Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
File: 4HDNq3OhLa82gGsOFgLI2vuQk7s.mft (raw, json)
Hash identifier: MFpfYCAPq4qFKhgho5XieP5LHYONHLXukfBjV9/Yy40=
Subject key identifier: BD:22:F8:81:35:EC:F2:4C:AB:96:E3:C7:20:C6:14:D5:DD:CB:8E:7E
Authority key identifier: E0:70:CD:AB:73:A1:2D:AF:36:80:6B:0E:16:02:C8:DA:FB:90:93:BB
Certificate issuer: /CN=e070cdab73a12daf36806b0e1602c8dafb9093bb
Certificate serial: 01A13DB884C07635FF452F644AEC8C463236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
Manifest number: 0FEE
Signing time: Thu 15 Oct 2026 04:01:05 +0000
Manifest this update: Thu 15 Oct 2026 04:01:05 +0000
Manifest next update: Fri 16 Oct 2026 04:01:05 +0000
Files and hashes: 1: 4HDNq3OhLa82gGsOFgLI2vuQk7s.crl (hash: YKMZ7yN6OrnRIG5yky14/rZaZgWCI1Ozpd21Ipy6djs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:84:c0:76:35:ff:45:2f:64:4a:ec:8c:46:32:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e070cdab73a12daf36806b0e1602c8dafb9093bb
Validity
Not Before: Oct 15 04:01:05 2026 GMT
Not After : Oct 16 04:01:05 2026 GMT
Subject: CN=bd22f88135ecf24cab96e3c720c614d5ddcb8e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6f:dd:df:ae:f8:b7:46:e3:bf:2a:5d:33:ef:
86:9d:f3:a7:ee:bb:54:d4:27:26:9c:78:64:c6:18:
41:54:95:ca:4a:51:1f:9c:bf:74:fa:6f:a5:cb:aa:
56:15:8a:6a:d4:88:69:c1:55:79:02:fc:3b:95:9a:
a3:b0:29:f2:fa:9e:54:fd:fa:1d:94:b5:80:18:fd:
57:b6:70:cc:07:64:fb:db:14:9b:a5:c6:2f:63:fb:
b0:37:6a:c1:29:c2:80:43:39:16:2f:e0:b1:e0:0b:
04:fe:eb:71:7a:a0:7b:54:61:51:8b:4f:28:da:02:
e1:af:fb:2a:d5:32:bf:af:bd:5a:36:2e:84:0f:58:
09:3c:a6:dc:5b:ba:87:a1:78:e5:9f:27:29:30:09:
29:10:cd:71:a4:a0:88:05:5f:bb:dc:2e:cc:6d:0c:
cd:97:fb:64:49:1b:bc:5a:d1:cb:3e:25:76:8b:fe:
62:26:7b:d9:5a:87:ec:5c:83:88:0a:e8:bc:3f:a7:
da:9b:94:c8:d2:ef:c9:45:31:59:74:3f:04:6f:53:
cc:f0:ee:2f:59:0f:e7:08:a4:3e:7f:91:29:f0:c1:
8e:58:48:aa:aa:df:88:54:be:a4:0a:51:28:4b:10:
95:86:e7:af:29:0b:85:cd:c6:68:78:5b:35:1a:2a:
0f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:22:F8:81:35:EC:F2:4C:AB:96:E3:C7:20:C6:14:D5:DD:CB:8E:7E
X509v3 Authority Key Identifier:
keyid:E0:70:CD:AB:73:A1:2D:AF:36:80:6B:0E:16:02:C8:DA:FB:90:93:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:fc:b6:b0:45:15:62:6e:42:83:bb:e1:b4:ca:a9:e7:5e:b8:
9e:d1:eb:28:d5:a8:78:4c:8b:fe:fd:81:3e:9e:7c:21:47:c5:
eb:08:e1:3f:d3:c5:98:ae:d2:fa:bf:6d:ce:69:a9:8f:4d:5e:
13:85:af:ce:e9:e0:99:9e:9a:47:5b:a3:33:be:05:67:79:41:
eb:a4:76:cf:ec:20:8f:6b:76:64:f1:85:10:63:06:05:df:28:
1e:11:c4:55:70:5c:9a:04:3d:7f:51:17:40:ce:8d:42:46:01:
e1:5e:e6:a0:15:f0:2b:c0:93:11:8c:ff:e4:42:e5:ba:2d:bc:
d8:22:25:d1:d1:64:0f:f0:01:7a:c5:50:e5:2a:b9:94:e7:34:
37:16:6f:4c:35:93:46:28:18:10:4f:bd:c3:af:65:5d:03:4d:
9d:c5:9f:7b:46:f1:7e:27:68:f8:3b:62:57:ad:96:b5:19:21:
17:9f:aa:b9:8c:8e:14:3b:5c:57:7f:52:be:9a:c2:0e:25:32:
08:69:7a:82:60:91:63:b7:62:94:69:aa:ae:71:07:47:d5:6a:
11:f6:a0:3e:df:a1:31:51:fe:84:5c:93:b1:7d:fa:a8:2c:2e:
b5:21:87:0d:62:4c:75:39:27:60:33:60:bb:c0:81:ab:6b:da:
21:92:5c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:56 2026 by rpki-client