Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
File: a4T-xJBquJAgoRa2hEbM6vbMUA8.mft (raw, json)
Hash identifier: HcJ6TZrvFMyjZRjmveTwUiDMQ3ioA3o57ncv5G9tQHg=
Subject key identifier: C0:24:08:2B:E2:A4:28:F4:D5:7A:24:66:F3:B6:97:5F:F7:02:70:66
Authority key identifier: 6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F
Certificate issuer: /CN=6b84fec4906ab89020a116b68446cceaf6cc500f
Certificate serial: 019D389C5AA6EC43E9F93E14FE79172F4A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
Manifest number: 0E17
Signing time: Sun 29 Mar 2026 08:01:04 +0000
Manifest this update: Sun 29 Mar 2026 08:01:04 +0000
Manifest next update: Mon 30 Mar 2026 08:01:04 +0000
Files and hashes: 1: a4T-xJBquJAgoRa2hEbM6vbMUA8.crl (hash: HZBKPAeLvsuxvXf3Mw/B0Ttu/i+YvYz0JVRAnmvnZ/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:5a:a6:ec:43:e9:f9:3e:14:fe:79:17:2f:4a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b84fec4906ab89020a116b68446cceaf6cc500f
Validity
Not Before: Mar 29 08:01:04 2026 GMT
Not After : Mar 30 08:01:04 2026 GMT
Subject: CN=c024082be2a428f4d57a2466f3b6975ff7027066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:de:1c:16:3d:3e:d9:a3:a4:c4:68:09:3b:
b7:c6:bb:53:26:74:84:94:d9:2c:3a:1b:b9:10:19:
28:7e:1a:6e:9d:16:e8:0a:39:11:b6:25:07:43:f7:
aa:2e:a7:63:f3:67:35:ed:6e:32:46:bc:cf:4f:39:
e8:6f:b3:a0:e6:d8:12:49:b5:38:50:06:27:5d:c2:
8b:65:c3:d9:d2:f9:c9:20:48:41:0d:c0:9d:09:56:
f3:d2:d7:1e:e5:5a:1e:59:6e:ab:8f:89:26:9b:92:
ea:18:d6:e9:bb:44:19:36:b6:2c:6d:57:99:1f:a9:
80:4f:b6:f2:37:81:39:f1:41:22:8f:d5:a4:8d:db:
05:de:e0:be:8d:03:5c:0a:8f:a9:00:61:64:88:41:
2d:4b:eb:58:80:90:ae:25:7f:72:23:7f:e0:68:0d:
f9:87:91:a6:6e:4b:b2:28:83:29:7c:a9:2f:63:f0:
96:ad:4b:61:f9:9a:51:d7:83:9b:ad:fd:cd:87:97:
cc:3d:32:d7:ce:18:8c:f4:d0:0f:48:a7:8d:fb:6f:
5a:56:76:d2:af:9d:2e:69:ad:6d:f0:c9:69:c3:80:
00:94:0c:d2:b0:47:6d:ff:68:38:71:03:86:ba:36:
48:40:f1:e2:7a:28:b0:e9:37:68:24:8b:43:00:7f:
9f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:24:08:2B:E2:A4:28:F4:D5:7A:24:66:F3:B6:97:5F:F7:02:70:66
X509v3 Authority Key Identifier:
keyid:6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2b:88:bb:26:57:1d:8f:9a:69:a5:b3:d2:83:ab:37:72:d4:
77:cb:0f:0c:ab:b8:d8:dc:fe:32:c5:99:f3:87:42:13:0a:44:
71:67:4c:98:4a:99:f5:bb:57:2e:09:a8:1d:c7:5a:73:ca:96:
d1:ce:9d:ec:90:b9:27:8b:ef:d2:c5:ac:cb:99:1f:23:f8:ca:
dc:8f:76:37:64:ea:af:03:ee:43:18:56:7b:1f:4d:8a:76:0c:
f2:31:27:93:a0:24:e2:5f:ce:36:7d:2b:24:aa:50:dd:e0:7c:
7a:48:c0:c4:8f:53:1e:98:2e:f5:80:a7:31:18:2e:24:12:54:
fd:ca:fb:fc:0e:e4:2a:63:65:c0:92:3c:d3:3e:8e:87:38:a9:
9d:09:1f:5d:ba:c9:91:9f:37:6f:30:08:20:72:c8:33:e0:cb:
90:c5:56:14:38:f2:4a:87:e4:dd:b6:ff:32:28:20:d8:cc:d1:
42:04:41:86:cf:27:0d:84:ff:e7:81:5f:aa:3c:e1:eb:e9:de:
32:89:bf:65:1d:1f:2b:80:e6:42:4d:0a:52:d7:d0:19:09:8e:
31:3c:99:39:af:cb:7b:ad:3c:e5:df:0c:9f:55:7d:9e:ab:84:
45:b4:0b:ea:33:90:4d:78:b5:1b:de:88:a1:32:2c:4e:66:ab:
94:ee:a2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:46 2026 by rpki-client