Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
File: 4K4U6GPBsVoeouSaLrUEhT91tr0.mft (raw, json)
Hash identifier: 6h96Jm42EOLyDPi50zjWcMFFMPuFgV13+i+ZFgXxC+s=
Subject key identifier: 7D:7B:60:8E:F4:0F:D3:AA:48:A2:35:A4:2C:21:6C:65:B9:B9:48:21
Authority key identifier: E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
Certificate issuer: /CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Certificate serial: 019D39AEAB7E82F66CAAA09F647E16F55D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
Manifest number: 0921
Signing time: Sun 29 Mar 2026 13:00:41 +0000
Manifest this update: Sun 29 Mar 2026 13:00:41 +0000
Manifest next update: Mon 30 Mar 2026 13:00:41 +0000
Files and hashes: 1: 4K4U6GPBsVoeouSaLrUEhT91tr0.crl (hash: //GkW+2DQUEdRfhCyh2YudtPnmBaVTEeXr8ETiyQ8D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:ab:7e:82:f6:6c:aa:a0:9f:64:7e:16:f5:5d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Validity
Not Before: Mar 29 13:00:41 2026 GMT
Not After : Mar 30 13:00:41 2026 GMT
Subject: CN=7d7b608ef40fd3aa48a235a42c216c65b9b94821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2b:a9:bd:cf:6c:f7:15:f2:89:61:94:94:d5:
ac:6c:8e:54:bf:a3:20:ec:a6:6f:60:05:c4:0e:a9:
93:5c:18:20:3c:d8:a1:6e:48:a6:a5:d3:1c:41:91:
f1:42:a1:69:b6:e9:3c:45:f4:c5:2b:a2:47:46:45:
8e:c4:a2:5b:f3:db:1a:16:11:a7:88:e5:16:22:21:
ee:66:ad:c7:20:9b:1c:40:1c:d8:92:d8:ea:9d:bf:
39:93:87:e5:65:f1:b4:ba:09:7d:65:93:76:cd:be:
16:1f:82:66:12:ef:fc:a5:06:57:88:86:f4:5c:0d:
d6:13:fe:73:e8:e2:83:f2:97:bc:e5:96:f3:87:b4:
35:77:59:9f:59:c7:6c:99:08:ca:e3:4f:be:36:c2:
a3:db:6f:c4:72:d3:1e:92:ef:44:4a:3a:b8:51:bd:
a6:bc:ad:ba:fc:35:72:ea:27:c5:ed:3c:6e:71:f5:
72:72:c6:07:8a:70:12:66:1c:a9:b5:cb:3f:d8:27:
81:9a:a9:96:57:c5:62:ed:c7:6b:4b:76:2a:69:92:
1d:55:7a:99:2c:f2:05:b9:24:41:fd:0f:b9:8c:2b:
8d:11:08:0f:8d:a9:19:b5:58:4a:34:15:63:b5:1c:
c0:c7:a1:d0:5c:d0:7a:af:17:81:e3:6d:cf:03:6c:
d4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7B:60:8E:F4:0F:D3:AA:48:A2:35:A4:2C:21:6C:65:B9:B9:48:21
X509v3 Authority Key Identifier:
keyid:E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:19:5d:6b:2b:08:9b:b1:66:c7:1d:60:f8:ed:ff:b1:74:b2:
27:4a:2a:ed:13:66:e4:f3:5e:c5:95:ba:e1:57:63:4a:88:ca:
7d:62:31:aa:da:a1:b9:f4:6a:12:fe:84:a9:e1:84:27:2a:5d:
28:d7:75:9a:e5:7d:35:1b:c9:5b:a1:ab:51:da:d9:db:5d:92:
fc:9c:3a:69:5a:31:f0:bf:ba:03:13:0f:7b:1c:98:d3:1e:f1:
e8:13:68:e1:1e:35:ec:d8:5e:ca:06:cb:54:1d:3d:18:a5:24:
19:aa:7c:f2:04:3b:76:49:98:55:f3:58:78:40:76:e1:f0:6b:
ba:fc:1e:79:d4:42:c5:ce:e3:07:63:79:a5:8e:48:fb:c3:04:
de:46:06:2e:fd:4d:d8:30:62:ff:76:51:48:ac:5a:21:67:20:
e0:4b:3f:81:56:2f:ae:b6:46:ec:a1:91:45:94:9b:c9:3e:50:
84:ed:2c:4e:fb:d0:53:eb:e4:6d:15:62:cc:ab:54:ea:a0:be:
9d:b9:f9:69:0f:56:74:a2:2f:d8:db:7a:45:88:a4:05:08:92:
3d:f5:12:fe:77:3c:16:48:14:53:51:03:15:57:fe:22:84:ad:
cc:dc:8e:fc:8e:ff:18:f3:b0:2e:66:b6:19:17:07:a6:e4:06:
34:3e:61:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:19 2026 by rpki-client