Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
File: 63yCLR6UUXyIUVzJs_wr3hKbRUw.mft (raw, json)
Hash identifier: YCwjagCenN7Dx0K7D6OQGW/vL+CMnWte2g9KCJB/FYs=
Subject key identifier: F3:9A:B7:C0:A9:A3:18:34:09:1A:97:29:60:58:7C:A2:8A:23:7A:FE
Authority key identifier: EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C
Certificate issuer: /CN=eb7c822d1e94517c88515cc9b3fc2bde129b454c
Certificate serial: 019DCE2B7827C1E8C16E635AB7A5ECB29133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
Manifest number: 18DB
Signing time: Mon 27 Apr 2026 09:00:48 +0000
Manifest this update: Mon 27 Apr 2026 09:00:48 +0000
Manifest next update: Tue 28 Apr 2026 09:00:48 +0000
Files and hashes: 1: 63yCLR6UUXyIUVzJs_wr3hKbRUw.crl (hash: cGS2L9izt0P8cVLeuJW/zUjvKau+ozNClo/2M4esTwA=)
2: Pelb9sx4UaCo06lIQtdADw9o9Vw.roa (hash: O2VqkK6qa58vFJcGmVZ5qivbdGixDgXC4n2ji/pNHjk=)
3: zKOI_3lej9icw_aTm3PEM1SApkE.roa (hash: J5AQoEFLTdlzSmKbeqXCxm1OdussHB+lHvKODys5oTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:78:27:c1:e8:c1:6e:63:5a:b7:a5:ec:b2:91:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7c822d1e94517c88515cc9b3fc2bde129b454c
Validity
Not Before: Apr 27 09:00:48 2026 GMT
Not After : Apr 28 09:00:48 2026 GMT
Subject: CN=f39ab7c0a9a31834091a972960587ca28a237afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:90:91:01:18:81:5d:07:b2:46:6e:40:32:d1:
e4:d6:6e:03:58:1d:5c:2a:8c:de:2e:a2:32:69:f9:
3c:d7:ee:c2:c8:79:c9:92:51:72:0f:8c:6e:5f:a8:
46:ec:9f:70:8d:f6:9e:e0:58:2a:89:bc:dd:76:fc:
64:b8:bb:c0:9b:a1:bd:9a:bf:f9:36:bc:6d:30:0f:
71:84:86:e7:22:c7:e2:b9:25:16:64:d6:d7:14:43:
85:47:5e:ec:85:67:e3:c1:c5:c4:d9:0a:05:b0:7f:
3b:28:4c:7c:30:90:ac:6f:18:8a:68:f9:f8:c3:d7:
dd:d7:69:e8:39:9c:fd:6e:81:56:7e:8c:3c:86:d7:
bd:14:44:65:03:ef:69:93:e0:cd:bb:e3:ee:16:c0:
96:8d:da:96:db:cf:c3:77:18:f6:d6:79:ff:a1:53:
8b:41:94:f0:ef:b9:c2:26:28:03:9b:63:7d:9f:5c:
c6:80:99:e4:11:e3:47:1a:05:14:4a:a8:92:ef:88:
9e:b3:92:9b:d0:a9:d2:46:15:37:7b:e4:18:29:d3:
1c:cc:f8:e6:f0:6d:2a:81:3f:20:b1:0d:f8:7c:37:
70:56:cc:43:51:ff:03:71:80:7e:37:8e:25:2e:b3:
d5:72:96:99:50:3c:75:d1:4c:f6:d6:72:e8:ab:76:
b8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9A:B7:C0:A9:A3:18:34:09:1A:97:29:60:58:7C:A2:8A:23:7A:FE
X509v3 Authority Key Identifier:
keyid:EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e3:56:f6:c6:88:ba:f7:2f:2c:ba:b7:2e:9f:99:ba:ab:ac:
32:11:db:6b:15:be:50:1e:59:fc:83:fd:e6:ca:94:65:a7:cb:
db:3f:17:f8:33:ab:7c:05:bf:aa:a5:5a:f4:e3:3a:c1:82:aa:
40:89:8c:ff:75:6f:a3:bd:31:0b:30:aa:6e:da:b6:77:c5:e9:
6a:82:b0:1d:29:f3:33:8f:30:54:74:46:b0:a6:2f:8e:7c:a0:
9b:e0:bd:5a:4b:72:e1:d9:29:6d:5b:cb:12:d7:76:9c:1d:13:
d8:18:1d:0d:54:b4:cc:9b:b2:6d:60:54:58:28:a5:61:37:93:
d0:f9:12:3d:1f:70:0a:f2:12:56:86:8b:8f:7e:df:64:f4:3e:
e5:78:fc:6e:44:17:ea:e1:63:69:c2:e1:06:f5:fc:95:fb:e6:
70:5a:e5:86:c7:45:cc:5a:11:cf:2d:2f:a3:6d:3d:fb:b8:04:
25:2e:a6:fd:56:21:3e:34:df:ef:47:55:e1:43:c0:99:c7:4a:
67:02:41:64:86:c7:35:6c:39:2e:af:d9:85:19:7c:4d:84:65:
71:17:dd:e9:d9:41:8b:2d:7c:b2:21:78:e5:e6:d4:e2:04:9f:
e7:21:b5:42:47:c1:66:29:27:ab:42:7d:b5:22:f9:5d:c1:79:
46:1d:a3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:50:09 2026 by rpki-client