Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
File: 4tccU1qnoKzpP62r22WD-ISmxiY.mft (raw, json)
Hash identifier: +iCdwKn7CoyrxM2XT35naFEI+KR7Q9e3fOzO4bKEHZg=
Subject key identifier: 8F:85:41:7C:B0:99:0F:B3:19:98:40:64:79:5E:49:CB:7C:A2:C4:06
Authority key identifier: E2:D7:1C:53:5A:A7:A0:AC:E9:3F:AD:AB:DB:65:83:F8:84:A6:C6:26
Certificate issuer: /CN=e2d71c535aa7a0ace93fadabdb6583f884a6c626
Certificate serial: 01A00101D4A5E9747DF8110D1BB1A276A66A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
Manifest number: 0AD9
Signing time: Fri 14 Aug 2026 16:01:32 +0000
Manifest this update: Fri 14 Aug 2026 16:01:32 +0000
Manifest next update: Sat 15 Aug 2026 16:01:32 +0000
Files and hashes: 1: 4tccU1qnoKzpP62r22WD-ISmxiY.crl (hash: 9Cn/5Tvds5TUTVnxSgMeLHSyL6Y9dH5ojPRD0bA/X10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:d4:a5:e9:74:7d:f8:11:0d:1b:b1:a2:76:a6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d71c535aa7a0ace93fadabdb6583f884a6c626
Validity
Not Before: Aug 14 16:01:32 2026 GMT
Not After : Aug 15 16:01:32 2026 GMT
Subject: CN=8f85417cb0990fb319984064795e49cb7ca2c406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:af:47:69:12:8b:41:f5:90:cd:bd:1c:ec:
2b:c8:fe:1e:9e:36:16:98:0c:7a:1c:1e:ae:32:90:
33:4c:e7:15:b8:f4:58:ec:60:af:b9:78:44:a8:78:
24:1f:fc:35:d2:55:c7:16:db:2b:5b:21:b3:91:11:
fd:44:fe:34:75:0d:4a:e2:4f:c6:d1:68:5c:e1:dc:
6a:87:77:b0:2e:2f:2b:24:42:e9:cf:c1:09:de:50:
4e:fc:4d:72:ae:b9:34:3b:25:fe:1d:9a:f6:18:f4:
c6:28:e1:09:a4:dd:4a:ca:85:97:fc:ef:54:cb:71:
de:4c:ee:08:16:c3:40:61:67:40:39:ad:00:0a:6f:
31:2c:a8:b6:79:a0:c0:6b:0f:5b:9b:6b:a9:06:32:
c7:54:b9:92:59:e8:6d:41:4f:7f:31:df:9d:62:22:
b6:db:d8:71:d6:62:cf:69:43:59:1b:76:78:1b:0e:
e4:2e:f9:24:1e:3a:63:e4:1d:d6:ba:c6:10:8f:6f:
c2:03:15:27:6a:b2:6e:14:ea:8d:09:c1:f4:74:e7:
4c:ea:11:71:4c:a7:7c:61:29:4f:69:32:10:3e:ea:
ab:2b:88:f2:91:46:91:bc:aa:eb:c9:1e:f8:03:a1:
a8:cd:53:4b:bf:f2:3d:32:dc:0d:a3:a4:05:c6:32:
9d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:85:41:7C:B0:99:0F:B3:19:98:40:64:79:5E:49:CB:7C:A2:C4:06
X509v3 Authority Key Identifier:
keyid:E2:D7:1C:53:5A:A7:A0:AC:E9:3F:AD:AB:DB:65:83:F8:84:A6:C6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:01:0f:d6:07:3c:2e:bc:11:b5:04:3b:d0:7b:0c:d5:7b:19:
6c:47:f6:47:ec:a6:0c:22:9b:3a:e5:17:e9:3e:52:52:54:e8:
ce:83:07:75:b5:4a:36:c6:4c:fa:86:f1:f2:f7:b8:74:12:ed:
2c:20:69:6c:50:2f:a9:6a:47:86:0f:d7:25:9b:6a:59:17:95:
a6:c9:1b:09:e5:9e:23:9b:7a:09:a0:69:97:25:d3:7d:f7:0f:
3e:42:35:ea:1f:ec:42:e9:ac:00:0c:8a:ab:ca:26:ef:a1:59:
ec:d3:2f:d3:f5:9b:f2:fe:15:d9:1a:ce:9e:6d:c1:34:6c:a3:
09:d6:67:79:2d:46:a3:be:37:cc:a9:03:88:21:18:59:e0:02:
d5:55:a3:ae:7b:e5:c5:a3:fa:d2:8b:45:98:0a:05:75:a4:18:
87:64:96:2f:91:12:90:30:63:3f:6b:14:a8:67:0d:8c:66:61:
02:28:91:8f:f0:77:07:21:52:09:36:55:3b:20:c5:c1:4c:fa:
a5:cf:be:8d:84:dc:38:28:a8:c7:cc:9f:8b:ef:83:6e:00:dc:
27:73:c9:f5:2b:2d:e2:4b:5d:ac:ba:03:4f:72:a2:bd:4f:0d:
79:a6:2b:09:ad:57:e4:8d:69:5f:0b:46:b0:c1:5d:69:d8:22:
8a:b5:66:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:31 2026 by rpki-client