Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
File: 4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft (raw, json)
Hash identifier: 5DcNb80E2W8G5hyIuFA08noWnMlIyC8tqLEMthL3/pU=
Subject key identifier: ED:0E:61:63:EA:26:58:1D:E3:06:FF:FC:82:D4:23:26:20:4B:70:42
Authority key identifier: E0:C4:3C:A4:C4:9C:F6:52:D6:0C:CD:F3:66:E6:01:15:0D:0F:00:B9
Certificate issuer: /CN=e0c43ca4c49cf652d60ccdf366e601150d0f00b9
Certificate serial: 01A000932F9555C7DFB2318555B10C1D1D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
Manifest number: 08D9
Signing time: Fri 14 Aug 2026 14:00:40 +0000
Manifest this update: Fri 14 Aug 2026 14:00:40 +0000
Manifest next update: Sat 15 Aug 2026 14:00:40 +0000
Files and hashes: 1: 4MQ8pMSc9lLWDM3zZuYBFQ0PALk.crl (hash: ezf9hWkqZWjlACWIgr7TnIlseAL9b3+XZqmvIdrMWVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:2f:95:55:c7:df:b2:31:85:55:b1:0c:1d:1d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c43ca4c49cf652d60ccdf366e601150d0f00b9
Validity
Not Before: Aug 14 14:00:40 2026 GMT
Not After : Aug 15 14:00:40 2026 GMT
Subject: CN=ed0e6163ea26581de306fffc82d42326204b7042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:d3:5a:8a:78:31:fe:f5:82:1a:71:be:fa:
96:a6:1e:aa:e4:48:5b:c1:08:25:a7:ea:3c:e0:b9:
d7:f2:c4:da:d8:3c:dc:68:66:7b:6f:b7:78:b9:86:
69:be:09:d5:ca:5c:27:d0:9d:d8:4f:2c:3d:c3:a3:
c7:8d:f2:9c:f7:c1:c7:4a:e8:63:8b:69:bc:3f:47:
e3:e4:0b:6a:7d:f1:b5:cd:0a:c3:2c:fd:90:7f:c9:
6e:2f:20:f7:9e:2f:af:c2:d5:3f:06:a4:0f:3f:ed:
0a:87:df:0f:c8:2d:16:2e:d3:3b:08:d4:99:85:2c:
32:8c:90:d9:c1:a4:fc:75:c0:81:8a:d8:5f:67:10:
49:68:ce:61:aa:00:b9:b9:19:c6:f1:84:ee:99:9e:
36:e5:6d:42:67:6c:eb:ab:67:ea:3f:0b:4a:bc:e4:
8c:e2:4a:31:a1:56:d0:27:46:89:ab:5a:43:d7:8b:
c2:16:1a:6f:29:ca:f9:af:03:01:6d:46:69:53:e0:
42:ec:1c:e1:63:5a:ab:6a:4b:7b:7d:45:9c:79:7c:
98:8e:83:cb:1f:13:23:5f:50:ff:1a:ff:34:c3:ff:
e7:e2:92:ce:04:bf:22:b9:b5:c3:12:3d:85:8f:07:
6f:c1:88:bd:17:db:7d:c1:c9:4c:d0:d6:7e:b8:25:
b5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0E:61:63:EA:26:58:1D:E3:06:FF:FC:82:D4:23:26:20:4B:70:42
X509v3 Authority Key Identifier:
keyid:E0:C4:3C:A4:C4:9C:F6:52:D6:0C:CD:F3:66:E6:01:15:0D:0F:00:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1b:57:62:8a:ed:8d:4c:6c:28:81:85:d6:96:07:90:ee:f0:
7b:a7:ce:39:e8:ce:65:fa:2d:db:d0:fa:46:a1:ac:a6:a5:f3:
73:de:8c:4d:01:a4:94:79:8c:f5:6f:d0:9c:e3:49:60:80:19:
a2:ff:dc:de:36:3e:3f:01:9c:5d:27:df:14:1d:bf:57:d6:0b:
63:27:ae:32:b3:0b:58:a1:f2:31:26:fa:43:06:28:19:91:fa:
62:ef:12:b6:74:52:76:e1:3d:50:c3:f0:62:f9:ad:19:4d:7f:
4d:0a:47:77:10:fb:49:fe:9d:05:cb:7a:92:2c:09:0b:78:cb:
5d:7f:1b:72:a3:81:d8:f7:c0:52:2f:20:9f:00:79:12:3d:8e:
9d:ee:e9:22:bc:4b:1a:f4:c1:42:1a:17:af:8a:b7:ba:4c:41:
7a:98:ad:bd:fe:85:58:42:00:ac:22:23:28:52:d5:80:92:40:
19:8c:75:23:aa:c5:33:85:da:cc:6a:e6:7e:84:5a:44:9b:0e:
3a:8a:cb:83:7b:ff:f5:84:68:98:5b:8d:60:b1:aa:92:41:10:
57:49:67:06:9f:d0:f2:b6:0f:01:33:02:da:c4:7c:85:59:71:
34:a3:7c:a2:c3:fe:63:02:1b:69:1f:d8:14:7f:d2:cd:4b:89:
a4:23:95:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:23 2026 by rpki-client