Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
File: 4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json)
Hash identifier: UNohhJIxJmNOg3c7by8P6Y/CLIjbUcL5voGGX3u4jOw=
Subject key identifier: EA:C8:85:35:8E:94:B3:55:99:5A:60:71:20:4F:25:F0:7D:11:2C:34
Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
Certificate issuer: /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Certificate serial: 019D37F72D2E1A66EC54BE8B86E7D37D06E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
Manifest number: 0BEA
Signing time: Sun 29 Mar 2026 05:00:38 +0000
Manifest this update: Sun 29 Mar 2026 05:00:38 +0000
Manifest next update: Mon 30 Mar 2026 05:00:38 +0000
Files and hashes: 1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: pp7k+Zy/YyYciv6G6WS6yp8FhXmb8OXF/j3VGXEpVak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:2d:2e:1a:66:ec:54:be:8b:86:e7:d3:7d:06:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Validity
Not Before: Mar 29 05:00:38 2026 GMT
Not After : Mar 30 05:00:38 2026 GMT
Subject: CN=eac885358e94b355995a6071204f25f07d112c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:17:b4:ab:d4:cf:40:0f:11:17:37:79:7e:ec:
6c:00:d9:b8:30:6f:9a:35:c4:2d:ec:d2:a5:18:97:
4b:28:ad:18:27:72:18:a5:16:73:ec:ad:8f:eb:92:
6e:02:14:ea:a2:05:d6:3c:2e:ab:27:27:77:ba:05:
19:db:8c:fb:c4:56:47:c9:ea:95:11:36:59:19:83:
af:2a:f1:dc:f6:56:66:bc:bb:85:4b:95:a3:97:fc:
20:be:3b:68:be:0f:4c:db:8e:ba:34:b9:af:13:8f:
24:10:83:25:0b:ee:b4:12:f7:09:85:c3:8a:5d:c3:
f3:33:ac:99:f2:19:f8:af:c2:35:2e:a2:e4:fe:4d:
c9:5b:0b:84:2e:ef:1b:48:a4:1e:26:a3:21:39:d9:
f0:f2:8f:00:f2:38:44:73:9f:6f:ff:ba:59:f2:78:
bf:63:9c:42:33:79:aa:84:91:08:ea:42:37:c9:50:
02:56:c2:e4:89:fc:e3:93:3a:0e:b1:94:ac:b5:ed:
d7:64:bf:bd:8d:1a:1f:48:41:25:57:08:69:2b:11:
ad:73:c7:49:31:46:31:ab:bc:08:e8:f2:ea:ad:38:
ea:e2:73:49:04:c5:f4:d8:d3:c5:c4:69:73:d3:e8:
9e:57:5a:06:ec:96:6d:69:fa:f1:04:a0:e0:b4:15:
49:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C8:85:35:8E:94:B3:55:99:5A:60:71:20:4F:25:F0:7D:11:2C:34
X509v3 Authority Key Identifier:
keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:12:e8:25:4e:d1:6c:da:91:e2:fc:bb:e6:6e:2d:57:fb:10:
92:4c:a3:64:f6:47:64:47:da:a4:0a:4f:be:15:5d:1e:7c:57:
44:7f:82:4f:1b:33:bb:0a:14:03:aa:9b:f7:62:1c:bc:ce:19:
ac:fc:40:7f:22:b0:cc:97:d0:af:49:54:c7:d0:74:b0:b1:e8:
96:7e:ad:a4:d6:b6:d7:63:8d:03:ed:46:f2:31:d9:e3:26:c1:
ea:8b:8c:49:b5:65:57:91:18:12:29:ed:ea:8b:55:d2:e2:34:
c6:a8:24:87:f6:6d:51:dd:04:28:2c:4c:b6:b1:56:b3:2e:73:
6a:c4:54:2d:ee:70:cc:0a:64:17:cf:82:1e:15:25:56:5a:18:
e1:2e:11:dc:15:44:ce:d9:3f:c0:af:45:d2:6d:d5:2f:30:a0:
2c:d5:a7:d0:1a:22:93:49:f4:fa:93:eb:83:7c:bf:61:95:44:
0f:da:bb:c9:4c:d3:ab:53:b3:27:69:7b:e2:6a:9c:a4:24:87:
43:4d:c9:24:a1:0e:16:8d:ea:7c:96:2b:8d:b6:bd:7a:4f:96:
ed:fc:1a:6e:e9:8e:82:77:0e:a3:22:e8:9b:f1:19:c0:43:aa:
ce:42:fb:34:97:bd:f3:42:70:26:15:69:a2:03:fd:75:fb:14:
fd:44:1b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:42 2026 by rpki-client