Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
File: r4yBlkcmb7yxOeZyqPuaV89Ysog.mft (raw, json)
Hash identifier: q7JC7x0H1Oi1UOS7e+Fw9EX2FythvCkTFXXhYvgH8Kk=
Subject key identifier: 11:58:A5:B0:6D:6D:8E:D3:B2:CC:94:79:21:6F:08:1E:1B:28:A5:51
Authority key identifier: AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88
Certificate issuer: /CN=af8c819647266fbcb139e672a8fb9a57cf58b288
Certificate serial: 019D2B4E14D427FEC1AA6FEAE3FD5170CC5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
Manifest number: 069A
Signing time: Thu 26 Mar 2026 18:00:30 +0000
Manifest this update: Thu 26 Mar 2026 18:00:30 +0000
Manifest next update: Fri 27 Mar 2026 18:00:30 +0000
Files and hashes: 1: r4yBlkcmb7yxOeZyqPuaV89Ysog.crl (hash: 5vbsBwG8EqdBMI8MXm50Ogf56vOY4MNZMZSdHkqCKVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:14:d4:27:fe:c1:aa:6f:ea:e3:fd:51:70:cc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af8c819647266fbcb139e672a8fb9a57cf58b288
Validity
Not Before: Mar 26 18:00:30 2026 GMT
Not After : Mar 27 18:00:30 2026 GMT
Subject: CN=1158a5b06d6d8ed3b2cc9479216f081e1b28a551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:56:76:b6:e3:27:d5:c4:cf:84:0d:64:ec:
bd:b4:9a:8f:4b:b9:cb:18:c1:e0:b4:c6:12:cd:6b:
a7:a8:18:21:2e:d3:a4:0e:27:c6:0e:b4:1a:4f:48:
77:8c:0c:35:0f:38:50:c6:6a:fa:80:dd:db:38:c4:
f9:c6:16:37:48:96:4e:bc:9c:0a:10:92:02:3f:0c:
5c:f0:43:e4:2d:22:b6:a9:30:d3:e7:db:87:80:c7:
d6:20:79:a2:4d:fb:42:b7:1b:8b:23:ef:a3:84:51:
d2:37:8a:ec:d4:bf:bc:1f:9f:52:10:d5:ba:d9:30:
ab:f5:c8:c0:87:f3:f1:2f:21:94:7e:e8:85:58:4e:
d2:eb:ac:6c:b4:90:c2:06:6a:53:2f:43:62:42:68:
e8:13:ea:c3:15:25:0c:da:3f:00:bd:df:50:c9:bb:
37:4b:ab:99:d3:74:7a:66:11:df:ed:6f:7d:9c:5b:
c5:56:a4:10:47:b6:0a:15:96:44:15:a3:e1:b1:ee:
40:07:db:98:92:2c:8a:f1:aa:10:58:3e:6f:15:0c:
a8:d7:26:16:c3:82:47:8b:42:0a:ff:32:40:c5:b9:
f4:75:4a:50:d4:fc:d9:59:73:e9:ce:dd:41:36:31:
8f:bf:ca:ea:72:b2:e8:95:ae:90:3f:27:60:0a:03:
42:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:58:A5:B0:6D:6D:8E:D3:B2:CC:94:79:21:6F:08:1E:1B:28:A5:51
X509v3 Authority Key Identifier:
keyid:AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a5:cd:df:0c:db:d5:59:71:b0:8b:d6:11:29:ef:6b:e8:36:
70:97:a0:04:1c:c5:93:f3:75:c1:58:b0:7b:eb:37:03:71:94:
a0:7e:54:8b:7e:40:45:c1:22:56:98:51:08:3d:4b:3b:cd:01:
90:78:d3:7f:e7:a2:05:93:72:ed:d7:4c:ee:c1:4e:5b:53:d0:
4d:d7:74:a5:f8:08:1c:7b:c7:5a:c3:fc:11:ad:1e:4a:a2:30:
93:d5:cf:9c:12:12:b7:3f:99:26:2c:d7:c8:5e:5e:be:ee:26:
03:04:3e:e9:80:62:38:27:77:93:1a:36:8a:d4:1e:ff:42:09:
aa:39:d3:0f:ab:a7:0e:96:aa:78:08:c9:da:40:05:68:9f:92:
1d:66:22:85:d9:0d:db:db:e1:c2:5b:1c:65:07:dc:d5:53:b3:
35:bf:87:40:05:99:08:39:16:1b:22:fc:f1:5d:a2:67:4a:0e:
f8:fc:21:d8:f0:7f:02:2e:4f:c2:b8:f1:37:cc:57:d4:bf:c0:
78:a4:83:c2:a6:3b:09:e6:dc:82:dc:4e:db:8f:cc:56:fb:6f:
a5:6f:d8:d7:aa:b8:8e:08:91:9b:ee:44:1f:57:95:83:f8:6f:
63:54:8c:94:04:41:fd:98:14:60:f4:dc:1d:26:b6:37:78:40:
41:8a:ee:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:04:50 2026 by rpki-client