Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
File: 468Yd0OnoHf2oeBmX92q700SSfs.mft (raw, json)
Hash identifier: cVn4cVfyUM0AAjYO5NFyUit5L/cr3OK70NUTc0GBeUw=
Subject key identifier: 3B:6E:E8:0D:40:06:C0:50:AD:99:FC:28:B6:C5:DA:F0:30:6F:5E:FC
Authority key identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
Certificate issuer: /CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Certificate serial: 019F90FF0EDF631A4E9DF4637D8201B9ECC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
Manifest number: 0D22
Signing time: Thu 23 Jul 2026 22:01:02 +0000
Manifest this update: Thu 23 Jul 2026 22:01:02 +0000
Manifest next update: Fri 24 Jul 2026 22:01:02 +0000
Files and hashes: 1: 468Yd0OnoHf2oeBmX92q700SSfs.crl (hash: Pb5hEWDToB1CDDEbwR7uWx0/MPmHWsQJ7qMREgiIcyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:0e:df:63:1a:4e:9d:f4:63:7d:82:01:b9:ec:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Validity
Not Before: Jul 23 22:01:02 2026 GMT
Not After : Jul 24 22:01:02 2026 GMT
Subject: CN=3b6ee80d4006c050ad99fc28b6c5daf0306f5efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:0e:f1:2e:e5:96:72:a1:5a:83:25:d2:b1:
d9:95:d9:5d:be:3f:e0:12:2f:6f:3a:a4:74:26:09:
ac:08:07:92:b8:84:ff:c5:5d:6e:3b:d3:fe:51:28:
71:12:43:90:e0:d7:63:8c:14:01:3d:f1:60:c3:4c:
b6:c6:f6:4c:48:ee:b5:73:5b:55:b8:ba:49:65:cc:
e4:91:b0:b7:c2:bd:4c:5f:1e:b6:3b:17:4f:a2:dd:
e0:2c:a5:77:18:7c:1c:a3:f1:52:10:c6:c2:cb:d8:
68:31:20:f5:0a:86:e9:70:b8:8e:1e:ea:34:72:d4:
30:82:35:33:bd:73:45:1e:f2:62:8f:9d:96:f3:cf:
d6:97:c6:60:60:23:e2:ad:b6:53:55:e8:67:50:ea:
82:e4:e9:6f:d9:19:c3:73:56:03:69:93:15:ce:f9:
86:73:bf:ab:f7:89:c4:be:9b:72:fd:b0:bc:67:ba:
4b:bb:42:cc:38:63:e3:97:60:94:4d:b3:ea:3c:a4:
1f:d3:81:6e:c9:a9:5b:dc:41:30:40:a3:86:ff:15:
3f:46:28:39:29:5c:73:ec:db:94:9f:df:de:f6:26:
ca:1d:87:18:2b:48:5b:02:33:cd:34:81:27:45:89:
ea:b0:02:ba:d2:b4:4d:82:2b:7d:6f:13:b2:2a:62:
70:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6E:E8:0D:40:06:C0:50:AD:99:FC:28:B6:C5:DA:F0:30:6F:5E:FC
X509v3 Authority Key Identifier:
keyid:E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:64:92:13:0e:55:77:de:87:6e:73:82:a8:19:e3:f0:ee:d5:
26:ac:51:e3:04:95:cf:21:99:e8:a7:9f:43:79:19:3a:29:28:
d4:04:61:d9:a7:ef:46:1d:0a:43:48:f6:b5:0f:62:d7:a8:1f:
f6:fd:56:36:64:fe:26:42:cc:36:51:11:6a:1b:e2:b1:39:da:
ea:55:ac:5b:38:9c:40:fe:aa:4f:e2:8d:ce:e9:96:95:c1:1b:
0f:fa:6e:a6:f9:1a:14:b1:22:c0:23:18:41:1a:15:12:77:59:
79:35:5b:95:ea:90:e0:49:91:d4:58:55:a1:9b:c7:6d:08:1d:
7d:e7:49:c0:e1:93:ce:b8:11:0a:e6:b4:e8:19:5d:dc:9c:9d:
13:40:57:a7:88:54:cc:c1:06:c2:90:b7:ba:eb:2c:ed:db:dd:
50:b0:26:68:d7:ad:2c:76:64:7e:5e:55:09:a5:2f:6c:84:cc:
6b:8a:a1:bc:44:01:4f:12:4b:dc:cb:fe:56:8b:f2:e3:10:98:
79:e3:22:ae:26:51:c4:ab:f7:27:a4:3f:22:63:6f:00:1f:d3:
e8:0c:2d:a1:50:44:e5:9e:1d:31:86:bc:4f:99:46:9e:b1:36:
02:87:aa:4f:2d:5b:5c:26:50:96:ad:3a:2c:9f:fb:cc:58:29:
4e:26:95:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:56:45 2026 by rpki-client