Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
File: 4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json)
Hash identifier: k1cWLEMR8YRn8oSeABS0V9J+7qKXhL0ZUIdg5byRYNk=
Subject key identifier: 3B:F3:6E:92:AA:07:F4:4D:BE:28:64:0C:E2:94:F3:C7:15:3E:38:48
Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
Certificate issuer: /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Certificate serial: 01A13F39265DEE1B48AC1C57C6170E74D390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
Manifest number: 0E00
Signing time: Thu 15 Oct 2026 11:01:12 +0000
Manifest this update: Thu 15 Oct 2026 11:01:12 +0000
Manifest next update: Fri 16 Oct 2026 11:01:12 +0000
Files and hashes: 1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: vVkJ1dP3+q8+emmf7c1+Wpx1CLmW40vpNhdVUCATPcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:26:5d:ee:1b:48:ac:1c:57:c6:17:0e:74:d3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Validity
Not Before: Oct 15 11:01:12 2026 GMT
Not After : Oct 16 11:01:12 2026 GMT
Subject: CN=3bf36e92aa07f44dbe28640ce294f3c7153e3848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:0f:f6:47:30:3d:a2:c8:c2:49:39:6b:a2:
2f:93:6c:fb:5b:a2:3a:39:33:1d:eb:10:84:61:2d:
ca:4c:74:d0:f2:b1:b3:c0:f0:32:ef:ea:80:bb:fd:
98:66:88:09:ce:e2:05:e5:98:76:95:90:73:11:44:
28:34:0d:c6:3c:b0:50:ce:36:70:79:fa:3c:19:f0:
49:1c:5a:3f:a9:5b:12:94:8e:53:6b:3c:d9:d3:0f:
63:11:36:d3:57:63:5d:1c:a8:d0:7a:a0:e6:03:55:
ed:78:4f:b8:0d:65:ba:8e:7a:ea:ba:45:66:b5:5d:
32:7e:a3:93:9f:b4:d2:8d:80:38:89:6a:cb:0d:bf:
76:58:02:1f:1f:93:06:59:73:b4:c8:e4:7b:a8:86:
80:a6:c2:84:24:67:7c:c5:63:c5:ea:2d:64:1c:03:
e7:cc:42:b7:a9:09:13:4e:6f:77:ec:7e:ff:92:72:
c1:7b:d4:7b:07:8d:11:c8:8e:2f:a5:41:d8:f4:07:
cc:ee:11:4d:a9:47:72:ce:7b:89:10:63:8e:a7:c0:
56:c6:e3:b8:20:b2:67:f6:54:c5:57:a7:46:af:f7:
dd:c7:02:75:03:08:b2:92:19:a8:d9:6b:5c:a9:5a:
c6:d0:8d:fe:0f:26:c9:c1:70:ea:39:dd:e5:47:d7:
af:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F3:6E:92:AA:07:F4:4D:BE:28:64:0C:E2:94:F3:C7:15:3E:38:48
X509v3 Authority Key Identifier:
keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:18:3a:03:79:3f:0d:ed:aa:ba:06:ea:f6:ca:5f:fc:ac:25:
6b:16:bd:b5:39:7e:63:18:6f:23:77:67:45:e2:b8:07:6e:d3:
0d:2c:06:d6:60:b6:1f:fe:5d:46:cd:66:13:57:4c:42:35:da:
c1:2c:e1:45:f4:9a:69:22:8d:d4:e2:88:d8:49:94:0a:4d:54:
87:b5:de:48:e6:27:29:ce:49:22:34:93:8d:b2:1e:87:bb:1f:
4d:be:9c:e6:3b:6c:26:bc:16:f8:7a:90:08:64:42:5e:96:c6:
e6:11:24:c2:c4:d6:8d:a9:f6:49:4f:a7:6d:cd:0d:2b:6e:cc:
12:10:54:54:76:51:36:f1:be:99:46:e9:14:65:9d:52:12:3d:
3e:d5:f1:31:98:02:59:37:fc:a4:94:ef:59:c2:46:29:fd:57:
58:4e:74:29:2e:94:3d:a7:82:bf:19:25:ac:85:44:b2:be:30:
9d:bf:62:ed:c3:5d:80:74:60:e5:c8:30:8c:47:3e:22:b4:24:
1f:66:3f:3a:db:ca:fb:cd:6e:70:ae:e1:d9:65:45:8b:69:52:
1e:39:70:3e:3c:61:c7:29:74:0a:74:68:d6:f5:cf:0a:27:10:
15:f9:69:56:e2:53:7b:c0:22:49:89:6e:7d:1d:d9:e4:a2:a0:
0d:99:ca:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:25:37 2026 by rpki-client