
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
File: 4WU0PZW9Tbww89ciSVQanUfnbZE.mft (raw, json)
Hash identifier: 4qHmivCOuC1yyrk4s7JTGp6+oouulToye7EwNEDiUpQ=
Subject key identifier: 83:0A:90:18:7C:46:E5:4F:1F:3E:6F:D1:33:67:AD:61:B2:58:E3:BE
Authority key identifier: E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91
Certificate issuer: /CN=e165343d95bd4dbc30f3d72249541a9d47e76d91
Certificate serial: 01A13DB8C397A22BD6D8A19751337C71E95A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
Manifest number: 13A7
Signing time: Thu 15 Oct 2026 04:01:20 +0000
Manifest this update: Thu 15 Oct 2026 04:01:20 +0000
Manifest next update: Fri 16 Oct 2026 04:01:20 +0000
Files and hashes: 1: 4WU0PZW9Tbww89ciSVQanUfnbZE.crl (hash: uwSKIoFk+V/3CxDRV3fibZAkgmP9la/6Jrk9LD/AFms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:c3:97:a2:2b:d6:d8:a1:97:51:33:7c:71:e9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e165343d95bd4dbc30f3d72249541a9d47e76d91
Validity
Not Before: Oct 15 04:01:20 2026 GMT
Not After : Oct 16 04:01:20 2026 GMT
Subject: CN=830a90187c46e54f1f3e6fd13367ad61b258e3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:93:52:3a:de:93:76:b2:a2:6c:ea:c5:3b:c7:
31:f5:25:32:e5:b8:75:a6:f9:08:f4:f5:52:ec:85:
2e:e5:db:e4:d0:95:f1:58:49:e8:41:63:27:be:8c:
10:d3:83:df:52:30:fb:7a:7b:ce:8a:2a:5c:46:15:
5b:d0:45:3d:45:9f:d3:aa:41:7a:88:0d:1c:b3:75:
a0:1b:ce:e6:c6:4a:d1:14:9a:85:94:7f:e2:1a:70:
09:e8:89:6d:16:db:83:e5:16:e4:2d:b7:d6:b3:a2:
da:51:99:81:fb:a4:53:e7:ba:70:82:2e:5d:c9:80:
fc:e2:05:bd:ca:e0:fe:e8:0e:eb:16:7f:52:63:24:
10:50:26:2f:2f:10:fa:e4:40:18:54:d5:ba:64:1a:
e3:24:fe:20:1c:99:f9:d4:88:7b:38:41:65:e4:02:
66:1d:61:a6:1b:d8:a5:f7:28:96:98:8a:04:93:0c:
f6:4e:5a:52:5b:ff:fa:60:63:1d:e9:ee:21:6d:86:
e4:14:e8:12:07:8b:e2:94:84:e3:4b:3f:27:5d:39:
ef:09:68:c2:92:44:4a:02:1d:17:1d:aa:89:63:b7:
7c:db:5b:9a:ad:97:ee:b4:f4:48:69:19:ef:3b:dd:
7f:23:40:eb:66:47:8a:10:43:57:03:f7:23:45:f0:
f1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0A:90:18:7C:46:E5:4F:1F:3E:6F:D1:33:67:AD:61:B2:58:E3:BE
X509v3 Authority Key Identifier:
keyid:E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9b:d6:a6:03:de:53:30:7c:0e:13:41:f1:b1:f2:31:a3:33:
2c:ff:3d:fa:7b:6c:58:c1:47:b4:e6:94:f7:20:1b:97:91:e7:
12:9c:57:c7:58:0b:43:c2:5e:87:ae:ee:a8:63:d6:9c:4c:27:
49:b8:dc:69:d0:26:fc:87:52:ab:45:38:f7:50:c5:0b:34:be:
40:63:ba:ab:98:d6:f1:34:ab:d9:c3:14:8c:11:02:98:ea:76:
6b:26:d1:c6:89:9d:e4:31:28:cc:2d:33:29:7a:47:85:79:4f:
52:fc:b6:dc:a5:8c:f2:9e:a5:1d:20:9f:f8:4e:c0:6b:70:54:
0a:26:80:c7:35:a5:e5:8a:f3:08:84:cd:45:a5:68:0e:5c:6e:
cc:1b:69:f2:4a:19:c5:ea:ea:a3:91:a0:0e:8b:2f:35:b5:3a:
57:13:72:d2:d1:3c:fa:44:c9:56:55:71:77:cb:d3:be:44:b7:
f6:4d:50:ae:d3:aa:4a:5b:6b:61:2a:c1:48:d2:f0:39:c9:48:
39:4b:65:42:95:59:a8:fb:b1:ac:bb:8d:b2:ca:67:15:09:aa:
a6:4c:2a:ad:89:2a:94:01:35:12:e7:4b:76:88:0e:98:6d:1b:
4a:0f:4a:4a:c8:a9:41:4d:e5:ed:04:de:ec:bc:e1:f3:14:bb:
49:87:f3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:21:13 2026 by rpki-client