Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
File: 4T3UuB8fx53U2mQo-cKgJzRX_wY.mft (raw, json)
Hash identifier: 9+DAmkpXiVevp1FkDQFAQ5kCCqTTEK1a4z9OWNZ2X6Q=
Subject key identifier: BF:60:CA:C1:2A:BC:AC:3F:F6:8F:04:88:DA:17:52:21:13:14:C3:7E
Authority key identifier: E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06
Certificate issuer: /CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06
Certificate serial: 01A13F02CACFEF6D4DD52D1EE61B166A30AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
Manifest number: 091E
Signing time: Thu 15 Oct 2026 10:01:49 +0000
Manifest this update: Thu 15 Oct 2026 10:01:49 +0000
Manifest next update: Fri 16 Oct 2026 10:01:49 +0000
Files and hashes: 1: 4T3UuB8fx53U2mQo-cKgJzRX_wY.crl (hash: docuY3TXfOC9zte8r4AMDxDDuOs5rcgZOKfdqrOX1xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:ca:cf:ef:6d:4d:d5:2d:1e:e6:1b:16:6a:30:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06
Validity
Not Before: Oct 15 10:01:49 2026 GMT
Not After : Oct 16 10:01:49 2026 GMT
Subject: CN=bf60cac12abcac3ff68f0488da1752211314c37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b9:12:57:01:6a:0e:0f:d4:d9:64:7b:64:1a:
63:13:76:86:5e:08:1d:d4:47:c9:e4:3f:d0:e0:7f:
2b:fd:6a:f9:36:55:d5:9f:81:78:10:6a:67:61:61:
e4:bd:64:42:5f:da:75:bd:60:8f:b0:ef:14:17:b4:
ee:cc:60:88:c3:c4:8e:d9:3c:be:21:e9:57:c8:81:
f7:79:8a:54:b6:de:38:7a:d3:3b:ca:fd:23:e2:19:
51:58:4b:3b:9e:b8:44:87:cc:1e:5e:a1:26:14:24:
9a:43:47:40:de:f2:c7:14:c9:86:dd:e5:05:7d:08:
16:72:01:4a:30:54:6d:36:dc:cf:4c:b6:07:fe:a0:
bf:6e:f4:73:f4:97:e3:89:93:89:c8:9e:ed:22:16:
65:60:c2:b0:e3:9c:e6:4b:0b:6f:38:44:8a:ef:6b:
0d:a8:7c:38:05:c3:ee:9f:a8:73:41:18:7e:eb:e2:
9d:56:96:88:09:e8:df:67:c9:1e:09:58:5e:62:cf:
27:0b:96:48:7c:95:97:61:e3:9a:c7:44:f4:98:e4:
a9:f8:23:95:86:41:82:6f:7a:9e:0a:8e:2c:c2:6b:
bd:ce:9e:3e:f9:b8:54:85:38:0a:9a:74:6b:1e:c1:
fb:85:e5:f7:c9:e5:d7:62:e4:96:0c:4c:61:25:c3:
ea:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:60:CA:C1:2A:BC:AC:3F:F6:8F:04:88:DA:17:52:21:13:14:C3:7E
X509v3 Authority Key Identifier:
keyid:E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5d:0f:2e:9a:0e:fe:e5:ef:9f:d7:f0:5e:6c:6e:17:27:7c:
95:77:ab:da:2c:a4:3f:1d:e0:93:55:a0:06:68:b6:f5:6b:29:
d9:bb:eb:08:b7:4e:ef:de:7c:24:ce:09:0c:9e:6c:a7:0d:98:
b9:76:d4:df:b1:0f:5b:33:b8:07:c4:52:95:1d:8b:04:3f:96:
c4:f7:00:ff:48:11:59:0f:12:a0:38:31:e3:ef:82:93:66:50:
a7:e0:79:5e:47:47:31:a4:dc:71:f6:79:e9:a0:1c:b3:7d:65:
0e:5a:d2:a0:d9:eb:2f:72:62:12:0d:82:bc:53:f4:5d:15:71:
cc:cf:47:b8:10:84:94:b8:45:57:7d:02:4f:f5:90:89:1f:c7:
2c:9d:99:17:f7:de:a4:d7:2b:8d:f9:87:6b:25:93:ca:fd:d1:
03:ef:8e:80:71:bd:27:a4:87:18:06:78:d3:0f:ec:81:17:23:
3a:62:e2:fa:2e:40:b7:fc:c6:5f:6d:d7:a1:24:a3:00:b6:65:
a1:0c:3e:2b:e7:da:8a:12:42:ca:ea:ac:ba:e1:7e:21:08:7d:
8e:15:9c:bc:eb:cb:46:56:c6:7c:09:cd:f2:95:8f:d8:ae:d3:
fd:4c:23:c8:b7:7f:12:d3:a5:28:43:35:e8:6a:9b:95:5e:f1:
45:3b:ab:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:26:11 2026 by rpki-client