Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
File: 04G3AXBRkLnOnRsYRTU4TnHKMWU.mft (raw, json)
Hash identifier: Cq1spP8X5HHT2mPCrch2bOoteQ0sV5u1rfvrk2NPmqI=
Subject key identifier: 2D:C7:88:6F:09:91:FA:E6:DE:81:4A:D6:04:CF:78:E7:31:BE:D0:DD
Authority key identifier: D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65
Certificate issuer: /CN=d381b701705190b9ce9d1b184535384e71ca3165
Certificate serial: 01A0010127BAA566B0A5A0E371354D081477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
Manifest number: 19FE
Signing time: Fri 14 Aug 2026 16:00:47 +0000
Manifest this update: Fri 14 Aug 2026 16:00:47 +0000
Manifest next update: Sat 15 Aug 2026 16:00:47 +0000
Files and hashes: 1: 04G3AXBRkLnOnRsYRTU4TnHKMWU.crl (hash: lYtC5trnX+EA2EYRN2szF71oZ+uWd6xLrdf5l6Qu4So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:27:ba:a5:66:b0:a5:a0:e3:71:35:4d:08:14:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d381b701705190b9ce9d1b184535384e71ca3165
Validity
Not Before: Aug 14 16:00:47 2026 GMT
Not After : Aug 15 16:00:47 2026 GMT
Subject: CN=2dc7886f0991fae6de814ad604cf78e731bed0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fd:fc:63:cb:97:d3:b4:7c:7a:44:2f:b6:2c:
52:93:38:8b:10:ba:5b:dc:26:66:28:36:8d:e8:44:
4b:93:1a:7e:92:90:f7:2d:39:15:23:f1:cd:5e:9d:
67:bc:8a:60:c3:a4:75:b3:54:b8:9e:13:7d:bb:ed:
54:54:c7:bd:26:45:83:69:08:f4:a3:d6:ff:18:aa:
09:6f:58:51:58:1d:3e:da:fe:f2:93:2a:9d:82:32:
40:8f:07:93:a4:0d:2d:8d:b1:9a:f1:eb:fb:71:49:
71:40:18:48:28:bc:1f:eb:bd:5e:7c:50:44:f8:e5:
52:4b:22:e1:b5:27:7e:a6:4d:c8:d9:87:56:39:a4:
ac:91:5f:4f:f8:e3:6c:08:19:1d:0a:6c:38:71:f3:
7e:25:cc:2e:98:72:6e:17:cd:fa:72:c3:55:3c:76:
c0:2b:55:fe:a6:6c:a2:5a:70:6a:60:ac:74:06:3d:
92:bb:b0:22:3e:b8:e9:40:62:76:94:9d:e3:b3:d5:
10:3f:42:00:7a:df:6e:67:25:ee:48:81:df:84:76:
9b:11:3e:f7:65:bc:c2:e1:ad:68:73:30:2f:6a:88:
f0:f7:d9:c4:85:fb:2f:57:8d:d9:0f:3a:9b:74:14:
00:05:e1:0c:99:e5:f2:b5:65:69:bb:97:01:c6:7d:
c9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C7:88:6F:09:91:FA:E6:DE:81:4A:D6:04:CF:78:E7:31:BE:D0:DD
X509v3 Authority Key Identifier:
keyid:D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8c:e8:70:f6:be:9b:f9:73:b4:99:b9:9b:b5:d9:8c:74:85:
f9:31:0b:95:fc:0a:3b:a3:b2:15:8c:28:62:e7:9a:12:e0:c8:
ea:5c:4f:1a:2f:2d:93:f6:a4:73:22:0c:84:c3:fb:b4:3d:18:
37:35:8b:a2:96:e9:c5:97:98:87:df:4c:f8:a8:cf:58:cd:3d:
e2:77:87:1d:7a:f0:a9:66:59:34:a8:7b:c7:cd:aa:73:f2:65:
60:b3:2b:01:cc:7e:fe:98:88:31:f6:62:0a:fa:1a:d3:3d:59:
27:34:f2:42:1a:cb:8d:a2:8b:39:f8:80:14:d3:5a:2c:3b:8d:
9c:56:e9:52:e2:3d:bb:28:69:9e:f8:42:41:8e:07:14:67:fd:
b7:d5:58:f6:b1:27:2f:d1:14:6a:75:5f:93:40:8a:29:52:ce:
89:13:2d:65:6c:93:c8:05:56:75:ef:3b:f4:c4:a6:b6:ba:dd:
31:77:84:8d:2d:e2:0f:b2:ae:a0:61:48:51:65:70:8d:ee:b9:
c6:e3:a3:11:5a:ff:7b:5c:0d:69:fb:4f:12:aa:16:ed:ea:92:
63:fb:ea:34:5e:20:21:44:b7:e5:90:15:61:68:f3:3d:e0:b6:
14:3e:4b:50:16:ea:13:79:eb:32:eb:75:e5:9e:48:71:92:cb:
67:1a:60:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:29:25 2026 by rpki-client