
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft
File: 4V293KWBZpetEkXADKt2ryHsLjs.mft (raw, json)
Hash identifier: hdwtRsYtUrLngeXTcs5kQPHAZQ7JdWvztSICjvFMbH4=
Subject key identifier: C3:64:34:4A:4C:A8:13:C7:83:5F:34:F6:90:95:FA:61:65:5E:80:4F
Authority key identifier: E1:5D:BD:DC:A5:81:66:97:AD:12:45:C0:0C:AB:76:AF:21:EC:2E:3B
Certificate issuer: /CN=e15dbddca5816697ad1245c00cab76af21ec2e3b
Certificate serial: 01A08A8C24B97D0F4D8AEECBD5EC3DD1C8ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4V293KWBZpetEkXADKt2ryHsLjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft
Manifest number: 1A43
Signing time: Thu 10 Sep 2026 09:00:35 +0000
Manifest this update: Thu 10 Sep 2026 09:00:35 +0000
Manifest next update: Fri 11 Sep 2026 09:00:35 +0000
Files and hashes: 1: 4V293KWBZpetEkXADKt2ryHsLjs.crl (hash: w7kT9Lju1WIh8wcmOHWRzliSAF1TF+cEAQ/JO38E5v4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4V293KWBZpetEkXADKt2ryHsLjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:24:b9:7d:0f:4d:8a:ee:cb:d5:ec:3d:d1:c8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15dbddca5816697ad1245c00cab76af21ec2e3b
Validity
Not Before: Sep 10 09:00:35 2026 GMT
Not After : Sep 11 09:00:35 2026 GMT
Subject: CN=c364344a4ca813c7835f34f69095fa61655e804f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fd:6e:fb:e4:99:ce:ac:93:4f:a6:ff:71:4a:
32:47:f1:bc:39:70:6f:49:73:a2:72:8d:10:ee:d2:
e0:c1:c8:96:20:55:5b:49:df:9a:f2:5a:b8:40:d5:
b4:91:79:52:43:e3:78:00:08:34:14:dc:97:db:3f:
25:55:c9:31:02:5a:38:89:9e:f1:f0:cb:b3:66:1e:
11:70:73:c0:9c:a9:c3:b0:01:dc:e7:a2:3e:c4:9a:
22:9e:5a:74:b2:fb:7e:1f:df:b0:98:c4:28:f0:1d:
db:7b:ea:57:3d:e1:52:38:d2:0e:03:3a:ca:71:b4:
54:89:74:f4:fe:7f:d2:1b:d1:dd:56:3f:42:34:29:
8a:f2:25:41:08:b6:1d:72:07:fc:fd:61:84:06:56:
88:e2:8a:7b:ee:e9:57:b9:22:35:64:a0:ad:a9:6d:
cd:bb:8b:b6:e7:3f:38:94:15:ca:85:a0:0b:78:0b:
bb:b2:0f:81:d3:f6:1c:d7:87:86:b6:16:26:18:4b:
5d:e2:df:70:8d:0d:8f:6a:20:b3:04:2f:89:52:3c:
65:98:74:dd:f2:b0:84:ea:b4:d8:41:df:d4:c0:f5:
b9:f4:0e:d9:e7:48:15:da:85:bf:3a:38:57:74:a4:
bf:72:55:72:61:e8:6b:fa:63:f1:65:e9:91:a8:62:
38:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:64:34:4A:4C:A8:13:C7:83:5F:34:F6:90:95:FA:61:65:5E:80:4F
X509v3 Authority Key Identifier:
keyid:E1:5D:BD:DC:A5:81:66:97:AD:12:45:C0:0C:AB:76:AF:21:EC:2E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4V293KWBZpetEkXADKt2ryHsLjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4e:d3:1c:c6:77:7d:b6:e4:23:f0:99:5f:c0:10:13:55:8f:
83:c9:0c:ae:a0:62:bc:e8:ed:12:cc:34:50:00:7a:b0:cc:85:
af:60:b2:81:6a:bc:79:d8:18:a0:17:33:50:c5:c3:b9:98:9c:
64:90:f3:8a:b8:54:bc:50:a8:60:01:4a:5c:0d:dd:9b:95:83:
c6:cb:d1:51:69:43:7f:43:fc:af:df:50:f5:1f:cc:be:e5:3b:
0a:0d:60:b7:da:a7:bf:e1:35:d8:da:e4:e0:be:32:20:af:22:
b1:40:15:30:98:43:b3:ed:16:e1:c5:d4:d1:23:1c:ff:9c:32:
ea:3b:2b:5c:72:d1:56:d1:42:35:e9:85:c2:6e:ff:1e:61:ed:
94:d3:bf:d3:82:27:cd:3d:eb:c2:28:44:00:35:42:85:36:be:
c9:50:fe:9b:1a:9b:98:6b:eb:99:6a:b6:f5:5a:23:98:47:e7:
30:9a:3d:eb:be:bb:af:52:ae:cf:0c:b1:8e:ef:e7:de:ae:ec:
af:cf:80:81:c2:9f:61:5c:9f:41:74:d5:f2:88:60:cd:26:dc:
4f:d2:aa:f5:b9:17:04:bb:11:cd:8f:80:fe:55:f9:47:a7:25:
de:59:fb:b2:c4:11:9c:3d:3d:35:5a:be:64:41:53:34:22:c7:
25:8e:ad:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:35:15 2026 by rpki-client