Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
File: 4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft (raw, json)
Hash identifier: 6RVErWoTnob+XlnnwKHQPcaqEhMi8gRQnZ99sk1vMWc=
Subject key identifier: D0:B7:A1:A3:D7:01:56:B5:2B:50:A7:A6:B7:EA:D7:F8:BD:33:0A:2D
Authority key identifier: E2:FF:4C:4E:23:81:06:DC:5F:29:6E:26:A9:CE:CF:3C:4A:43:55:46
Certificate issuer: /CN=e2ff4c4e238106dc5f296e26a9cecf3c4a435546
Certificate serial: 019D38663816EC1101B95841CCBCBA1239BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
Manifest number: 031B
Signing time: Sun 29 Mar 2026 07:01:56 +0000
Manifest this update: Sun 29 Mar 2026 07:01:56 +0000
Manifest next update: Mon 30 Mar 2026 07:01:56 +0000
Files and hashes: 1: 4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl (hash: InF6v37XagaiFrV28+6FuuTd2QP+dbp7zIochbCcFak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:38:16:ec:11:01:b9:58:41:cc:bc:ba:12:39:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ff4c4e238106dc5f296e26a9cecf3c4a435546
Validity
Not Before: Mar 29 07:01:56 2026 GMT
Not After : Mar 30 07:01:56 2026 GMT
Subject: CN=d0b7a1a3d70156b52b50a7a6b7ead7f8bd330a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:57:0a:fa:cf:d1:39:54:81:b1:ed:f6:c7:
e0:03:52:3e:ef:35:8b:77:55:6b:2b:ef:f7:25:9d:
bb:eb:02:6c:01:aa:ce:a0:1c:92:d1:80:71:ab:49:
6e:ab:e0:ca:b8:0a:37:83:3d:ae:d7:d7:a4:c4:cd:
4c:15:b6:19:29:c8:0e:88:42:ab:47:a6:de:52:7d:
1e:c1:ea:65:28:c4:9c:56:21:03:c1:8e:5d:7e:df:
4e:f1:04:ca:1a:c2:75:47:3e:6e:ec:a6:b0:07:88:
9b:57:74:51:ee:49:24:59:05:23:a8:36:e5:11:ab:
49:75:1b:b2:c6:36:ac:51:1e:2e:e7:3e:e4:0e:b4:
6c:47:a2:ba:33:5e:1d:e2:68:f3:9f:41:1f:0a:97:
17:da:e3:31:16:bb:c4:85:33:a5:23:47:4a:9c:dc:
73:fd:bd:86:9b:ae:41:38:0f:3c:b3:3b:43:43:e5:
37:0b:f9:1f:8a:5e:bd:13:27:6f:c4:a5:be:7e:d6:
12:ac:a5:fe:bd:32:c0:9a:aa:a9:a8:63:da:39:a3:
5e:f2:d2:b2:64:26:95:86:ce:6d:f6:83:d3:26:6f:
6c:5e:a5:9e:6f:e4:13:76:c4:ab:61:e1:6c:9b:e6:
61:6d:67:28:13:7d:4a:ce:02:d9:26:fe:7e:0b:65:
fb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B7:A1:A3:D7:01:56:B5:2B:50:A7:A6:B7:EA:D7:F8:BD:33:0A:2D
X509v3 Authority Key Identifier:
keyid:E2:FF:4C:4E:23:81:06:DC:5F:29:6E:26:A9:CE:CF:3C:4A:43:55:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a5:09:69:c9:67:82:1e:89:d2:10:10:9c:75:07:c6:62:c2:
24:ec:8c:5c:51:8e:c4:30:ad:f0:ef:ad:33:85:20:ac:a8:a3:
ec:c2:69:1f:90:cb:49:e4:52:d0:8a:e7:59:33:68:1c:81:c1:
11:1a:75:2c:75:2e:44:87:fe:e9:2a:78:34:f9:73:8d:2e:5a:
10:c1:21:f5:41:54:4c:53:ee:c8:fc:be:d9:df:50:75:cf:e5:
b8:e7:ad:63:0f:f7:87:70:22:44:eb:89:de:70:de:70:4f:91:
93:28:20:81:f9:71:38:b3:19:8b:b8:53:d2:37:7f:d0:8e:94:
4d:02:62:41:42:98:b3:d9:04:41:b3:1c:19:48:db:12:1d:c6:
c4:b1:a8:d3:e3:14:25:4f:da:80:1a:ee:6e:26:0d:a6:0d:e6:
22:48:2a:de:b7:48:d8:f4:23:91:56:42:dc:d3:c9:e3:27:b3:
50:64:07:40:6d:f7:93:88:ad:b6:2e:84:7d:ff:22:86:13:68:
dd:ab:e5:ed:bb:29:af:42:f1:ea:32:b1:49:63:6a:b1:ad:ff:
de:6d:cb:2e:3a:ed:69:dc:ca:63:44:b4:18:9b:4f:de:9e:6d:
0f:75:a3:32:4a:d2:f6:f7:8c:7c:e4:e8:70:8a:a9:81:10:b9:
6e:c6:9d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:03 2026 by rpki-client