Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
File: 4eHrAgq2pUL2C1hXaYctnwYXryY.mft (raw, json)
Hash identifier: PKiQk+7YTIqhGmcVuMUYssEltEjF5fJ4IkDnEDYIubA=
Subject key identifier: 6D:4F:C0:B7:F0:28:20:42:C5:4C:EC:48:AE:25:6A:B8:CA:CA:B0:41
Authority key identifier: E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
Certificate issuer: /CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Certificate serial: 019D3865E9BF484E5B54901FA490C463B74D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
Manifest number: 0A9E
Signing time: Sun 29 Mar 2026 07:01:36 +0000
Manifest this update: Sun 29 Mar 2026 07:01:36 +0000
Manifest next update: Mon 30 Mar 2026 07:01:36 +0000
Files and hashes: 1: 4eHrAgq2pUL2C1hXaYctnwYXryY.crl (hash: JpdNP0HV0vBVwc9XdA0oEIHPhYIMYq+6nrpdvYoumzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e9:bf:48:4e:5b:54:90:1f:a4:90:c4:63:b7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Validity
Not Before: Mar 29 07:01:36 2026 GMT
Not After : Mar 30 07:01:36 2026 GMT
Subject: CN=6d4fc0b7f0282042c54cec48ae256ab8cacab041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8d:eb:59:f6:0d:e1:94:f1:7a:e6:c4:6d:b5:
78:68:aa:03:58:e6:82:18:3a:71:b8:f0:2a:62:84:
7e:1c:5b:c5:b5:00:e3:09:65:05:5d:9f:86:61:02:
d0:b2:36:54:fb:8f:d0:cc:29:bb:c2:7b:f3:ab:4e:
67:9c:68:f9:34:a9:61:b1:4f:b6:3c:a2:72:39:39:
61:27:9a:c6:e5:72:e3:f6:b2:57:99:98:89:f9:d8:
72:04:9d:98:f3:59:df:d8:69:a7:1e:cd:53:2d:39:
7e:fe:d9:a9:e0:9e:a9:d6:91:71:d6:1d:21:a1:0d:
63:83:2b:f7:83:6a:d2:fe:74:98:a6:83:e5:77:68:
4e:60:72:25:f0:21:a3:10:65:e9:cf:78:2e:2d:bc:
10:1b:a1:46:63:0e:2f:2d:bf:81:9e:1c:1c:75:3b:
d6:7a:89:89:63:c8:76:2c:68:a1:7f:d6:53:a1:5d:
79:6e:37:dc:3f:27:3f:56:99:c1:d5:fd:7a:12:5a:
f0:23:e1:0b:c3:f0:ac:a9:df:e7:91:59:ce:7e:ce:
85:76:72:86:03:c1:0c:de:09:b4:cc:3d:90:2b:b6:
68:60:58:24:06:bb:cb:35:74:c4:77:77:b6:55:12:
29:e0:86:e4:28:64:6f:1d:e9:0d:3d:24:17:eb:8c:
9c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4F:C0:B7:F0:28:20:42:C5:4C:EC:48:AE:25:6A:B8:CA:CA:B0:41
X509v3 Authority Key Identifier:
keyid:E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:58:43:7c:57:36:8e:2d:b1:c0:58:eb:d0:5f:bd:08:44:ae:
ad:37:66:11:6e:5c:97:65:10:95:56:46:74:e2:92:ac:12:06:
02:7d:00:71:e6:e4:15:26:ab:76:e4:f2:2b:31:be:92:e3:f9:
a9:a5:98:47:d8:4e:90:15:db:e7:8b:8b:e8:c6:d6:f5:03:a9:
a0:e1:61:ca:40:49:06:9b:78:a5:52:9f:e0:f9:e5:9f:f1:63:
85:b3:d4:24:a3:79:d2:a5:d1:ad:ee:e5:64:14:27:47:e2:2e:
13:02:96:cb:60:7f:a5:2d:32:c2:af:04:08:f9:db:89:b1:9b:
01:91:df:03:7c:d1:f3:18:bc:06:2e:08:6d:ad:75:1f:83:2f:
cd:9c:6a:2f:32:7f:3e:0c:cd:08:f6:fe:a1:e2:39:43:05:db:
3d:68:69:6d:50:e9:b9:78:c7:b9:26:89:8e:ed:71:f5:e9:90:
10:9e:08:b9:48:2f:1c:34:3b:86:d6:fe:45:81:51:c7:0f:e3:
6a:c1:a0:9d:86:94:36:f8:94:13:65:e1:6b:80:20:99:81:c8:
a9:58:06:8b:d1:e0:4b:85:01:5e:ea:31:75:12:10:4d:05:d2:
3b:ad:83:a4:7d:db:66:ea:79:a1:68:da:d8:29:1c:1b:9b:0d:
7e:a9:ae:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:58 2026 by rpki-client