Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
File: r4yBlkcmb7yxOeZyqPuaV89Ysog.mft (raw, json)
Hash identifier: oyAkcHqfDtYQ+o0f3A9piHmTWGjZnWQYreOEWs5kUz8=
Subject key identifier: CF:DB:F5:93:18:B3:94:FF:CF:DD:64:CC:DA:CD:7A:D8:DC:A6:C7:58
Authority key identifier: AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88
Certificate issuer: /CN=af8c819647266fbcb139e672a8fb9a57cf58b288
Certificate serial: 019D38D29D3A0F57CFCFAB76FB3141BA2E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
Manifest number: 06A1
Signing time: Sun 29 Mar 2026 09:00:19 +0000
Manifest this update: Sun 29 Mar 2026 09:00:19 +0000
Manifest next update: Mon 30 Mar 2026 09:00:19 +0000
Files and hashes: 1: r4yBlkcmb7yxOeZyqPuaV89Ysog.crl (hash: OxK1fWT4xCXeTGAeInAIUOAE3QUAaZUJnvFsY7JzlrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:9d:3a:0f:57:cf:cf:ab:76:fb:31:41:ba:2e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af8c819647266fbcb139e672a8fb9a57cf58b288
Validity
Not Before: Mar 29 09:00:19 2026 GMT
Not After : Mar 30 09:00:19 2026 GMT
Subject: CN=cfdbf59318b394ffcfdd64ccdacd7ad8dca6c758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:17:f0:4f:db:88:cf:39:74:55:dd:3a:e1:11:
99:9b:1d:ed:80:28:34:80:1f:8f:ed:20:ba:74:fa:
90:78:62:a5:80:9f:bb:b6:cd:1d:6d:33:8e:ca:7e:
e9:8d:d8:6e:c5:da:62:fc:ca:fd:9a:af:b6:ff:31:
3d:75:61:1f:7a:01:b6:ee:af:ef:39:52:2b:28:d3:
8d:56:e6:a1:7c:56:4a:82:34:39:0b:be:43:da:9f:
c3:08:d3:84:bd:20:c5:21:71:f3:7b:88:83:22:27:
6f:8b:87:1e:63:88:e7:29:dd:19:75:54:19:84:02:
26:69:56:61:f6:c8:8a:6c:29:ed:c2:dd:d1:96:81:
47:b5:ca:29:d7:67:c3:ca:28:b2:49:5a:f9:78:f4:
48:cb:25:24:3a:ae:46:37:bb:3d:a3:a3:5d:e2:7f:
c6:b9:0b:1f:0b:cd:58:20:e7:4e:e0:e9:f0:24:80:
56:13:6c:08:47:47:00:3e:85:2d:08:31:13:fb:95:
77:46:ad:98:52:2e:fc:75:b3:ce:45:ca:d4:f1:aa:
bb:e2:f2:b2:d5:a8:fc:15:9f:e2:bf:58:b9:1c:29:
39:5f:86:52:7a:f9:c6:f5:eb:c5:c4:d6:bd:52:80:
05:34:45:38:3e:c5:37:db:19:37:22:8c:6b:36:99:
83:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DB:F5:93:18:B3:94:FF:CF:DD:64:CC:DA:CD:7A:D8:DC:A6:C7:58
X509v3 Authority Key Identifier:
keyid:AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:62:c0:9d:93:c5:b5:4d:44:4d:51:bc:09:31:d5:7d:88:84:
4f:09:52:7a:c4:07:86:5c:2e:98:7c:f6:10:d3:4d:ec:d6:58:
e5:33:bf:68:7b:11:16:46:ce:cc:ad:94:1d:d7:58:07:ee:44:
93:fd:04:84:0a:5c:8b:63:f8:fe:ad:26:c7:eb:8d:ed:da:42:
13:b6:86:10:de:e1:b0:64:b7:fe:8d:e3:d7:8f:6b:ac:47:92:
ed:34:8d:ca:b8:ba:d9:56:33:5e:18:ab:77:39:87:54:cd:8f:
19:63:9c:27:e1:d8:d1:3f:8d:d0:4e:89:fa:88:9a:f2:7c:4d:
3b:9a:cc:5e:7b:08:4a:8b:a8:f0:05:3c:b3:2d:b5:f0:e1:72:
84:13:5e:fc:fd:c6:3d:4d:7d:91:a2:5e:61:ee:b1:da:b1:a0:
9d:23:09:44:fc:e7:d9:f9:09:d7:20:48:ab:e0:f0:f6:5d:43:
35:4f:99:bf:ce:93:0f:f8:5a:10:77:55:ce:f0:c1:8d:2e:5d:
9d:97:45:92:56:d5:bb:dd:80:2e:5a:68:12:16:c5:70:e9:cb:
3f:4d:3d:b5:95:c4:3a:42:b6:ed:c6:2b:a8:78:43:bd:92:3d:
af:2c:13:91:00:bb:95:65:51:e9:d4:71:38:d5:fa:e3:d6:8f:
3f:cd:1f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:02 2026 by rpki-client