Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
File: 564LxrVkpXPje515fLdeuxt24AE.mft (raw, json)
Hash identifier: aLm7MLoI5GQFNsFgH+0j+z2EaSbu9gcLIPN24S1UDsI=
Subject key identifier: 91:CB:28:9A:24:0C:C3:F5:9D:5B:C0:CF:D3:0C:72:3B:3F:E7:B6:9E
Authority key identifier: E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01
Certificate issuer: /CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
Certificate serial: 01A13D81249C21C211EDE7CD6DB5FA9CEF5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
Manifest number: 1AA1
Signing time: Thu 15 Oct 2026 03:00:35 +0000
Manifest this update: Thu 15 Oct 2026 03:00:35 +0000
Manifest next update: Fri 16 Oct 2026 03:00:35 +0000
Files and hashes: 1: 564LxrVkpXPje515fLdeuxt24AE.crl (hash: r+SVPMtDzu65nYkJTVuyN4oqoFTPH4HnlhduZTHaXNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:24:9c:21:c2:11:ed:e7:cd:6d:b5:fa:9c:ef:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
Validity
Not Before: Oct 15 03:00:35 2026 GMT
Not After : Oct 16 03:00:35 2026 GMT
Subject: CN=91cb289a240cc3f59d5bc0cfd30c723b3fe7b69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:5e:50:60:28:1c:cf:c6:51:23:82:79:27:
b0:5d:67:bf:9b:18:d9:0e:63:c6:6b:9b:22:b4:cc:
1a:d3:64:2e:d7:8d:31:10:29:7d:31:e3:d4:76:7d:
aa:ff:6a:df:b9:34:2b:89:30:2d:6e:3e:6a:cb:84:
16:b4:b1:fc:3f:58:bc:b0:76:3d:3e:a9:cf:86:aa:
54:ec:23:cf:51:bd:de:e2:c4:9c:b3:94:68:e5:c5:
6a:e0:6e:ef:0e:b7:b7:15:9c:a6:99:88:1c:7c:c5:
85:f8:8e:8f:31:ba:9f:0b:f6:f5:0b:d9:bd:c7:ca:
6c:d0:ba:b2:9c:bc:ae:f0:24:a1:9c:ac:96:74:eb:
fe:d9:36:b8:0d:b4:a3:f6:93:69:42:38:6c:91:e5:
dc:cc:a6:b6:23:cc:04:84:02:e7:22:ab:ab:f4:de:
f3:ba:3c:04:18:9b:9f:e6:4c:b4:a3:69:a5:3a:45:
1d:31:50:ed:33:d7:c2:c7:d6:6b:ec:f0:b3:12:23:
70:ab:77:85:0a:9a:ae:4e:99:4d:fb:20:6a:b8:7a:
f8:61:33:e7:ae:25:ee:5d:7f:45:32:85:f0:9c:10:
96:0c:36:1a:64:82:16:0d:b7:b6:3f:48:f4:c9:9e:
5f:b1:55:93:63:35:17:8a:1e:0a:fa:82:1c:2a:91:
16:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CB:28:9A:24:0C:C3:F5:9D:5B:C0:CF:D3:0C:72:3B:3F:E7:B6:9E
X509v3 Authority Key Identifier:
keyid:E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f9:28:14:c3:8c:19:40:6f:43:6e:18:f9:97:08:3a:71:eb:
72:e3:ea:39:fe:5f:21:8c:5d:7b:4b:f4:69:4d:e7:98:2e:82:
a9:15:f4:9d:a1:66:4c:2b:75:fa:7f:72:d5:53:81:e3:a9:e0:
75:71:56:c3:6b:df:e5:36:01:1e:05:4f:89:60:66:ab:56:55:
36:4e:86:9c:d1:a5:ef:92:d5:1a:d2:c1:48:4b:bc:64:51:59:
b9:5b:ee:02:db:c7:78:59:0c:8f:7d:36:4f:3e:81:48:f7:ba:
d8:65:5a:9e:ad:05:63:45:eb:20:84:6c:de:c0:a3:f2:b6:73:
4e:89:36:48:87:2f:ee:77:29:ce:80:8c:c5:09:76:83:a4:99:
46:e2:94:f5:2a:f5:96:65:8c:3c:07:8d:71:17:ab:7f:c5:b6:
05:87:7d:01:08:ce:db:37:11:5d:9d:5b:58:0c:4d:eb:1a:68:
01:eb:cd:3b:53:1a:df:45:62:1f:48:75:ab:61:1c:45:c3:4c:
f6:97:19:4c:04:4c:dc:66:fd:31:76:7d:90:a2:cb:45:25:4a:
22:88:7e:bc:a2:db:22:cb:a1:8f:27:eb:6f:00:7d:e1:9c:8e:
1f:bf:2a:a7:ed:40:93:89:ef:2f:2f:c4:df:24:0b:28:b2:ff:
b4:00:33:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:16 2026 by rpki-client