Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
File: RI63RgCeGCwI7YT4F30ACKZIWD0.mft (raw, json)
Hash identifier: cKy66AtmF6TIytwPpmiJoX2WRQo4vGDd4FK7Bmd1dnk=
Subject key identifier: 90:C9:6E:CC:75:F5:25:27:DD:89:A0:BB:45:64:1A:5A:E3:E9:5B:DA
Authority key identifier: 44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
Certificate issuer: /CN=448eb746009e182c08ed84f8177d0008a648583d
Certificate serial: 019F118972FBA205FC7A52F008325C088DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
Manifest number: 0133
Signing time: Mon 29 Jun 2026 04:00:48 +0000
Manifest this update: Mon 29 Jun 2026 04:00:48 +0000
Manifest next update: Tue 30 Jun 2026 04:00:48 +0000
Files and hashes: 1: RI63RgCeGCwI7YT4F30ACKZIWD0.crl (hash: 8N1WB+pUqI/Tr+qR6rJbMqkjLPfc2EC0T2/Rlxqo800=)
2: gbt_B8vVXTypNEnXce8HlY3ojHQ.asa (hash: /VQ5E20iFSb11ZwdrgV0PkgeT2bkuefW1BPmr+djQBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:89:72:fb:a2:05:fc:7a:52:f0:08:32:5c:08:8d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448eb746009e182c08ed84f8177d0008a648583d
Validity
Not Before: Jun 29 04:00:48 2026 GMT
Not After : Jun 30 04:00:48 2026 GMT
Subject: CN=90c96ecc75f52527dd89a0bb45641a5ae3e95bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:81:a9:d1:77:67:50:bf:3a:4c:2b:3c:df:e4:
58:c6:43:d8:2b:88:ba:b8:cc:10:71:2d:c6:d7:5f:
18:0f:5e:bf:3f:19:ac:70:c9:be:a8:1b:0a:f8:e2:
f3:23:b4:da:2e:e3:8b:a6:4c:f9:9a:83:37:e6:28:
08:ed:5e:c3:03:f1:79:5f:94:39:49:f2:77:31:b1:
c7:93:e3:59:04:a9:64:ac:d7:a9:18:91:03:44:ed:
cc:5d:e8:81:a1:53:e7:2e:27:9f:50:12:69:23:0d:
f3:cc:3e:a8:8e:24:15:af:1c:83:20:47:24:2b:73:
39:fd:a7:3a:7a:70:06:26:49:2a:e3:ee:82:7f:68:
e5:77:89:d1:18:b9:db:40:e6:26:a9:54:a9:3c:cf:
5d:af:0c:19:6d:aa:7c:d7:64:97:c3:a0:b0:a5:ae:
88:a1:6e:f8:60:7a:c1:66:2f:ce:cd:51:64:1d:d8:
58:89:3b:51:5a:0d:d2:48:08:7a:5d:a2:de:6e:4b:
ff:fd:fc:47:dc:d1:f5:86:08:7c:e7:b9:7d:4b:ab:
26:e2:0d:47:ca:4f:36:cf:35:70:6a:b9:d1:fe:a4:
e5:da:a2:17:76:2a:41:b7:ca:42:de:c7:2e:62:34:
79:2b:b5:b9:c4:22:b5:88:ef:fa:33:bf:54:7d:26:
ee:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C9:6E:CC:75:F5:25:27:DD:89:A0:BB:45:64:1A:5A:E3:E9:5B:DA
X509v3 Authority Key Identifier:
keyid:44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:31:3d:a4:26:dc:10:b8:b7:26:53:03:b2:c8:4f:37:be:d3:
17:44:c6:7c:f7:3d:5e:42:30:4d:09:4f:67:fe:49:e3:3d:1c:
53:a8:6e:b9:b9:b4:a5:51:60:eb:ba:a2:c8:17:a8:6e:b9:f2:
51:6d:f6:1f:e2:b1:df:87:61:36:29:8c:48:0d:eb:4f:5a:81:
6f:59:23:e3:a6:a0:eb:a5:64:16:ab:9f:00:c5:3e:e8:e0:74:
13:cf:79:b3:9d:e6:6b:29:d6:d2:53:a2:c3:83:3b:b1:d5:e9:
ae:3d:1f:f2:d6:4b:9b:52:97:ce:3a:4e:51:2a:cc:cf:7e:01:
23:7c:d9:c9:62:84:fb:47:de:d1:95:fa:ab:9e:65:5e:fe:84:
0c:8c:86:c3:54:5c:f7:76:eb:db:de:86:d6:cc:5f:39:82:6a:
6a:56:7e:b4:51:0a:21:d1:40:20:59:d5:f2:4a:d3:b7:81:4e:
ba:97:40:8c:9d:41:50:01:76:67:66:dd:14:50:d3:3b:20:74:
bf:fe:99:2b:cb:b8:b7:15:f4:98:8a:25:8d:1d:8a:85:fb:ed:
b7:33:c8:77:76:97:16:ff:8c:5a:84:61:a2:36:21:02:f5:b2:
ff:e7:ab:9e:b8:25:9a:ed:c3:08:3d:96:9d:c9:e2:69:a6:89:
be:14:5f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:37:53 2026 by rpki-client