Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/8ea907-5602-47d0-a69b-023021b337aa/1/D44-IQzot2ABjgAdwdAZTY4U2l0.mft
File: D44-IQzot2ABjgAdwdAZTY4U2l0.mft (raw, json)
Hash identifier: Szsi7iyAoGeyXG8bylwQnj9/+F0wNG7rJYqSsx3MfFE=
Subject key identifier: AC:C6:4C:D9:15:F4:96:4F:39:94:E0:1E:A6:21:2A:78:D5:5E:E8:2B
Authority key identifier: 0F:8E:3E:21:0C:E8:B7:60:01:8E:00:1D:C1:D0:19:4D:8E:14:DA:5D
Certificate issuer: /CN=0f8e3e210ce8b760018e001dc1d0194d8e14da5d
Certificate serial: 01A0412ADF5267FC534C45FF786FBC01CD56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D44-IQzot2ABjgAdwdAZTY4U2l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8ea907-5602-47d0-a69b-023021b337aa/1/D44-IQzot2ABjgAdwdAZTY4U2l0.mft
Manifest number: 4E
Signing time: Thu 27 Aug 2026 03:02:03 +0000
Manifest this update: Thu 27 Aug 2026 03:02:03 +0000
Manifest next update: Fri 28 Aug 2026 03:02:03 +0000
Files and hashes: 1: D44-IQzot2ABjgAdwdAZTY4U2l0.crl (hash: FcprYaAaa6iRKfdyyltNhy/ACARylT8TdkVOFqBqn4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8ea907-5602-47d0-a69b-023021b337aa/1/D44-IQzot2ABjgAdwdAZTY4U2l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8ea907-5602-47d0-a69b-023021b337aa/1/D44-IQzot2ABjgAdwdAZTY4U2l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/D44-IQzot2ABjgAdwdAZTY4U2l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:df:52:67:fc:53:4c:45:ff:78:6f:bc:01:cd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f8e3e210ce8b760018e001dc1d0194d8e14da5d
Validity
Not Before: Aug 27 03:02:03 2026 GMT
Not After : Aug 28 03:02:03 2026 GMT
Subject: CN=acc64cd915f4964f3994e01ea6212a78d55ee82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:70:2b:a0:60:8b:d2:9b:3d:a6:4c:e5:dc:
fc:97:df:cf:c3:07:fe:2e:b1:d8:8a:f1:bb:ca:5a:
8e:95:c7:7f:67:9d:fd:57:bf:ad:67:23:6f:2b:f5:
5e:e3:a4:d8:25:17:65:03:8b:00:15:f9:e5:d3:83:
e9:eb:78:30:ca:db:59:99:fc:4f:24:41:c7:4f:a1:
33:32:39:57:b2:b9:87:d5:74:70:92:ed:5f:d3:e0:
72:b2:ac:76:e3:89:07:96:26:e0:e5:c8:30:c7:f7:
8b:7c:3f:a0:7e:5b:17:ac:af:70:3a:89:70:e0:fe:
e0:56:7e:04:f6:5b:e4:cc:e0:2f:5a:9b:86:f2:fe:
c4:5f:91:68:f0:54:c1:95:41:dd:f4:d7:13:d1:21:
f8:22:34:50:0b:bf:5c:01:77:2e:1b:41:70:b0:bf:
d4:d5:91:a3:50:fd:78:5f:60:0f:60:fc:79:11:27:
ae:36:55:a4:7b:1c:88:74:5b:0b:67:ba:21:24:63:
49:4a:32:cd:d1:d6:bc:87:51:78:5b:d6:64:fa:21:
6c:8f:de:87:56:de:f1:cd:30:07:54:d1:77:d6:b0:
ce:33:9c:3b:c8:94:5b:24:84:e0:1b:34:d7:66:52:
90:e5:aa:2f:30:09:16:00:86:64:64:a0:cb:71:ac:
ed:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C6:4C:D9:15:F4:96:4F:39:94:E0:1E:A6:21:2A:78:D5:5E:E8:2B
X509v3 Authority Key Identifier:
keyid:0F:8E:3E:21:0C:E8:B7:60:01:8E:00:1D:C1:D0:19:4D:8E:14:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D44-IQzot2ABjgAdwdAZTY4U2l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8ea907-5602-47d0-a69b-023021b337aa/1/D44-IQzot2ABjgAdwdAZTY4U2l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8ea907-5602-47d0-a69b-023021b337aa/1/D44-IQzot2ABjgAdwdAZTY4U2l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:bc:df:44:77:b5:36:a0:d6:9d:51:9a:c6:89:59:f6:c1:af:
64:d1:f3:47:c8:77:46:6b:3f:f5:ef:5b:ba:ca:02:36:57:28:
4e:35:eb:cb:6c:1c:37:b1:70:0e:a8:36:58:bb:5e:7c:83:a9:
44:d9:8b:da:4d:37:b0:cf:54:db:9a:32:21:d8:81:e9:9b:74:
79:35:28:f9:6b:88:53:02:87:ec:bb:ae:ae:e0:dd:cf:ad:dd:
85:ac:a6:37:88:8e:16:2f:3d:80:33:58:0d:c4:50:fe:a2:e0:
a5:6e:e2:28:50:17:0a:c8:c1:49:46:6d:91:43:33:dc:21:0e:
3f:29:8f:4d:1a:8e:c5:46:e7:ef:95:94:72:ad:ce:0b:13:25:
e9:af:e4:75:83:38:f0:0f:25:01:6c:0b:a8:d2:40:20:fd:c9:
1f:4d:4e:49:ac:77:d0:98:65:55:7f:f5:ff:8a:4d:f1:f2:6b:
30:96:64:de:85:53:a8:bc:db:cf:ce:64:ad:b4:f5:42:9b:80:
f3:85:32:80:e9:39:29:c8:3f:7a:0d:e1:4a:62:31:1a:6d:f4:
44:30:4e:65:47:a3:49:0e:27:96:9d:3e:2f:f5:36:25:d1:f3:
96:f3:9c:7c:e3:8a:de:6f:4a:6f:87:45:8d:e4:13:4f:60:52:
6c:4c:76:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:25:15 2026 by rpki-client