
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
File: 4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft (raw, json)
Hash identifier: 3F8Z+0ieTAIBzOaU3OkkPLZU+U8VMSXwzlise6TdEx0=
Subject key identifier: 0C:0F:9E:B3:3E:F4:32:DF:6F:B4:E9:56:C5:F5:63:4C:77:4F:B0:3A
Authority key identifier: E0:C4:3C:A4:C4:9C:F6:52:D6:0C:CD:F3:66:E6:01:15:0D:0F:00:B9
Certificate issuer: /CN=e0c43ca4c49cf652d60ccdf366e601150d0f00b9
Certificate serial: 01A13D4AA01CE38781FB3165ED42D6D1BAAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
Manifest number: 097D
Signing time: Thu 15 Oct 2026 02:01:03 +0000
Manifest this update: Thu 15 Oct 2026 02:01:03 +0000
Manifest next update: Fri 16 Oct 2026 02:01:03 +0000
Files and hashes: 1: 4MQ8pMSc9lLWDM3zZuYBFQ0PALk.crl (hash: rgozvssPqGgd38wdvV4G5jYX1eYzZx3SfczlLIGBWOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:a0:1c:e3:87:81:fb:31:65:ed:42:d6:d1:ba:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c43ca4c49cf652d60ccdf366e601150d0f00b9
Validity
Not Before: Oct 15 02:01:03 2026 GMT
Not After : Oct 16 02:01:03 2026 GMT
Subject: CN=0c0f9eb33ef432df6fb4e956c5f5634c774fb03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:40:6d:b1:27:81:8f:e1:a0:9c:e3:59:16:dd:
25:5c:0e:d3:fe:52:61:84:47:b9:d3:7f:a5:75:8f:
72:a2:0b:e3:e3:a9:24:a9:8b:21:c6:f2:fd:cc:ea:
80:b9:8c:3f:cc:f7:b2:1c:26:b7:2d:93:9b:96:1c:
99:26:76:7c:a0:20:d2:16:e2:68:dd:b4:27:e7:4b:
83:46:0d:6e:23:9d:45:6a:f0:68:81:fa:b0:bf:65:
86:3d:68:6e:97:66:e1:f2:3f:82:46:66:6e:5e:98:
a5:15:db:cc:8e:4f:c9:4e:06:8c:72:11:1f:63:fd:
22:a0:d0:9f:98:26:fd:87:01:fe:01:b6:64:7d:f4:
c7:b8:7e:ac:7d:52:1e:26:e5:2a:d7:7c:b4:41:93:
97:23:b3:e1:57:69:2b:9a:08:28:5d:c1:bf:6c:1c:
c8:6b:da:9c:ef:ce:18:3b:e0:0f:c4:74:1d:39:92:
48:ad:c4:5f:d2:ae:03:c5:22:5b:11:8d:1f:82:45:
ce:8a:a4:ac:6d:3e:55:c8:92:62:f2:70:3a:05:2f:
aa:6f:5a:29:98:48:49:40:b6:ab:f3:80:88:3d:03:
4c:88:c0:3d:64:b4:34:8e:38:0f:7d:a9:b7:92:21:
ec:8b:c7:48:65:7a:db:ba:ac:a2:2f:b5:37:7a:56:
1b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0F:9E:B3:3E:F4:32:DF:6F:B4:E9:56:C5:F5:63:4C:77:4F:B0:3A
X509v3 Authority Key Identifier:
keyid:E0:C4:3C:A4:C4:9C:F6:52:D6:0C:CD:F3:66:E6:01:15:0D:0F:00:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4f:81:17:23:18:87:45:55:f2:65:1f:4b:67:30:05:fe:0f:
41:84:73:51:0e:38:64:53:39:1d:37:3c:7a:a5:e0:3b:2f:32:
11:5d:bb:24:bf:a2:3b:87:e2:fe:15:27:2c:6a:5e:38:52:01:
c6:4b:26:63:ba:2a:6c:37:a7:1a:de:c3:6e:d7:11:5c:3a:8a:
47:82:46:18:29:67:c8:8a:f0:49:32:39:ad:cb:5d:ab:09:aa:
3f:8f:45:88:87:09:cc:49:c3:1f:1d:c4:88:fa:aa:22:0b:2a:
a7:30:46:83:a8:f3:b2:17:06:98:68:28:d1:2c:e1:cc:3e:f3:
f3:eb:34:ac:ad:67:44:9d:5f:ed:22:13:03:98:e0:86:a6:44:
04:fe:df:ed:53:0c:53:bc:7c:ea:12:c0:79:6c:9c:08:55:e6:
d7:4b:dd:8e:46:de:4a:b5:80:fa:c6:26:74:0d:26:6c:34:50:
f0:f8:66:4b:24:84:1d:e6:cc:32:9d:11:83:1b:0c:cf:5e:1c:
80:a9:0b:77:39:a3:f3:2f:59:1c:4d:a5:24:6d:7e:dc:99:6e:
ee:38:6a:10:d0:d9:cb:84:82:7a:a5:5d:48:08:ee:0d:1d:74:
ed:f3:80:1a:f1:0e:ad:30:aa:0d:e4:42:95:a0:dc:45:ed:fe:
db:d5:0f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:01 2026 by rpki-client