
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.mft
File: 4BpLB7xMpvoFciL96uhg9kRAR-A.mft (raw, json)
Hash identifier: d9/3FSJD2CyAUBLjq+UbuPl12yVqE52iOIT9EnVd+Ww=
Subject key identifier: E2:DD:4C:53:9A:3E:9B:E9:BF:D5:89:36:8E:FE:1B:4C:5F:A6:8B:89
Authority key identifier: E0:1A:4B:07:BC:4C:A6:FA:05:72:22:FD:EA:E8:60:F6:44:40:47:E0
Certificate issuer: /CN=e01a4b07bc4ca6fa057222fdeae860f6444047e0
Certificate serial: 01A13F39313FF0FB15147B98B585DAD40FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BpLB7xMpvoFciL96uhg9kRAR-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.mft
Manifest number: 0876
Signing time: Thu 15 Oct 2026 11:01:14 +0000
Manifest this update: Thu 15 Oct 2026 11:01:14 +0000
Manifest next update: Fri 16 Oct 2026 11:01:14 +0000
Files and hashes: 1: 4BpLB7xMpvoFciL96uhg9kRAR-A.crl (hash: QYsNlszAeiTzoICOgBlVEyE810+m7ODIuS5OZItuLOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BpLB7xMpvoFciL96uhg9kRAR-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:31:3f:f0:fb:15:14:7b:98:b5:85:da:d4:0f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01a4b07bc4ca6fa057222fdeae860f6444047e0
Validity
Not Before: Oct 15 11:01:14 2026 GMT
Not After : Oct 16 11:01:14 2026 GMT
Subject: CN=e2dd4c539a3e9be9bfd589368efe1b4c5fa68b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:63:1a:0f:40:d8:f7:ab:f1:9c:d0:a7:53:
36:5d:eb:7d:eb:d5:54:f1:a8:0a:90:c9:e3:4a:7d:
4f:ac:d6:f3:14:38:a3:4f:d9:61:c5:44:80:02:0a:
b8:37:99:2c:b8:89:67:be:40:c8:92:a7:9a:2a:54:
3b:88:1a:cf:14:5a:4e:5c:a5:37:bd:bb:58:65:a8:
85:5a:9a:05:4e:0b:4e:8f:de:3c:8f:e1:cb:e2:cf:
bf:39:ef:4c:6b:63:30:be:5b:10:cc:69:7f:2f:95:
09:12:37:81:41:5b:1d:a7:c8:1d:96:2e:5f:2f:2a:
97:07:3a:c0:62:8f:31:d8:80:f8:47:ca:62:a8:ce:
c0:9c:30:09:83:e0:64:c7:a3:1f:09:a8:7e:e2:46:
5c:da:df:61:e0:0d:2f:4b:42:03:6b:4c:86:db:f6:
dc:2d:1b:26:a3:04:ce:54:87:af:a0:70:33:7f:8d:
be:3b:f3:f9:43:9b:9c:a2:6e:a3:d4:d2:54:ef:7a:
d3:95:62:f9:1b:6f:0a:d3:5a:89:a5:0e:73:3d:93:
a3:da:62:a3:df:b6:f0:06:18:90:f9:6c:13:fc:7c:
44:3f:dc:75:0c:d6:41:83:89:d2:37:25:76:00:6a:
e3:0d:cd:dd:4f:52:ab:20:95:68:d2:b5:2f:bd:e8:
40:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DD:4C:53:9A:3E:9B:E9:BF:D5:89:36:8E:FE:1B:4C:5F:A6:8B:89
X509v3 Authority Key Identifier:
keyid:E0:1A:4B:07:BC:4C:A6:FA:05:72:22:FD:EA:E8:60:F6:44:40:47:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BpLB7xMpvoFciL96uhg9kRAR-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7f:ce:70:e2:49:32:9d:26:a5:f9:fa:b8:79:af:16:78:33:
13:1c:24:d8:05:78:51:ef:e0:08:41:43:57:43:20:b8:ab:8b:
47:d7:c9:a1:ab:d1:d6:d5:d7:71:ef:e8:92:22:f7:b2:95:c3:
03:89:86:00:ea:57:73:50:92:75:79:d7:64:6c:45:1e:62:03:
48:d9:d4:d3:cd:9b:48:19:d8:bf:1e:96:7f:f9:62:2d:fc:fe:
91:12:3f:69:e5:36:b4:fa:bb:f5:b3:d6:dc:83:da:c1:4c:46:
95:19:18:6f:cc:88:b8:ea:fe:6e:f9:35:b8:c5:ce:39:25:cf:
94:21:78:69:3b:8a:35:bd:8c:40:35:bc:7b:08:7d:49:02:cc:
77:87:c5:81:25:88:f4:45:01:68:f6:01:f5:9d:50:87:2d:c1:
b6:7c:a4:ad:b7:f4:71:64:70:c9:cd:e1:5d:4e:54:60:76:38:
cf:a9:12:1e:3d:9e:71:ed:89:61:ac:61:8c:a3:c0:c1:33:e2:
37:ec:f2:3f:fc:63:2d:68:2e:1d:b9:ec:d3:89:0a:50:ea:10:
da:d4:0d:6a:94:85:61:13:c0:49:94:a3:f4:17:f7:a2:02:65:
26:6a:d7:f1:b0:7a:05:db:13:b3:e3:6b:ff:41:70:d1:ee:29:
04:29:70:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:08:37 2026 by rpki-client