Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
File: 4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft (raw, json)
Hash identifier: XrzuapnIRUW1LCAznS6brHADq5Na7/ssN3ITF71CGbQ=
Subject key identifier: F0:A1:78:67:DF:0B:F9:B2:C7:E9:AE:75:26:B7:1B:CD:2C:1F:61:CC
Authority key identifier: E0:1B:C8:74:AF:C2:99:CF:10:E5:B1:7D:C8:A4:3A:24:FB:9C:4A:E6
Certificate issuer: /CN=e01bc874afc299cf10e5b17dc8a43a24fb9c4ae6
Certificate serial: 019D390A197893E3A405ABD3D7BA2F3611E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
Manifest number: 032E
Signing time: Sun 29 Mar 2026 10:00:56 +0000
Manifest this update: Sun 29 Mar 2026 10:00:56 +0000
Manifest next update: Mon 30 Mar 2026 10:00:56 +0000
Files and hashes: 1: 4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl (hash: oi+FeIsNVS+GMoYo1YWf4KfKFqmQEBofpbhE6p51S2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:19:78:93:e3:a4:05:ab:d3:d7:ba:2f:36:11:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01bc874afc299cf10e5b17dc8a43a24fb9c4ae6
Validity
Not Before: Mar 29 10:00:56 2026 GMT
Not After : Mar 30 10:00:56 2026 GMT
Subject: CN=f0a17867df0bf9b2c7e9ae7526b71bcd2c1f61cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e2:f8:a2:2c:fe:88:b1:75:3c:92:45:9c:f2:
b3:d4:72:9e:a4:7d:92:52:ee:cc:31:91:c9:91:89:
8e:02:2d:e0:07:88:85:60:c8:ae:c0:1b:33:d2:79:
c9:b5:44:31:9e:cf:7e:d2:9b:83:5d:7d:04:f8:65:
67:cf:cb:8e:fe:1c:9a:86:3e:4d:ab:29:a6:8c:05:
a8:60:79:67:5c:ad:4d:5c:d7:df:0b:b5:d8:db:56:
a3:1c:bb:bd:0f:ef:d9:be:4e:cb:ac:65:e6:78:d1:
ba:5c:e1:9a:b1:e1:9b:5c:0b:2a:da:e4:66:d3:71:
d4:b2:50:e7:77:cd:22:0d:30:6b:9b:bf:20:57:9b:
51:58:6d:eb:cf:79:3b:21:09:86:ac:b5:08:d2:74:
48:4f:89:89:b2:55:2c:ad:a0:a8:5a:78:de:10:ec:
7c:2d:73:01:ef:d2:0b:e4:7a:de:c8:fc:61:9b:25:
ab:ac:b9:cf:cd:e2:e5:9c:1e:a7:8a:e6:31:e4:69:
23:49:9e:01:1e:58:b0:9a:c3:11:ef:71:17:38:5f:
92:06:fd:0e:2b:9d:78:bc:a6:cf:b8:5e:6a:c0:7c:
ee:e4:35:95:21:55:9e:a6:49:25:57:96:ba:21:ce:
44:20:6c:b8:fa:b4:a5:98:fc:f9:fb:a8:32:b2:f7:
e5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A1:78:67:DF:0B:F9:B2:C7:E9:AE:75:26:B7:1B:CD:2C:1F:61:CC
X509v3 Authority Key Identifier:
keyid:E0:1B:C8:74:AF:C2:99:CF:10:E5:B1:7D:C8:A4:3A:24:FB:9C:4A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:eb:06:40:cb:c7:ed:64:61:31:86:d8:50:71:7f:3a:b9:f2:
31:9c:33:0b:4e:eb:c0:a9:8f:dc:5e:0c:72:48:10:55:32:86:
82:21:30:1b:2f:b6:25:91:f8:94:a9:24:dd:d6:3b:8b:00:a7:
e6:2c:76:8d:0c:bf:4e:dd:69:63:cd:07:27:73:b8:7c:a4:aa:
b7:94:62:b2:75:ff:df:dc:11:aa:62:cc:c1:8d:9e:05:7a:8f:
cc:35:2f:0d:fe:03:21:64:65:9b:e4:cf:95:c3:d8:1d:08:a9:
40:81:8a:56:c0:d6:41:88:ab:8a:1c:e4:27:43:7f:56:83:42:
37:81:0b:98:8d:5b:6d:c9:15:5e:b2:00:64:93:37:6d:56:69:
fd:31:6e:19:ac:11:a6:d2:34:f1:ca:eb:68:e8:cf:a0:f4:75:
20:24:06:e5:9f:be:01:ed:a5:ea:9a:bf:67:f6:8a:b3:4d:21:
09:5b:77:92:55:be:d0:ed:54:29:21:3c:85:b5:0c:4b:f7:5b:
b4:4f:a2:fd:ab:09:95:cc:3a:72:cb:f0:09:f0:ac:50:4b:9c:
b8:de:c5:bd:1f:51:2d:f8:d8:c3:7b:f1:4c:c0:d3:02:3c:63:
33:97:29:a1:c7:14:ec:cb:81:72:f2:f3:06:82:4f:27:c4:30:
09:d6:63:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:07 2026 by rpki-client