Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
File: 04G3AXBRkLnOnRsYRTU4TnHKMWU.mft (raw, json)
Hash identifier: YSm2Qf8K1+cDfkF2FIYC1fTfWtJfgQuScIS23qXrx3I=
Subject key identifier: 19:EC:71:BC:4A:EB:6D:D0:0E:B9:E1:B6:C0:BE:E5:59:F9:A8:B5:02
Authority key identifier: D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65
Certificate issuer: /CN=d381b701705190b9ce9d1b184535384e71ca3165
Certificate serial: 01A14760EEBF342EEE9FEA7D285FD620E679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
Manifest number: 1AA7
Signing time: Sat 17 Oct 2026 01:01:37 +0000
Manifest this update: Sat 17 Oct 2026 01:01:37 +0000
Manifest next update: Sun 18 Oct 2026 01:01:37 +0000
Files and hashes: 1: 04G3AXBRkLnOnRsYRTU4TnHKMWU.crl (hash: hcQiPfNNXFVNvKydVeIeEvFGTk+wqqOXV66pyZ4xcLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:60:ee:bf:34:2e:ee:9f:ea:7d:28:5f:d6:20:e6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d381b701705190b9ce9d1b184535384e71ca3165
Validity
Not Before: Oct 17 01:01:37 2026 GMT
Not After : Oct 18 01:01:37 2026 GMT
Subject: CN=19ec71bc4aeb6dd00eb9e1b6c0bee559f9a8b502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a5:b6:99:4d:d1:1d:53:88:45:97:61:c9:de:
06:f2:cb:af:74:15:55:94:6a:0d:31:4a:4b:d5:78:
38:b2:bc:ec:13:7e:ae:06:3f:c1:e0:5c:21:87:00:
7c:8e:11:02:16:c4:a1:c0:91:ff:0b:c8:2b:32:54:
5a:95:b8:18:b2:2f:f4:33:72:bd:17:89:93:34:8b:
4e:6d:e7:8f:12:47:84:0b:3d:00:cb:e4:eb:09:af:
ed:00:bf:b3:81:52:56:82:0b:f9:66:cc:0e:30:87:
14:73:c8:df:38:fa:65:e5:28:a7:db:8c:bc:b6:93:
91:07:07:30:54:86:09:dc:2b:62:83:2c:0a:40:a4:
52:66:62:09:dd:51:95:54:a2:da:02:c8:15:10:54:
cd:00:86:a8:47:6e:5a:39:aa:a5:be:b3:01:c2:f5:
71:ad:ae:e5:0b:35:b2:68:99:b5:ee:3c:00:12:9b:
1b:5a:78:7b:b4:f6:6b:62:e1:96:02:c8:cb:af:f6:
69:ad:4f:e9:91:f4:e0:54:70:09:47:6d:50:9b:13:
27:cb:59:a8:eb:5e:c8:08:5a:db:f8:15:28:31:02:
cb:2a:77:28:71:1e:a5:0b:ad:7e:29:7d:be:b3:21:
83:85:57:45:94:b2:f3:3a:cf:ca:d8:dc:b6:d9:27:
fa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EC:71:BC:4A:EB:6D:D0:0E:B9:E1:B6:C0:BE:E5:59:F9:A8:B5:02
X509v3 Authority Key Identifier:
keyid:D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8d:63:a0:de:4e:45:61:c9:dd:19:e4:57:5c:bd:68:29:8e:
75:82:89:dd:ca:a5:b7:3a:0a:a3:45:af:54:a3:78:b7:3f:6f:
cf:2c:27:e0:69:c3:1c:60:b6:53:b5:0c:dd:62:89:03:32:c6:
09:c6:83:2f:b0:48:c2:03:11:1f:f0:e6:fb:f6:49:34:63:f2:
15:92:b1:68:57:22:a3:2b:40:f2:d3:71:4e:fb:a8:bb:21:87:
81:7b:c6:0f:58:94:71:7c:e4:ff:d4:6d:5f:c8:56:31:31:6e:
6f:06:fe:0e:9e:cd:b8:09:b2:a2:e8:1d:36:52:22:47:74:cb:
41:dc:f1:3b:2c:7f:08:d8:c7:71:1b:75:88:fd:5e:80:37:c9:
d8:fe:59:9b:a9:1d:08:b8:97:2a:25:19:09:1a:11:1a:4c:0e:
ba:0b:fa:d8:2a:63:7f:fd:d3:68:02:d8:8b:a5:4c:d9:71:d0:
96:c6:54:6c:a3:8b:52:c4:92:0c:31:48:cb:2d:af:95:31:29:
6c:fe:57:70:3d:14:18:8f:99:8c:c3:ab:02:54:cc:d0:73:19:
69:c2:49:e5:21:b1:b7:b6:66:f3:68:72:ba:23:f2:1f:1c:47:
31:75:01:69:d6:9f:7f:4b:d3:51:23:f8:df:ed:f7:bb:e6:13:
3a:c6:73:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:04:46 2026 by rpki-client