4:ec:a3:ce:
eb:ff:04:d2:7f:9f:fd:ec:03:66:7e:fc:3d:a6:03:8c:d8:83:
22:9c:8e:34:6f:da:d8:95:56:15:81:3e:2c:37:ff:a0:d3:21:
35:20:fe:a6:13:01:83:61:98:9c:11:d6:d1:fa:e7:f0:58:d7:
82:65:c3:34:67:0d:4a:89:0f:f4:45:fd:21:a6:bb:21:44:1f:
40:dd:f0:2f:47:6e:cc:84:e0:25:e3:45:f7:a8:5f:f2:fd:12:
3b:1c:d8:66:5a:1f:4d:ed:56:fd:1d:c4:fb:14:e2:a4:2e:1b:
f1:8d:26:57:c8:dc:90:27:fb:14:99:bc:8e:1e:3b:72:c4:be:
3a:bc:be:d4:1c:2b:54:ef:cf:7c:a5:35:1e:10:96:5f:b4:41:
cc:6a:91:5b:fa:4c:f4:04:93:e7:cc:28:5f:d1:23:7b:4e:05:
ba:99:6d:75:89:70:54:75:27:51:44:6b:4a:81:51:af:ea:cd:
94:98:5b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:57:50 2026 by rpki-client