
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.mft
File: 4xw9EfQ8dCp9AIVC3079O7ANLXc.mft (raw, json)
Hash identifier: Px07UNrcEOzBzvXkgUs7s8tZgOkYFMHqzJOeGfjw+/Y=
Subject key identifier: A6:F9:B6:8F:FC:86:E5:7E:6B:0E:87:6C:51:CC:57:C6:31:92:00:10
Authority key identifier: E3:1C:3D:11:F4:3C:74:2A:7D:00:85:42:DF:4E:FD:3B:B0:0D:2D:77
Certificate issuer: /CN=e31c3d11f43c742a7d008542df4efd3bb00d2d77
Certificate serial: 01A0412A663E35F1B16233FA40BBA5D0754B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xw9EfQ8dCp9AIVC3079O7ANLXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.mft
Manifest number: 0311
Signing time: Thu 27 Aug 2026 03:01:32 +0000
Manifest this update: Thu 27 Aug 2026 03:01:32 +0000
Manifest next update: Fri 28 Aug 2026 03:01:32 +0000
Files and hashes: 1: 4xw9EfQ8dCp9AIVC3079O7ANLXc.crl (hash: 9rcAwZpoWjkf0CPJOdHGl2U5Qi8VnoSlP00seNBCnuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xw9EfQ8dCp9AIVC3079O7ANLXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:66:3e:35:f1:b1:62:33:fa:40:bb:a5:d0:75:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31c3d11f43c742a7d008542df4efd3bb00d2d77
Validity
Not Before: Aug 27 03:01:32 2026 GMT
Not After : Aug 28 03:01:32 2026 GMT
Subject: CN=a6f9b68ffc86e57e6b0e876c51cc57c631920010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:b1:3f:ed:f8:5a:4d:e8:14:0f:c9:4c:66:
bd:38:fe:fa:71:72:af:e2:7d:12:05:63:99:14:4f:
d4:b6:ca:63:81:7e:03:d8:6f:c5:62:bf:6b:d6:4d:
de:d9:8b:29:08:2a:79:00:5c:87:62:28:45:d0:f8:
fb:17:06:79:9e:e9:dd:e0:1d:16:50:ed:f4:dc:9b:
ea:cd:cd:e6:99:31:99:4f:59:8a:54:33:43:c4:d2:
e8:e9:fd:68:0f:79:cf:b4:92:c0:e2:a0:bd:ed:22:
be:f1:1c:12:6a:df:4c:1c:f7:7d:b6:20:81:f8:44:
2f:ce:dd:f7:06:40:10:4e:74:57:ce:40:22:b9:0f:
c4:23:81:03:68:a7:2e:4d:13:02:1a:17:95:88:fc:
63:c4:a1:cc:0a:2f:8d:90:c3:c8:0c:1c:ce:40:47:
1b:24:20:31:09:f9:1b:e6:88:ad:e5:1b:fd:c5:6f:
70:cd:bb:a8:56:3e:5c:e3:a4:1a:05:12:6b:fb:f2:
19:12:da:0f:04:d4:4a:5b:40:2d:6b:cc:8a:2a:a2:
c1:cb:ea:90:22:53:a7:5d:3b:77:4d:05:17:dc:be:
a5:ef:2b:98:3a:a2:5a:a5:ba:8b:65:38:44:8d:67:
3c:b2:15:bd:4d:ae:0e:cb:a9:fb:d1:e9:6c:97:e6:
7a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F9:B6:8F:FC:86:E5:7E:6B:0E:87:6C:51:CC:57:C6:31:92:00:10
X509v3 Authority Key Identifier:
keyid:E3:1C:3D:11:F4:3C:74:2A:7D:00:85:42:DF:4E:FD:3B:B0:0D:2D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xw9EfQ8dCp9AIVC3079O7ANLXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:34:47:52:21:09:59:d8:4c:8c:cc:41:11:0d:c1:a0:c8:42:
04:4e:f7:63:aa:81:23:66:46:b5:57:ca:df:d3:a9:54:ce:1f:
6f:09:b5:20:d5:0c:44:2d:54:bd:8b:40:f0:51:b9:34:69:2f:
3e:f1:ee:06:91:32:0f:e0:10:33:1d:55:65:4d:5c:e5:37:1a:
f4:46:e3:fc:e4:1a:21:1b:7a:d6:ef:6b:bb:18:e5:b6:69:56:
d6:90:1e:cd:32:d3:f4:cd:0c:ce:d7:a2:b3:ef:e6:bf:43:44:
71:12:fa:a3:d8:07:f9:cf:2a:28:a2:72:45:10:43:de:f0:f9:
4d:73:03:55:5a:94:03:94:4c:a5:34:bc:c1:ae:9f:c5:98:94:
7a:b2:aa:11:35:22:ff:a5:6a:b2:cf:d0:34:7c:50:55:4e:11:
f9:d8:ab:18:ee:7a:3f:9e:63:0e:a6:54:42:65:81:f1:b5:ab:
88:2b:59:3b:a4:af:63:9b:02:0a:c2:e3:fa:3c:14:9b:6a:13:
bb:8d:d7:7b:95:4d:92:72:65:2e:46:03:05:57:32:39:00:0a:
5d:0a:f3:4d:81:58:91:38:c6:d2:98:4f:96:40:49:25:57:26:
c9:c1:88:23:be:df:0d:4a:74:d8:1e:7c:4e:4a:ef:bf:4d:a5:
95:a6:4a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:20:53 2026 by rpki-client