
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
File: 4eHrAgq2pUL2C1hXaYctnwYXryY.mft (raw, json)
Hash identifier: cFUyn8+Ba92Ld3WRoo5TDq3IOEl1l7HQs/PryNteDCo=
Subject key identifier: 24:38:4A:67:E5:09:91:C5:DA:CF:F3:DB:2A:A3:AE:0D:C1:E8:2A:72
Authority key identifier: E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
Certificate issuer: /CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Certificate serial: 01A13DB8231AEA75426FEFB8800CE9F1E748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
Manifest number: 0CB3
Signing time: Thu 15 Oct 2026 04:00:39 +0000
Manifest this update: Thu 15 Oct 2026 04:00:39 +0000
Manifest next update: Fri 16 Oct 2026 04:00:39 +0000
Files and hashes: 1: 4eHrAgq2pUL2C1hXaYctnwYXryY.crl (hash: Y8UTXlNhYVeBSCFSPlY0l7DmvcU435PlFliUN1mVBDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:23:1a:ea:75:42:6f:ef:b8:80:0c:e9:f1:e7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Validity
Not Before: Oct 15 04:00:39 2026 GMT
Not After : Oct 16 04:00:39 2026 GMT
Subject: CN=24384a67e50991c5dacff3db2aa3ae0dc1e82a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:33:cf:88:5c:0f:66:12:24:34:e9:28:7b:05:
5f:41:88:d4:6b:1d:5c:c3:b8:1e:55:b1:1f:71:29:
5f:aa:e1:af:7f:d6:86:16:fe:0a:c6:ff:5e:24:d5:
98:be:25:06:6e:15:6b:56:2c:d6:90:66:d4:3d:17:
9e:5b:a0:a6:34:35:3d:3a:dd:c9:4a:b3:1b:59:1b:
98:d9:33:85:c0:c1:8d:d2:6f:62:75:c4:18:f8:93:
74:74:fa:ac:41:5f:04:71:e4:8d:52:c8:14:01:bd:
50:1b:75:06:b9:ed:ae:7f:11:68:77:3e:74:9a:61:
47:99:81:cf:ab:3b:ce:8a:fd:3b:9d:2c:bb:db:88:
74:d6:22:b8:f3:b8:c2:48:60:0b:e1:63:4b:5f:3a:
b8:ac:40:d6:0c:60:92:8a:c4:89:c5:cc:9e:d4:94:
92:48:1f:15:10:55:77:05:d6:f6:ff:d2:f4:38:46:
61:12:57:c3:a0:cc:a2:f0:ac:fb:c2:af:93:19:2b:
14:9e:40:a6:73:58:ac:96:48:c4:73:17:c6:e9:1b:
47:41:41:a5:80:1d:b3:a5:ba:4e:7a:24:49:ba:11:
c8:cb:52:a3:1a:9c:fc:6c:04:d6:b7:0e:d0:d8:c1:
f4:e5:9b:ad:14:a4:20:c8:75:83:d6:2e:cc:93:21:
4b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:38:4A:67:E5:09:91:C5:DA:CF:F3:DB:2A:A3:AE:0D:C1:E8:2A:72
X509v3 Authority Key Identifier:
keyid:E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ac:49:a6:b2:f5:bc:5a:75:a9:e3:8f:98:a7:fe:aa:8e:61:
31:c0:3d:90:5c:fd:85:c4:01:a2:19:b5:7e:5f:d4:e9:97:31:
ef:33:8b:71:9c:14:89:1d:2d:cf:9e:cc:30:cc:94:c7:e5:c2:
7f:d2:f0:e3:2d:93:42:d4:e5:c2:16:d0:98:e5:31:52:a2:dd:
02:a6:a7:82:c1:e4:e2:c3:46:56:ee:07:06:b4:a7:b4:ea:a9:
a8:e1:f2:b1:60:53:c2:e6:30:ef:5b:ef:18:6b:9c:bc:5d:f8:
20:7a:d7:fe:2d:d3:a2:96:c3:98:7d:a9:30:7c:e8:9d:9d:74:
fb:75:5a:25:90:86:a2:67:c3:4f:87:ee:16:05:19:c3:49:b9:
38:9b:42:c7:7a:8b:ac:40:8e:e6:4e:bf:02:d8:7b:76:d8:80:
59:d4:f1:56:20:87:09:d7:2f:88:16:bb:92:4f:75:8f:8a:9d:
59:38:62:f8:b5:b4:76:ae:f8:c5:3f:8f:ff:80:d6:27:3e:7b:
a1:27:f9:3f:fc:17:91:78:18:14:1a:03:5c:2e:ba:45:de:f1:
ac:37:ef:68:62:52:67:22:02:c4:53:b8:8e:35:32:78:cc:32:
b1:0d:52:0e:9d:56:d6:99:23:79:c4:4b:00:de:5a:be:05:56:
44:d1:fe:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:06 2026 by rpki-client