Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
File: 4dl0w71P6k6f61Ep2-0gPAdcjWg.mft (raw, json)
Hash identifier: xNxTMaY7Mc4oXtLRR//NIJcP6FqiUjGgF08ddrSBlts=
Subject key identifier: 3B:2B:3F:97:FA:50:67:8A:B3:2C:84:B6:B5:AE:3D:CE:C1:ED:D1:4C
Authority key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
Certificate issuer: /CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Certificate serial: 01A001700BE62E7DF2E63F3111BD40DC8875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
Manifest number: 0CCC
Signing time: Fri 14 Aug 2026 18:01:55 +0000
Manifest this update: Fri 14 Aug 2026 18:01:55 +0000
Manifest next update: Sat 15 Aug 2026 18:01:55 +0000
Files and hashes: 1: 4dl0w71P6k6f61Ep2-0gPAdcjWg.crl (hash: PABpb+XtVvAscsnOKceEYLmFlZVbbB58CKj98yJOV3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:70:0b:e6:2e:7d:f2:e6:3f:31:11:bd:40:dc:88:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Validity
Not Before: Aug 14 18:01:55 2026 GMT
Not After : Aug 15 18:01:55 2026 GMT
Subject: CN=3b2b3f97fa50678ab32c84b6b5ae3dcec1edd14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:56:e4:b7:ab:cf:b4:37:b4:0c:da:66:4b:
81:29:92:ea:74:5b:f8:e5:80:b1:ba:70:2f:5e:83:
04:78:94:14:97:53:a7:c6:06:4e:ca:a7:47:d3:1c:
36:81:22:ae:a9:58:e0:3d:13:cb:76:1c:b1:ae:7f:
18:55:e5:77:01:40:ff:d9:8f:bd:79:c7:d5:48:9e:
e0:f9:6a:0c:68:c2:b9:bb:69:e2:b5:3c:94:1a:48:
f2:e8:39:fc:ad:ec:ea:ab:3f:e3:d1:58:8a:0e:52:
a2:48:8c:08:f1:53:92:f9:0e:00:da:11:4e:5a:7f:
79:7a:61:e6:bc:19:7c:9b:09:58:27:6c:0d:3e:0a:
39:e3:e2:1b:f4:7f:04:91:33:33:92:66:a5:ec:2d:
85:90:4d:c5:b7:a0:f1:0b:3d:1b:b2:ae:88:bb:57:
00:c9:c5:ae:ab:c8:48:6c:a5:e1:4f:aa:82:2a:90:
88:be:d4:d9:e7:f0:a4:0f:b3:0f:2a:b8:99:f3:13:
1c:37:3e:94:13:d5:0d:ff:5e:5c:d1:8e:45:76:74:
97:76:a2:b2:4c:86:95:af:52:8d:d9:77:f9:e7:90:
93:d3:26:da:b8:0f:1a:65:76:3b:2c:85:57:1c:36:
f5:1a:bb:48:73:62:a7:45:69:6e:79:c4:bd:15:c8:
06:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2B:3F:97:FA:50:67:8A:B3:2C:84:B6:B5:AE:3D:CE:C1:ED:D1:4C
X509v3 Authority Key Identifier:
keyid:E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:89:b1:bd:a6:51:77:ba:0b:43:b2:50:cc:d7:1b:3a:8c:d1:
77:b7:c7:e1:7c:3b:62:01:92:b7:52:8d:e4:37:79:65:1b:82:
17:c9:be:c6:b6:16:d4:be:5f:2e:a1:1a:3a:ae:c7:50:76:95:
25:38:d3:50:6a:52:93:d4:7d:a0:ab:4e:34:ec:7c:41:cd:1f:
ad:c9:01:0d:49:b4:92:82:c7:9d:46:d7:94:8a:b7:d6:02:7e:
91:f1:dd:66:b5:c4:2d:7f:5e:db:71:64:39:51:45:02:b4:14:
cb:b3:29:bd:78:73:18:d0:db:75:16:c8:53:0c:6d:ae:be:0e:
2d:44:0c:20:d1:bf:16:88:9f:8f:d4:e2:ff:8f:32:e3:00:12:
e1:94:87:14:bf:33:0b:64:62:91:87:52:41:9c:2e:82:cd:65:
af:1f:2f:e6:a4:84:f9:6e:48:64:2a:a3:19:c4:fa:e4:80:86:
a2:55:ce:24:ac:00:7f:cc:4b:2e:8e:53:3d:12:62:bc:5c:0a:
c7:a8:79:70:d9:d5:f1:2c:d1:4c:8d:eb:d3:53:a1:b6:10:c0:
50:7d:93:f9:fe:03:85:a4:80:dc:77:99:85:9b:93:26:83:4c:
69:3d:c1:49:a2:87:76:7a:96:43:34:7a:4d:5b:69:c2:38:04:
79:ea:de:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:20 2026 by rpki-client