Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
File: 4fI_OJG9feF53kEDCi_R-ljkPRc.mft (raw, json)
Hash identifier: fuvogQYUdcMsEqsO0VP/54zftQEOx3YX1wvtobnu/T4=
Subject key identifier: A8:82:6A:56:B7:C7:D8:06:B2:64:45:0F:79:D4:B2:C8:6D:CC:0C:C9
Authority key identifier: E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
Certificate issuer: /CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Certificate serial: 019E2FCD4A0CBAC6A8FD6C25A0B1C78F2300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
Manifest number: 072B
Signing time: Sat 16 May 2026 08:00:43 +0000
Manifest this update: Sat 16 May 2026 08:00:43 +0000
Manifest next update: Sun 17 May 2026 08:00:43 +0000
Files and hashes: 1: 4fI_OJG9feF53kEDCi_R-ljkPRc.crl (hash: Q100C2DrLBKOb1XRFtsj3RdC9KDGMbvkfkXU98LA6q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:4a:0c:ba:c6:a8:fd:6c:25:a0:b1:c7:8f:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Validity
Not Before: May 16 08:00:43 2026 GMT
Not After : May 17 08:00:43 2026 GMT
Subject: CN=a8826a56b7c7d806b264450f79d4b2c86dcc0cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c9:4f:6e:27:03:8b:01:2a:52:63:78:30:05:
f3:e3:22:0c:fd:d2:e0:93:a4:cd:d1:ee:23:f0:54:
96:11:0d:d2:c0:67:60:d7:71:16:db:13:58:05:ae:
86:95:a9:fb:89:6e:9a:de:b1:4e:fd:8a:26:86:64:
94:5c:88:22:2b:6e:6d:57:24:8c:46:16:c7:ab:de:
6a:21:e9:ca:73:bd:8e:df:46:10:8c:78:5b:54:ec:
31:f7:40:c1:d0:c5:dc:f9:5b:4d:f6:b9:f5:49:6c:
42:61:ba:38:95:1f:b2:e0:18:82:75:c3:66:e6:8b:
08:2e:af:6b:96:e4:7a:7d:a4:fd:5a:fd:be:9d:f0:
57:fa:5d:7a:7c:5e:1b:ee:86:06:cb:06:4b:0a:c0:
fb:a8:73:38:e0:33:10:0b:87:2b:17:09:73:6a:ed:
3e:3e:29:c3:d8:0b:6c:cb:64:ca:93:41:32:d6:e8:
32:0b:af:99:6a:f8:ef:66:d2:77:3e:b6:02:a5:49:
cc:76:bb:36:69:8b:5e:45:e4:a0:41:1a:d3:e9:c8:
91:d6:1e:c1:8c:fe:3e:eb:df:7e:04:86:37:e4:45:
64:2a:ea:44:c3:89:9d:f6:b3:4a:9c:3f:52:70:d6:
06:86:f8:03:03:24:c0:48:21:bf:b4:ed:50:f5:61:
43:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:82:6A:56:B7:C7:D8:06:B2:64:45:0F:79:D4:B2:C8:6D:CC:0C:C9
X509v3 Authority Key Identifier:
keyid:E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:15:4e:d0:f3:e6:67:cf:58:b7:b7:23:13:7f:ea:1c:35:2b:
f6:e3:a8:50:19:37:75:db:57:a4:8b:b0:7b:ca:14:64:59:a8:
b7:7a:6f:0f:8f:41:5a:a8:ba:2e:c3:7c:91:f2:bc:a2:d8:be:
8d:38:0c:a5:f8:5d:dc:cf:74:96:d1:2a:34:ab:61:69:18:e4:
5d:4d:ca:8b:69:fc:05:3d:0a:d0:ea:f9:3d:5a:d3:71:d4:0b:
55:18:5f:cf:8f:84:a8:57:bb:5f:78:3a:b9:16:fb:c3:3b:26:
c4:4e:2d:5b:72:70:97:b1:d4:9c:69:a9:74:c5:d9:87:3f:38:
cd:ac:20:50:6b:5d:5b:2a:03:65:79:16:69:c7:35:ce:6d:50:
dc:7f:f6:3d:9c:a6:1d:fe:42:e5:91:80:22:a9:ae:28:e2:1f:
e3:df:02:12:7c:b7:b2:84:3c:ed:db:a3:c8:05:d8:53:cb:97:
6a:4e:7f:7c:f4:58:39:92:05:78:e7:09:3f:6f:fa:43:4d:4f:
97:d3:ad:2c:46:86:a1:a4:89:a5:d3:eb:4b:da:7e:58:92:de:
4d:6b:ae:9c:6b:1d:b6:9d:17:b4:37:39:2d:31:96:2a:85:da:
80:4c:2a:0f:97:a0:86:31:2a:14:e7:3d:f1:4b:18:02:d3:d0:
00:9a:b8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:34 2026 by rpki-client