Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
File: p6YlNTs6w-H5XJYlGRWNsSINCo4.mft (raw, json)
Hash identifier: e+C2k4YzhKKPE4ZSg89SrGSlIlioL1xTLfWB0WHtWP4=
Subject key identifier: B4:BF:1E:D4:AD:55:61:38:F3:03:3B:54:0D:27:B2:0F:A2:61:0C:29
Authority key identifier: A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
Certificate issuer: /CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Certificate serial: 019D98F42BE2062E1ABA9F2DC87EEA63EEA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
Manifest number: 0D28
Signing time: Fri 17 Apr 2026 01:00:32 +0000
Manifest this update: Fri 17 Apr 2026 01:00:32 +0000
Manifest next update: Sat 18 Apr 2026 01:00:32 +0000
Files and hashes: 1: p6YlNTs6w-H5XJYlGRWNsSINCo4.crl (hash: fOGSbd8AyXsB88OMjon6AwniQbig6w+r2Z4as457+pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:2b:e2:06:2e:1a:ba:9f:2d:c8:7e:ea:63:ee:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Validity
Not Before: Apr 17 01:00:32 2026 GMT
Not After : Apr 18 01:00:32 2026 GMT
Subject: CN=b4bf1ed4ad556138f3033b540d27b20fa2610c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:01:91:c4:e7:31:63:f0:bd:49:50:b3:b4:c4:
e0:d4:26:35:d6:42:a3:cd:86:1b:c4:3f:16:f1:61:
16:9d:58:70:08:b4:91:42:d1:e4:03:ad:7e:0b:c4:
91:83:b0:77:6c:cb:f7:a7:c1:00:db:05:08:58:89:
1f:d2:8f:21:19:9d:a3:21:33:9e:35:50:f6:fa:dd:
42:35:9f:83:d6:a2:4e:c3:16:4b:f9:0b:6a:d1:f6:
57:1d:47:4c:86:48:bc:b1:97:d4:38:b8:c7:ee:90:
7a:c5:10:5c:b1:9f:75:da:33:a1:44:e9:b5:cd:e8:
12:1e:9d:a5:b0:e6:cc:0a:f1:5e:be:23:e7:5b:76:
70:6a:c5:15:a5:04:af:b7:76:d1:29:2c:0b:ea:18:
46:a8:7d:ec:dd:34:03:86:45:53:bc:5a:43:40:81:
a1:cc:95:7b:df:1c:9f:0c:93:85:ba:96:a5:12:4f:
f1:5a:be:1c:54:3c:51:96:dc:5f:ca:83:ab:39:d0:
ac:11:3a:50:ff:c6:c1:e5:80:12:00:5a:69:84:96:
ea:89:d1:2b:f9:4d:96:82:6c:e7:fb:5c:c5:36:83:
ec:17:f8:24:67:e3:b4:ba:38:3d:3d:7d:cc:11:33:
73:8e:d3:9c:6b:f5:54:4d:a7:5a:b4:d1:8c:82:29:
82:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BF:1E:D4:AD:55:61:38:F3:03:3B:54:0D:27:B2:0F:A2:61:0C:29
X509v3 Authority Key Identifier:
keyid:A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ee:db:3d:4d:95:90:6e:77:8f:a9:8e:ff:c4:e6:bb:d5:5b:
b0:f5:d7:3f:aa:e3:ba:2b:42:2c:42:39:c3:bb:01:fa:41:17:
84:ac:5a:4e:90:51:41:fa:98:4f:1e:9c:0f:5d:da:60:7f:0f:
00:d3:00:ed:95:32:79:02:ab:a6:6b:09:cc:13:37:9f:9c:1f:
d5:2c:ff:6f:13:48:66:8e:97:c0:ef:0c:33:ca:ae:97:c7:72:
b0:eb:d5:3e:15:af:25:60:a9:92:0f:be:53:e5:53:ab:40:d7:
9e:05:11:f1:1a:bb:00:f9:9c:54:aa:b2:e5:be:8d:7e:7e:ba:
8d:a6:94:9f:9f:69:b2:66:ee:67:23:4b:00:0a:1b:f1:85:82:
43:3c:1e:56:61:9d:fd:e5:64:cc:fe:97:a5:08:8a:7e:b9:f4:
d0:87:61:15:a5:5b:42:eb:c4:6e:5e:c8:9c:8f:a0:f4:b9:30:
9f:de:24:93:62:2c:d1:d4:a9:81:08:31:33:25:1a:39:2f:e6:
33:68:97:c7:4d:23:f2:60:be:9b:bd:67:bf:bb:a1:22:13:66:
9d:2b:dc:74:49:26:59:69:01:6d:ee:43:82:5d:e0:28:ff:a9:
66:2c:06:f8:bc:6c:72:48:6e:f0:19:5d:ee:16:96:0c:d8:cf:
60:a8:7a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:28:42 2026 by rpki-client