Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
File: 4UYAGfiAaeNhThUQkhzH5E0cq-I.mft (raw, json)
Hash identifier: AeFcRxYjpfXVpQl9PS0+HC6t/yBTOBdNLUhACBmIMDE=
Subject key identifier: 25:E4:B8:C4:77:D4:35:15:E8:CA:CF:9B:E5:B7:5F:54:39:B8:9A:55
Authority key identifier: E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2
Certificate issuer: /CN=e1460019f88069e3614e1510921cc7e44d1cabe2
Certificate serial: 019CE5FEE19F73AB9C3235927059DE14FA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
Manifest number: 1862
Signing time: Fri 13 Mar 2026 07:00:12 +0000
Manifest this update: Fri 13 Mar 2026 07:00:12 +0000
Manifest next update: Sat 14 Mar 2026 07:00:12 +0000
Files and hashes: 1: 4UYAGfiAaeNhThUQkhzH5E0cq-I.crl (hash: tC0aFcUEbE755mOyTwJOWHfwgjCko1eOCeEExtCnjCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:fe:e1:9f:73:ab:9c:32:35:92:70:59:de:14:fa:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1460019f88069e3614e1510921cc7e44d1cabe2
Validity
Not Before: Mar 13 07:00:12 2026 GMT
Not After : Mar 14 07:00:12 2026 GMT
Subject: CN=25e4b8c477d43515e8cacf9be5b75f5439b89a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5b:c9:ee:61:d0:e9:79:2e:44:bf:26:44:c8:
04:06:87:4f:5e:a6:11:4f:b7:c2:03:4c:e0:ca:1d:
68:9b:a4:1b:8e:e7:65:dd:e0:5a:71:d8:d0:d5:1b:
b7:85:37:bb:31:6c:9a:1c:e4:f8:3c:6a:df:ab:c7:
c5:f0:14:e8:82:4f:ee:82:24:89:55:c0:28:67:74:
ed:61:49:ec:fc:c1:54:77:c3:d3:b5:8c:03:b9:47:
ee:60:06:ee:89:58:78:99:5c:1d:a1:e5:3f:00:2d:
71:ae:1e:d6:79:e6:f5:4c:4b:32:66:4c:cb:27:9b:
30:77:81:1f:13:4b:ae:2d:82:62:e9:29:82:83:4d:
08:fa:6f:4c:73:5f:22:17:d5:2a:9b:8c:0c:8d:cb:
d8:bb:a9:44:94:27:ba:50:9e:c6:82:b7:48:cc:2a:
1a:f4:8b:3a:94:ed:65:d2:df:c5:7b:12:16:95:0e:
09:90:64:5e:7e:84:b6:9e:8f:5d:9c:17:ed:5e:96:
e5:9b:1c:fa:17:e9:e6:bd:39:99:23:40:c6:59:2d:
89:69:2f:77:a9:cb:1f:af:18:6a:4f:06:f5:75:c7:
b4:81:f8:55:f8:23:ac:50:ba:f2:ea:e3:fe:41:c7:
6d:26:c6:a8:26:31:09:62:f7:ec:19:c1:b4:ad:1c:
1f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E4:B8:C4:77:D4:35:15:E8:CA:CF:9B:E5:B7:5F:54:39:B8:9A:55
X509v3 Authority Key Identifier:
keyid:E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:2e:b5:ea:b9:af:cc:09:a8:22:96:a9:c0:76:9c:b9:a6:18:
b8:b1:11:09:a2:bc:36:0b:d7:95:33:c3:8a:87:f2:48:f5:18:
ba:4d:bc:60:1f:4b:ba:f0:ea:e4:2d:46:20:da:13:62:66:5c:
cf:d7:d6:ea:bf:56:3b:8d:93:05:20:a9:f3:8c:92:31:d2:54:
ab:d2:91:4b:4b:99:f2:41:14:35:53:ab:54:f7:18:be:cd:ad:
77:41:94:85:6e:23:f0:1e:db:97:8d:00:5e:7c:95:b8:8d:55:
35:e0:e0:8b:44:60:a5:b0:ce:77:a6:fb:ba:f9:fa:a3:33:e9:
df:d0:4d:92:7d:76:96:53:4c:ae:4f:4c:e8:de:5e:22:58:eb:
95:70:74:42:7b:fe:18:8f:c7:de:53:a6:ab:4d:46:7d:79:a2:
df:31:b9:3a:0e:56:09:e0:ee:5d:1e:c5:10:ba:4b:84:a1:b9:
5e:86:a1:27:73:2a:9b:57:e9:68:b3:b7:2d:eb:8c:16:db:30:
6e:ad:61:41:ec:f7:a8:cd:74:a0:e7:ff:7d:b4:30:9a:5f:15:
da:ab:ef:12:0e:46:da:7f:ba:9a:c1:82:2d:63:a4:8e:38:e8:
b9:9f:fc:93:a5:36:2e:9f:49:6d:ce:a5:ac:25:8d:eb:d7:30:
95:d6:16:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:16:41 2026 by rpki-client