Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
File: i4-7JMKLohFyEvDTJzo8KkwnzBI.mft (raw, json)
Hash identifier: 60fZxod2sC5xiTzWxUzq9WLoMw1D9tz+69RzDrSHE1c=
Subject key identifier: 31:58:28:BB:E2:EE:13:97:08:B0:0E:6B:5D:C0:3F:74:38:16:3D:35
Authority key identifier: 8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
Certificate issuer: /CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Certificate serial: 01A0BB424A3B0DA70D61CB0E60AB1D7D00DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
Manifest number: 0FDD
Signing time: Sat 19 Sep 2026 20:01:18 +0000
Manifest this update: Sat 19 Sep 2026 20:01:18 +0000
Manifest next update: Sun 20 Sep 2026 20:01:18 +0000
Files and hashes: 1: i4-7JMKLohFyEvDTJzo8KkwnzBI.crl (hash: EDrfkkZvSBtEfBMpRVz1Vv0j0pwyu2U1qEZ6pwKWiDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 20:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bb:42:4a:3b:0d:a7:0d:61:cb:0e:60:ab:1d:7d:00:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Validity
Not Before: Sep 19 20:01:18 2026 GMT
Not After : Sep 20 20:01:18 2026 GMT
Subject: CN=315828bbe2ee139708b00e6b5dc03f7438163d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:af:dc:9d:23:d7:f5:80:3b:28:e9:22:03:
ca:d1:a6:58:45:8c:24:cb:e1:12:a0:67:a6:e6:90:
9f:0a:85:60:77:33:30:45:8e:d6:8d:cd:a8:d5:95:
c7:6e:b6:64:9d:4c:fe:0c:49:ca:59:bf:03:d1:fd:
4b:67:50:98:bb:41:1f:b3:5f:28:22:d7:1a:9d:58:
4b:e6:a8:98:d0:d8:2b:f8:da:0d:c0:25:7a:60:28:
88:46:2c:f6:5c:bd:37:da:f4:64:d0:31:96:9f:54:
4e:67:70:a4:a5:07:1a:a1:ae:2d:e8:8e:76:29:83:
bf:c8:51:1e:7a:85:45:48:63:87:8f:12:00:eb:4e:
b3:ff:86:5d:76:cf:6d:14:52:b9:31:b3:c7:c4:80:
e7:38:20:d2:d6:02:15:d6:ba:46:ac:1b:44:2e:a6:
04:75:84:1b:c1:bc:be:e6:9c:99:53:4b:c9:cc:93:
e1:16:ab:57:cb:ae:a9:b0:bc:28:10:8b:d7:32:98:
a2:70:ac:9e:13:20:7b:fd:86:4b:5e:31:b7:2a:f0:
2d:69:05:e0:54:4c:f9:a7:b1:f6:85:df:ef:76:4b:
5b:e2:13:43:82:d6:6c:94:42:30:13:7f:12:83:91:
f0:49:e4:c7:0d:58:eb:3e:84:d1:4b:f2:cd:74:e4:
98:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:58:28:BB:E2:EE:13:97:08:B0:0E:6B:5D:C0:3F:74:38:16:3D:35
X509v3 Authority Key Identifier:
keyid:8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1b:ba:d0:ab:45:be:68:7c:35:09:6c:5d:77:2d:4f:cd:2c:
61:6a:43:cc:cb:70:a2:74:c7:56:19:b9:c0:ed:61:de:8f:da:
c9:6c:28:da:8d:f2:e2:71:c3:0d:f3:6d:78:2e:2d:d8:01:a7:
15:c6:87:a6:a0:cf:99:d6:72:bd:99:ed:f9:15:9d:05:a0:45:
e6:73:d5:6b:af:25:2b:6f:22:7a:c8:7f:0c:91:c7:46:0e:39:
66:d8:de:ad:45:3a:cc:fa:26:02:4c:b3:45:13:de:28:0b:9b:
7f:de:c3:60:7b:86:3a:2f:24:8a:df:5b:f1:f3:4d:9d:2e:33:
4d:15:59:c6:f4:61:38:86:4c:93:5c:5c:5f:e1:6a:94:d5:02:
3e:52:dd:c3:2f:b6:b8:da:3f:61:db:a8:60:0c:f9:14:ee:3c:
26:2d:87:43:31:b6:77:34:d0:78:b8:86:2a:d3:9b:63:d3:43:
a5:88:ff:c5:18:f5:cb:19:f2:cd:c2:08:c5:d7:fe:65:fd:5d:
33:ba:a1:ad:96:57:a2:06:1b:fe:e9:1e:03:2c:24:92:a5:74:
a9:e5:1f:c9:2c:7f:fa:0d:4c:ee:c4:59:df:1f:0f:68:7f:df:
d5:58:bd:a2:c0:29:44:44:6c:52:6d:18:28:ae:7a:3e:af:67:
56:57:da:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 03:53:53 2026 by rpki-client