Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
File: 468Yd0OnoHf2oeBmX92q700SSfs.mft (raw, json)
Hash identifier: MSoDQKFzbIBcSHFg6Yz1s8jgr+Mo+gwT/NFTo9HG31M=
Subject key identifier: 54:99:34:3D:06:21:C2:2B:37:BC:7F:A8:27:0D:59:BD:4F:92:DC:4F
Authority key identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
Certificate issuer: /CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Certificate serial: 01A00101DB4835B8F698C7D4C6D42EA3D455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
Manifest number: 0D5C
Signing time: Fri 14 Aug 2026 16:01:33 +0000
Manifest this update: Fri 14 Aug 2026 16:01:33 +0000
Manifest next update: Sat 15 Aug 2026 16:01:33 +0000
Files and hashes: 1: 468Yd0OnoHf2oeBmX92q700SSfs.crl (hash: H/1QLhIfKONOWdG1W1/s+36EpG0ANZcDTRVpoL8/UMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:db:48:35:b8:f6:98:c7:d4:c6:d4:2e:a3:d4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Validity
Not Before: Aug 14 16:01:33 2026 GMT
Not After : Aug 15 16:01:33 2026 GMT
Subject: CN=5499343d0621c22b37bc7fa8270d59bd4f92dc4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:2c:58:70:79:70:38:3a:b8:29:74:f4:d1:
1d:03:cd:41:aa:74:40:7e:9f:ff:ae:33:f1:9f:31:
a7:12:c0:d5:14:06:58:d7:59:fc:5a:c9:c1:2e:49:
fb:93:fd:bd:3b:11:9f:bf:4e:c7:d8:74:1b:b8:16:
74:b6:f2:ec:3f:d8:d8:7d:81:a0:68:23:4f:e8:c4:
5c:fd:f1:1a:8c:ac:8a:38:39:42:51:22:82:bf:09:
5c:f4:34:53:4a:65:74:ae:04:c5:f0:5d:93:fb:e9:
e1:0c:67:82:03:cf:a0:b6:0d:36:d7:47:5d:ab:2e:
62:b7:f7:ae:92:82:cb:73:10:d3:8c:c9:f0:c6:d4:
ab:9f:f7:e9:67:27:13:1a:d9:73:ee:02:27:04:48:
c4:58:35:0a:b8:f0:40:e5:25:cd:3e:14:f9:6a:e3:
99:ac:b4:dc:08:c2:fd:22:ec:57:e1:32:d7:1c:50:
86:7c:51:9f:e0:22:d2:6c:c7:33:d6:30:1a:02:4d:
39:2b:fa:7e:7e:23:1c:47:da:c0:4d:c2:02:62:88:
45:5f:e0:ba:08:5f:70:c5:7d:5a:1b:36:2a:90:88:
6f:62:5e:79:85:88:d6:7e:a4:26:08:88:ce:9a:a9:
2c:b5:a2:15:b7:56:7d:28:39:55:ec:b1:b3:a6:84:
a2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:99:34:3D:06:21:C2:2B:37:BC:7F:A8:27:0D:59:BD:4F:92:DC:4F
X509v3 Authority Key Identifier:
keyid:E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:cb:7d:69:9c:0e:23:80:fb:de:c1:4a:86:a0:cc:fa:ec:85:
90:07:0f:51:de:67:44:4f:55:0d:3f:d8:85:61:1a:85:ff:ff:
3e:a8:33:b9:ff:4b:3d:82:63:96:00:b5:fd:10:7f:0b:95:c9:
f2:88:83:4c:e0:15:1c:bb:d6:1b:84:b8:60:80:62:8c:ce:28:
1b:7e:d4:3a:23:00:fc:d6:87:26:88:1a:e2:d6:f0:3d:5e:c3:
e4:c7:99:58:cc:f0:15:bb:83:99:5c:c4:6d:75:07:1d:e0:15:
2c:73:bb:dd:f1:35:a5:08:7b:f4:be:e6:d7:30:a2:f7:ec:8b:
da:ee:0f:50:25:6d:d8:6f:b7:5b:26:c5:dc:cb:aa:77:fe:a0:
94:01:67:53:d1:81:08:88:44:b8:fc:6b:ea:1d:b2:0a:ab:44:
84:1a:b5:57:25:c6:53:25:a9:0d:60:48:a2:e6:97:ea:5c:40:
4e:89:e2:db:8d:33:f1:71:86:14:03:bd:56:06:2c:8e:de:bd:
1d:fe:5f:98:22:98:34:34:0e:6e:d6:f2:ad:a4:46:94:d1:b0:
e8:89:19:77:1d:db:89:1b:0e:89:1b:d9:31:a1:57:2a:f0:29:
60:2f:ea:7f:b8:b9:6e:f9:64:74:41:81:33:c8:0f:11:16:4b:
b3:5b:79:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:27:58 2026 by rpki-client