
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
File: bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft (raw, json)
Hash identifier: Xnvzq0Wzl8bWgWITo+j/OdR72z4FgMQ93qyToZJqPKs=
Subject key identifier: F1:59:E3:01:3E:81:BB:88:C0:F8:E7:D0:FE:EA:8D:50:26:CD:3F:47
Authority key identifier: 6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94
Certificate issuer: /CN=6d1578a2e623736a06a5e19d91bd09620d06ad94
Certificate serial: 019D98F42630F3C655CD318C5D7EF6730B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
Manifest number: 0B5D
Signing time: Fri 17 Apr 2026 01:00:30 +0000
Manifest this update: Fri 17 Apr 2026 01:00:30 +0000
Manifest next update: Sat 18 Apr 2026 01:00:30 +0000
Files and hashes: 1: bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl (hash: rZK+UQ3KOepvzH5PKYaGuAvgjSDNm4esCcjCfD/jbyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:26:30:f3:c6:55:cd:31:8c:5d:7e:f6:73:0b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d1578a2e623736a06a5e19d91bd09620d06ad94
Validity
Not Before: Apr 17 01:00:30 2026 GMT
Not After : Apr 18 01:00:30 2026 GMT
Subject: CN=f159e3013e81bb88c0f8e7d0feea8d5026cd3f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5e:c2:83:42:f9:21:4e:97:91:16:12:73:82:
96:cd:5d:50:ca:38:3d:6f:3c:87:29:86:71:87:ad:
0d:89:ee:51:b7:f3:40:9f:20:46:67:31:b5:80:66:
26:87:e5:8a:1a:79:8e:fd:8a:14:e5:c8:b7:dd:04:
5f:ad:22:0d:19:5a:27:5f:6d:13:f2:14:c1:ee:da:
5b:7b:d8:44:68:f7:82:10:ca:57:f0:cb:cd:0f:42:
6f:aa:bb:df:5f:dc:6c:96:84:d4:f7:bc:c8:23:fd:
60:24:8e:dc:ba:55:fe:e0:89:2e:86:7a:68:d3:c3:
b7:c8:87:56:57:08:3c:f2:74:51:01:77:44:cf:95:
c1:42:ff:1c:94:c9:9c:b5:1a:49:04:90:2a:47:c4:
5a:32:e7:69:ca:34:9d:5d:b2:cd:e7:c3:83:8b:05:
ee:d9:7c:97:44:5e:48:f3:64:e3:1c:4b:c2:26:1b:
46:53:de:62:ad:37:24:95:30:32:95:e7:8b:e9:f9:
f5:8f:20:0b:0a:be:74:12:f3:e5:ce:9c:c4:e4:5f:
c4:aa:33:12:90:81:59:49:e1:21:fa:ff:43:b7:31:
2a:6d:2e:2a:18:45:fd:54:11:f4:91:af:29:d6:ce:
a2:f8:2f:72:ea:7b:62:a9:7d:87:ff:7a:96:e3:a9:
9b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:59:E3:01:3E:81:BB:88:C0:F8:E7:D0:FE:EA:8D:50:26:CD:3F:47
X509v3 Authority Key Identifier:
keyid:6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:89:df:f5:ab:fa:14:0c:1d:94:f1:33:7a:df:df:50:ac:6f:
d1:31:27:06:3e:f3:33:97:00:f4:05:ec:e7:fb:c0:bd:f8:2a:
97:34:80:ba:f5:9d:bd:95:3c:ca:62:7b:0b:b2:78:13:c7:26:
67:57:75:c1:99:4f:88:69:af:ec:ff:4c:1b:0a:db:58:27:e2:
01:0b:de:48:04:24:71:89:77:b0:38:2f:06:63:ca:88:50:31:
5f:66:15:f2:1a:a2:20:6b:53:26:9a:23:b4:1d:99:8d:ad:27:
8d:65:59:33:d4:74:2c:c2:05:e9:8e:b6:4c:d0:77:16:19:a3:
2f:51:e4:a4:05:26:8f:05:1c:2d:6f:f3:fd:fa:b4:95:2f:75:
86:3c:18:03:18:95:b8:30:b2:66:b0:29:7f:5c:9d:52:a8:a1:
af:66:9b:2a:ab:87:76:60:3e:69:19:8c:f5:41:d4:81:c7:47:
03:e4:82:25:0b:61:82:b9:6b:d3:4e:be:af:91:53:7e:3b:a8:
a8:13:9e:ea:f6:ef:df:1d:2f:1f:45:01:1b:ec:09:07:f2:3c:
55:99:f7:47:ae:8b:01:d2:18:7f:db:c7:cd:f1:24:29:f5:27:
60:bf:d3:f8:72:55:20:84:8f:ee:b5:6e:06:67:ca:8f:05:68:
b5:d9:85:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:10:00 2026 by rpki-client