Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
File: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft (raw, json)
Hash identifier: CoggTyPZZFI5AWQ5FMuUlN6yPoeB8RSxevoJ7IC7Bzs=
Subject key identifier: 4F:0B:53:D3:18:CE:06:B3:65:5E:74:03:52:5D:17:31:39:1F:C5:75
Authority key identifier: E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
Certificate issuer: /CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Certificate serial: 01A13DB84BED1BC64FDCC84A85E57340E803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
Manifest number: 1AA0
Signing time: Thu 15 Oct 2026 04:00:50 +0000
Manifest this update: Thu 15 Oct 2026 04:00:50 +0000
Manifest next update: Fri 16 Oct 2026 04:00:50 +0000
Files and hashes: 1: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl (hash: 4umhT0RmhREaozzCdXfFJAdtwrVJ1dr8nlYjfwtoRls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:4b:ed:1b:c6:4f:dc:c8:4a:85:e5:73:40:e8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Validity
Not Before: Oct 15 04:00:50 2026 GMT
Not After : Oct 16 04:00:50 2026 GMT
Subject: CN=4f0b53d318ce06b3655e7403525d1731391fc575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2e:12:97:27:81:e3:74:09:9e:6c:b8:c1:ca:
7b:94:95:87:c7:cb:68:17:81:4c:f2:43:d0:8b:63:
a3:e3:6d:10:3b:0a:54:59:ed:3e:65:f2:2f:94:a1:
49:d5:e4:31:2a:5a:31:ac:80:8c:f6:4c:cb:7f:6f:
cc:c5:a8:f6:27:ce:64:18:f3:76:a0:13:62:88:be:
ef:b4:f2:cd:75:cd:81:81:43:66:b7:a9:33:35:30:
b7:cb:36:ff:1a:c5:94:2a:3c:9a:5e:1c:05:9f:41:
01:44:c9:fd:42:98:22:36:d7:c3:ad:3c:6a:77:8b:
5d:48:18:31:72:8f:e8:7e:aa:80:4d:81:bf:72:d0:
38:76:0b:fb:0d:f4:f2:d1:a5:ef:1e:78:19:6f:04:
ca:d9:d4:83:81:af:24:34:cc:98:3b:c1:e1:fb:3e:
dc:b8:cb:d2:ac:91:e4:b8:32:08:45:bc:1a:96:b7:
b8:cc:5a:69:de:5a:05:1a:7a:8e:31:51:8b:1a:15:
4c:23:b4:9a:a1:ce:27:ba:90:98:61:f7:42:67:2e:
0f:c4:ad:37:41:b5:37:ad:79:66:e2:de:26:61:11:
89:c5:73:10:fd:ba:f5:f4:42:04:2a:bc:67:fc:83:
2a:bf:a0:8d:fa:26:54:a9:2b:71:32:0e:d1:81:b3:
38:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0B:53:D3:18:CE:06:B3:65:5E:74:03:52:5D:17:31:39:1F:C5:75
X509v3 Authority Key Identifier:
keyid:E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cf:96:c1:12:bb:90:06:e6:ca:2f:2d:7a:6c:d8:12:7b:b7:
ea:4c:39:9a:6b:76:60:db:bd:18:78:84:6a:99:7d:97:39:8d:
07:07:b2:90:9c:2d:c7:49:8e:a1:74:40:df:50:e4:d4:8b:b3:
66:25:70:05:a7:63:69:42:e6:90:dd:6b:28:79:75:8e:b3:b3:
2f:87:7d:c5:44:d5:59:ba:ea:d2:a2:50:af:fb:d2:c7:e1:fd:
d3:d7:11:10:55:05:dc:4c:63:01:7b:1a:f1:b5:09:ca:05:76:
35:e8:4f:23:47:d2:a3:17:fc:b6:48:f9:aa:37:5d:d4:66:dc:
4c:9b:e4:cf:7d:b5:b8:7b:62:35:17:07:5d:5e:80:c3:e6:b3:
8b:1a:e4:d0:cf:a3:c4:a1:db:4c:fd:92:cc:88:0f:60:4d:37:
76:30:b2:9a:cc:7f:5c:a3:7c:fa:98:c4:e3:27:2b:c0:0e:69:
73:03:be:5a:b0:0a:b9:89:f0:77:4c:5a:40:bc:f0:a2:d8:7d:
86:90:d6:de:06:c6:4a:b3:db:4a:74:b1:08:37:70:36:f6:a1:
9c:43:82:98:de:8c:f0:58:ed:bd:37:92:e2:35:ec:87:c3:cc:
b0:77:a5:1c:b2:77:6b:88:a3:74:05:89:47:10:71:d7:a8:29:
8c:f3:55:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:18:42 2026 by rpki-client