Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/beafc6-4c34-472b-babc-3823ba3bfe95/1/4XT0OQq8HaHnnptg9Tk5w2SN3qo.mft
File: 4XT0OQq8HaHnnptg9Tk5w2SN3qo.mft (raw, json)
Hash identifier: s5A6ZL1dl9OVUjRK0+zjDxWwvUE1dgyb3TqnafvxKQg=
Subject key identifier: 09:BF:6C:45:3A:F0:44:C2:DA:AA:2E:24:5B:60:CE:BD:AE:2F:E5:43
Authority key identifier: E1:74:F4:39:0A:BC:1D:A1:E7:9E:9B:60:F5:39:39:C3:64:8D:DE:AA
Certificate issuer: /CN=e174f4390abc1da1e79e9b60f53939c3648ddeaa
Certificate serial: 01A0412988B648E71D3BBD2EFD0AF6EEDE53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XT0OQq8HaHnnptg9Tk5w2SN3qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/beafc6-4c34-472b-babc-3823ba3bfe95/1/4XT0OQq8HaHnnptg9Tk5w2SN3qo.mft
Manifest number: B0
Signing time: Thu 27 Aug 2026 03:00:35 +0000
Manifest this update: Thu 27 Aug 2026 03:00:35 +0000
Manifest next update: Fri 28 Aug 2026 03:00:35 +0000
Files and hashes: 1: 4XT0OQq8HaHnnptg9Tk5w2SN3qo.crl (hash: uI/Act+1jaKn6sQ2EVB8tZu9rDZz3ydJ+EHjRuvb3yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/beafc6-4c34-472b-babc-3823ba3bfe95/1/4XT0OQq8HaHnnptg9Tk5w2SN3qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/beafc6-4c34-472b-babc-3823ba3bfe95/1/4XT0OQq8HaHnnptg9Tk5w2SN3qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4XT0OQq8HaHnnptg9Tk5w2SN3qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:29:88:b6:48:e7:1d:3b:bd:2e:fd:0a:f6:ee:de:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e174f4390abc1da1e79e9b60f53939c3648ddeaa
Validity
Not Before: Aug 27 03:00:35 2026 GMT
Not After : Aug 28 03:00:35 2026 GMT
Subject: CN=09bf6c453af044c2daaa2e245b60cebdae2fe543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:59:cf:4d:d0:f2:b7:d8:d4:d0:88:58:5a:d9:
c6:29:a3:96:d0:e0:fa:b8:c0:81:92:7c:2a:b2:a6:
93:29:5d:d1:35:97:cd:5e:ad:b4:44:35:6e:dc:0a:
d3:09:b4:0c:f0:67:c8:bf:8c:d7:f9:bb:16:82:b8:
00:89:7a:b8:64:9b:c3:8f:77:d9:1c:33:66:fc:ac:
1b:c2:4c:91:aa:2c:88:bc:09:79:26:23:d2:d2:54:
b6:e7:51:44:c9:32:e5:03:fa:b4:e9:57:ae:b4:03:
d6:9a:5d:6a:b1:3a:e3:b6:7a:a3:d9:16:33:45:36:
b8:74:2b:bb:34:42:2e:dd:88:be:ac:9b:fd:7d:14:
17:a9:d7:12:e8:b5:c7:a0:54:e1:4c:43:aa:4d:0e:
3f:a8:86:4d:2d:85:36:7e:94:d0:2d:f6:68:85:d1:
f4:c0:50:8c:6d:1e:b0:af:45:23:62:ca:06:0c:4c:
22:b3:a7:7e:90:71:85:01:f7:40:58:e1:17:be:9f:
96:5c:a7:e8:42:7b:93:7a:21:25:e8:df:89:ac:21:
3b:b7:5f:a7:d8:78:95:a9:1f:f4:85:52:8b:7a:10:
7d:6c:a9:7f:aa:71:ab:0b:44:50:50:f6:43:60:a1:
cb:94:cd:b7:fa:2d:01:dc:f5:a1:0b:06:e5:c2:67:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BF:6C:45:3A:F0:44:C2:DA:AA:2E:24:5B:60:CE:BD:AE:2F:E5:43
X509v3 Authority Key Identifier:
keyid:E1:74:F4:39:0A:BC:1D:A1:E7:9E:9B:60:F5:39:39:C3:64:8D:DE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XT0OQq8HaHnnptg9Tk5w2SN3qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/beafc6-4c34-472b-babc-3823ba3bfe95/1/4XT0OQq8HaHnnptg9Tk5w2SN3qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/beafc6-4c34-472b-babc-3823ba3bfe95/1/4XT0OQq8HaHnnptg9Tk5w2SN3qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ba:d8:cb:05:5a:4e:a9:00:ee:fd:e5:86:ae:12:75:50:d5:
88:dd:c7:7e:7e:67:ea:73:1e:75:5e:35:0f:27:0d:eb:13:40:
8c:ec:57:5f:43:dc:3b:53:e6:a8:b2:f2:f3:0a:85:84:56:71:
93:e4:33:d6:2a:7a:d9:6d:34:cd:a5:44:0f:16:99:f8:ec:88:
ae:c3:70:08:f1:9c:ca:88:72:ab:79:e6:e2:fe:38:31:16:69:
40:bd:05:bc:c7:89:ed:36:b9:d3:e3:e6:a2:66:b6:dc:f2:e2:
31:f3:cb:1d:51:42:bf:34:14:74:a9:81:da:2b:fc:2b:21:c3:
5c:d1:cd:ba:04:59:9d:36:27:6e:d0:c1:36:3f:56:08:1e:3e:
c7:ff:72:f9:8e:f9:83:4b:67:52:90:4a:68:9f:92:d3:fa:79:
ab:64:a7:2f:c3:47:5f:00:99:11:87:dd:17:f8:06:91:7b:00:
73:87:d5:9e:92:8f:3b:ee:ed:53:93:9b:47:d0:8c:cc:15:ad:
25:1e:a3:ca:1e:9b:f9:76:32:8d:ef:d3:02:91:17:44:e9:86:
8e:c7:23:6d:1d:f3:c2:23:d8:14:fc:cb:f3:c9:c9:98:8f:e2:
46:96:69:ee:29:74:b3:71:2e:e0:75:c2:df:42:18:38:bb:6f:
ca:73:38:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:47:37 2026 by rpki-client