Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
File: 4dl0w71P6k6f61Ep2-0gPAdcjWg.mft (raw, json)
Hash identifier: n+rAsgzSxxrKeQlKi8Q7r7QZU7AC55cAmSSwiXfBhGc=
Subject key identifier: 5B:A5:F8:C5:46:E1:A2:D3:8E:5D:46:7A:40:24:94:D1:15:A1:7B:3B
Authority key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
Certificate issuer: /CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Certificate serial: 01A13E265AD98F7037C9F81DE3B79545B01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
Manifest number: 0D70
Signing time: Thu 15 Oct 2026 06:01:03 +0000
Manifest this update: Thu 15 Oct 2026 06:01:03 +0000
Manifest next update: Fri 16 Oct 2026 06:01:03 +0000
Files and hashes: 1: 4dl0w71P6k6f61Ep2-0gPAdcjWg.crl (hash: OtBYa1vY//Jh/7brejMOlGfHV8DGbW06iTEoKshAtdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:5a:d9:8f:70:37:c9:f8:1d:e3:b7:95:45:b0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Validity
Not Before: Oct 15 06:01:03 2026 GMT
Not After : Oct 16 06:01:03 2026 GMT
Subject: CN=5ba5f8c546e1a2d38e5d467a402494d115a17b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:15:58:bd:d5:61:9c:ea:84:cf:9a:6a:e8:
e8:53:80:4e:43:94:c4:b7:9d:25:cc:20:0b:05:00:
b0:23:5c:9e:cc:ab:89:48:85:70:25:b8:b9:b9:8f:
82:8b:38:2b:25:28:73:eb:9e:d2:d1:8b:80:39:be:
02:92:e8:92:09:39:20:b1:65:f3:f8:c9:f0:92:64:
0f:d3:56:22:fc:2e:58:6a:5f:67:c4:b7:58:98:4d:
38:15:9d:fa:64:68:0c:1e:2b:43:55:1b:77:85:be:
3e:b6:5e:b4:b2:88:d4:cb:d8:77:4b:7e:35:90:5e:
07:b9:27:46:fb:e1:bb:37:b0:9c:dc:33:0a:d9:1e:
4b:4f:60:af:0b:41:34:b5:9f:0b:c8:19:44:de:ca:
fe:be:ab:a1:5b:ab:9c:05:28:b9:62:12:68:f1:3f:
7f:26:46:e2:94:5b:e6:a0:95:7f:5c:d3:2e:e7:ab:
f5:b1:ec:c7:13:53:b2:5d:d8:01:70:8c:80:67:01:
6b:26:61:2c:be:78:46:d6:d2:14:42:69:40:0e:9d:
88:84:da:a6:24:a0:e7:41:6f:c4:65:78:15:96:57:
79:c1:a1:81:88:be:6b:4e:ad:d4:ef:94:77:85:5c:
44:ce:70:b4:21:41:68:92:19:07:d9:6f:44:ba:cd:
11:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A5:F8:C5:46:E1:A2:D3:8E:5D:46:7A:40:24:94:D1:15:A1:7B:3B
X509v3 Authority Key Identifier:
keyid:E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:95:11:15:ff:b7:b3:5f:c4:b0:3d:95:65:a6:d5:8f:2b:55:
26:9e:e4:df:40:91:a6:39:9d:5e:d7:e5:49:54:b8:59:64:91:
ce:55:46:b0:8b:30:3e:6d:6c:96:49:b1:47:a3:aa:61:32:6a:
55:5f:ca:63:78:5a:83:0f:33:e2:99:b3:17:4c:34:c2:9d:69:
ca:3f:ce:6e:fc:e4:43:b9:e9:01:e8:fc:4f:45:e4:6b:73:5b:
13:ba:ba:98:63:80:9f:a9:22:27:e0:6d:68:d5:d1:4e:86:09:
ff:1c:be:41:cb:2f:fb:a3:ab:56:95:91:ed:62:c7:8d:1d:34:
81:af:80:78:04:74:46:e4:2a:9e:d5:12:b3:ab:3b:b6:17:50:
b7:a7:40:82:b2:55:3a:f8:f4:5b:51:f6:34:33:9f:cd:aa:21:
11:a5:51:ac:f0:80:2e:d9:df:80:a8:80:38:3e:8c:d8:00:82:
fb:31:5b:8a:88:0a:f6:1f:45:d7:68:b0:e6:0c:a9:3d:cf:ff:
4a:40:5e:81:97:f2:83:6d:17:2b:af:9a:02:7b:fa:00:db:18:
90:20:98:f9:07:62:7a:ca:be:4c:36:d7:60:a1:1c:85:26:aa:
e3:bd:25:1c:4e:6b:89:91:3c:c1:57:de:fc:2a:2c:04:c9:cb:
88:34:a9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:28 2026 by rpki-client