Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft
File: 4iUB2aQBcJg48z0a4nm85xALPM8.mft (raw, json)
Hash identifier: otbHzJYw/I3E9cX2WmdB7VcU6OENVOxDiZamLyDLcAo=
Subject key identifier: 8D:17:BA:2D:5E:CA:1D:EF:7B:B6:CD:F9:74:19:94:DE:C6:4D:04:67
Authority key identifier: E2:25:01:D9:A4:01:70:98:38:F3:3D:1A:E2:79:BC:E7:10:0B:3C:CF
Certificate issuer: /CN=e22501d9a401709838f33d1ae279bce7100b3ccf
Certificate serial: 01A1419546F6699BE03DA12B9BDC9E6B966B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iUB2aQBcJg48z0a4nm85xALPM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft
Manifest number: 151D
Signing time: Thu 15 Oct 2026 22:01:04 +0000
Manifest this update: Thu 15 Oct 2026 22:01:04 +0000
Manifest next update: Fri 16 Oct 2026 22:01:04 +0000
Files and hashes: 1: 4iUB2aQBcJg48z0a4nm85xALPM8.crl (hash: 7GWM58FGNF2CdwCEUSwSl4VFDZI98TIJ3HJdELtaKg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iUB2aQBcJg48z0a4nm85xALPM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:95:46:f6:69:9b:e0:3d:a1:2b:9b:dc:9e:6b:96:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22501d9a401709838f33d1ae279bce7100b3ccf
Validity
Not Before: Oct 15 22:01:04 2026 GMT
Not After : Oct 16 22:01:04 2026 GMT
Subject: CN=8d17ba2d5eca1def7bb6cdf9741994dec64d0467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:da:5c:7f:d3:70:f7:33:f9:c5:23:30:d2:
75:10:4b:36:9c:ab:21:20:10:05:6c:70:c9:b0:3b:
58:4d:b2:e4:b8:a6:91:e2:82:9f:e6:b1:86:fa:2f:
a2:6c:f0:5a:77:04:8f:c1:55:8c:5c:e3:d7:52:fb:
89:59:67:e7:01:e6:2a:cd:ef:74:f7:90:16:68:6f:
fa:ca:3a:b8:85:33:1e:5a:b2:f4:1b:31:b7:2f:2a:
8a:bd:d5:3a:65:d0:25:be:34:42:ee:16:0e:de:00:
5c:de:99:3d:b9:61:ad:ab:66:a7:a9:49:16:1d:8e:
c8:50:71:e8:b9:30:bd:66:95:92:49:16:aa:e3:1e:
2f:76:ff:d1:b3:50:b7:21:66:76:c3:d0:38:7b:a8:
5c:7e:e6:b9:49:27:43:6e:1e:94:88:b5:47:20:47:
13:7f:4c:46:21:78:7c:e8:10:20:5d:f9:35:b6:fb:
31:76:9d:2f:e8:cb:4f:18:dc:1d:3c:54:bc:21:a8:
ef:16:fc:3a:05:50:15:ac:f1:e4:16:a2:c5:f0:39:
07:50:3d:76:cd:bd:5c:1c:29:83:58:cc:e5:f0:a9:
f3:ee:1e:61:e5:47:36:28:83:7b:41:81:e6:79:a6:
68:9f:c2:4a:16:47:f4:76:1e:c7:f7:38:26:55:04:
8d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:17:BA:2D:5E:CA:1D:EF:7B:B6:CD:F9:74:19:94:DE:C6:4D:04:67
X509v3 Authority Key Identifier:
keyid:E2:25:01:D9:A4:01:70:98:38:F3:3D:1A:E2:79:BC:E7:10:0B:3C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iUB2aQBcJg48z0a4nm85xALPM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:64:25:5b:79:68:9f:c6:74:44:d2:b7:fb:9c:d4:11:03:88:
20:e9:43:3f:87:78:86:00:c1:d3:92:f2:fd:b8:e2:86:75:84:
ce:ef:0f:0f:37:19:8b:2d:6f:8f:ee:23:c0:bc:e3:21:2e:ff:
75:aa:32:95:24:67:14:70:3e:da:33:b2:46:ef:66:72:31:19:
45:9c:80:9b:2d:0b:ae:4b:68:5e:1e:2f:7a:63:01:46:e3:86:
01:ba:1e:d6:d1:08:f0:db:93:43:ee:04:9d:eb:32:3d:8c:d3:
8d:ac:d0:7a:e5:e5:ea:91:6b:26:70:06:2b:12:81:dd:c0:1b:
55:73:a5:5f:f3:d9:97:0e:3f:ab:b9:ea:d0:43:ff:41:bb:c6:
3b:2a:8a:4b:ad:b8:8f:80:b8:79:74:5f:ca:5e:8c:f9:3b:9b:
17:28:aa:0a:83:93:cd:30:c0:ff:52:d1:33:67:66:62:27:3e:
7f:e1:ce:a3:ed:bb:d2:10:7e:82:53:2c:44:72:66:d8:c4:7a:
50:9d:1e:e4:40:1d:f1:ea:3d:9d:04:b8:a4:84:06:f6:eb:37:
0f:f7:bf:0e:c7:b2:89:d3:69:1a:57:54:09:3b:5f:d5:25:46:
c3:f4:b0:ff:f5:45:57:0c:78:86:50:c1:c0:64:6a:45:d3:37:
2c:64:e2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:09:49 2026 by rpki-client