Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.mft
File: 4KM3CoQbiT57aPhqOTNjWC4QVkg.mft (raw, json)
Hash identifier: CTLPh6mHGnIwNP196nJL9ec+sGDw/LpJX9Ps6H8JxU0=
Subject key identifier: D2:3B:FC:45:7D:15:69:BB:FD:97:99:93:BF:4C:C0:B7:60:D9:F5:5A
Authority key identifier: E0:A3:37:0A:84:1B:89:3E:7B:68:F8:6A:39:33:63:58:2E:10:56:48
Certificate issuer: /CN=e0a3370a841b893e7b68f86a393363582e105648
Certificate serial: 01A140160353C2463BA4E7997DAD8FA05299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KM3CoQbiT57aPhqOTNjWC4QVkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.mft
Manifest number: 0F7F
Signing time: Thu 15 Oct 2026 15:02:26 +0000
Manifest this update: Thu 15 Oct 2026 15:02:26 +0000
Manifest next update: Fri 16 Oct 2026 15:02:26 +0000
Files and hashes: 1: 4KM3CoQbiT57aPhqOTNjWC4QVkg.crl (hash: 9mEx3QVzWlYpLw/kHBLCQvIYE/JT9XYbTzlXE8A8S78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KM3CoQbiT57aPhqOTNjWC4QVkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:16:03:53:c2:46:3b:a4:e7:99:7d:ad:8f:a0:52:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a3370a841b893e7b68f86a393363582e105648
Validity
Not Before: Oct 15 15:02:26 2026 GMT
Not After : Oct 16 15:02:26 2026 GMT
Subject: CN=d23bfc457d1569bbfd979993bf4cc0b760d9f55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f0:c9:27:14:f9:18:12:f4:0c:b4:d5:f4:45:
97:65:2e:bf:62:88:7c:b3:37:45:6b:b3:9a:ba:fa:
06:c4:19:04:b0:fb:c2:d3:7b:73:98:88:70:7c:13:
b1:88:05:9e:49:cf:fb:90:6c:9a:33:7d:fa:43:87:
16:9c:a0:4a:7e:3d:f2:a8:8a:da:c6:45:1f:98:1c:
52:55:a8:c4:88:13:fc:1c:4f:55:56:77:54:2e:37:
5f:08:03:6e:e7:80:18:13:23:9f:85:fb:5b:af:95:
ad:70:6f:9c:2a:84:f1:fa:d5:ca:b6:f5:b2:e3:a2:
1e:1f:b5:0e:f2:7e:cf:f9:e2:66:82:eb:68:d1:3e:
db:b0:89:72:d2:60:bd:2c:e1:a8:3e:d5:db:08:06:
2c:80:39:62:e6:6d:1c:8e:81:77:98:70:35:e6:33:
05:7b:6a:33:0b:35:e3:cf:07:7a:41:48:e0:43:fc:
22:c0:78:fe:52:15:12:77:1b:5a:6c:6a:37:e6:70:
fd:ee:74:64:ae:c8:00:52:0b:c2:1d:01:6e:db:56:
c5:90:31:2b:24:89:06:19:83:f3:96:01:58:d2:8b:
ed:b9:31:08:99:cb:a4:91:f4:6a:69:9d:0f:12:da:
b8:f1:33:28:76:83:48:07:2a:7f:db:8f:a1:06:b1:
57:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3B:FC:45:7D:15:69:BB:FD:97:99:93:BF:4C:C0:B7:60:D9:F5:5A
X509v3 Authority Key Identifier:
keyid:E0:A3:37:0A:84:1B:89:3E:7B:68:F8:6A:39:33:63:58:2E:10:56:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KM3CoQbiT57aPhqOTNjWC4QVkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b9:4c:e1:9f:29:bb:71:f3:9a:12:07:e6:96:db:82:d6:e4:
12:2c:93:db:d0:2c:23:98:29:5c:71:e1:3c:65:e8:5b:be:f9:
6c:1b:39:bd:0c:48:2a:73:ee:c2:93:8b:cb:52:3c:2c:77:b1:
89:10:07:03:52:b2:b6:7a:20:c9:3b:da:79:b5:51:a7:97:ec:
f3:6f:19:17:77:14:5f:43:f2:ca:99:d0:ff:94:d9:1c:a0:de:
30:ff:e5:f1:eb:0e:16:e4:44:31:1d:09:23:54:84:05:7a:d6:
26:4c:72:31:28:7b:48:01:8d:b1:42:5e:44:7f:be:9c:6b:c4:
82:e2:0d:19:52:fb:f5:c1:4c:29:f3:24:7f:0e:ad:1c:92:d8:
8e:d1:e3:21:48:07:ae:f4:9e:1e:20:a8:ab:ef:07:68:1b:bb:
96:d1:af:b2:7f:57:84:4f:ef:be:e3:71:b6:54:33:86:de:40:
5c:a1:08:1c:2c:1f:ef:ed:34:95:89:32:10:76:00:9e:da:c6:
61:f6:1b:a8:8a:88:69:49:91:d5:e3:67:fc:56:3c:9f:09:26:
7d:fb:59:40:4d:b2:76:3c:32:4f:e8:34:f9:21:2e:a4:dd:f5:
e4:5d:02:b4:47:a4:f1:90:43:80:78:b5:07:69:4c:ed:a4:9c:
bd:fd:aa:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:56:00 2026 by rpki-client