Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft
File: 4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft (raw, json)
Hash identifier: ZDJdCE+XLJhwH9uByyw+T4Zm1j+Z4s5SWwGIl4dDKqA=
Subject key identifier: C9:E2:3D:56:48:63:BA:39:90:05:8B:50:A5:A2:92:F1:11:2B:6B:DF
Authority key identifier: E0:B0:EC:99:26:89:6B:A1:25:BE:8F:A4:AE:BE:EA:8F:D3:09:B8:B4
Certificate issuer: /CN=e0b0ec9926896ba125be8fa4aebeea8fd309b8b4
Certificate serial: 01A03FE03DBA9B9C02A8DEDA6442E8428024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LDsmSaJa6Elvo-krr7qj9MJuLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft
Manifest number: 02FA
Signing time: Wed 26 Aug 2026 21:00:55 +0000
Manifest this update: Wed 26 Aug 2026 21:00:55 +0000
Manifest next update: Thu 27 Aug 2026 21:00:55 +0000
Files and hashes: 1: 4LDsmSaJa6Elvo-krr7qj9MJuLQ.crl (hash: Q99GYghRvFOjO9XQG3bVqS5UWufNlIy3MrhujvwW3is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4LDsmSaJa6Elvo-krr7qj9MJuLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:e0:3d:ba:9b:9c:02:a8:de:da:64:42:e8:42:80:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0b0ec9926896ba125be8fa4aebeea8fd309b8b4
Validity
Not Before: Aug 26 21:00:55 2026 GMT
Not After : Aug 27 21:00:55 2026 GMT
Subject: CN=c9e23d564863ba3990058b50a5a292f1112b6bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:69:e0:d5:3c:4b:94:9a:d3:8a:11:15:65:ea:
09:94:99:66:76:95:fd:fa:22:ab:28:15:05:60:a1:
3d:d1:3f:e2:13:8e:32:91:2c:49:fa:3f:79:8c:08:
20:b2:08:bc:56:e8:2b:3e:ad:59:78:9f:ae:a3:ce:
ec:8f:91:ed:5b:f9:b9:59:21:32:1d:6d:60:e7:68:
6c:5f:ed:b1:79:43:11:a9:af:9d:53:34:70:34:6b:
b1:c3:bc:c1:b5:5a:5e:55:08:c3:30:f9:29:9d:5e:
6b:2d:e0:7b:af:00:56:2d:e3:28:f7:68:af:88:ec:
1b:a6:05:86:ab:e6:fc:5a:07:4a:6b:89:70:4e:ce:
fe:30:81:95:b2:b2:b4:17:63:db:c6:f0:28:c8:92:
2c:82:6a:25:ff:df:f5:8a:97:56:47:ef:44:cb:88:
95:9d:b9:90:12:d2:be:f4:df:4d:ca:59:d1:a2:9a:
79:41:c1:3d:4b:00:58:8b:21:54:07:23:a4:d7:11:
72:16:6a:69:a5:c9:1f:8c:77:28:a1:91:85:44:38:
52:38:1b:e6:33:0c:19:2c:8d:ff:66:37:77:4e:1c:
ca:cd:c4:1e:14:67:e6:d8:28:7d:44:73:b3:10:b1:
5a:3e:1d:00:98:be:e4:85:5f:a0:0b:d9:87:d3:d0:
92:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E2:3D:56:48:63:BA:39:90:05:8B:50:A5:A2:92:F1:11:2B:6B:DF
X509v3 Authority Key Identifier:
keyid:E0:B0:EC:99:26:89:6B:A1:25:BE:8F:A4:AE:BE:EA:8F:D3:09:B8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LDsmSaJa6Elvo-krr7qj9MJuLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:13:77:67:2c:7c:cb:60:cd:5c:09:4f:73:27:96:a1:cd:02:
45:6b:9e:be:84:97:77:da:a3:16:8f:a0:ec:fe:44:23:f5:b5:
e2:30:84:e7:c8:38:c8:6f:ca:31:c8:90:1a:6e:f4:36:cc:60:
73:f6:7e:dc:cd:8d:61:b2:cd:96:64:57:76:c3:1a:a3:09:40:
ba:f3:88:21:86:4f:02:d2:a4:8b:29:bf:2b:e6:2f:02:62:18:
2a:7d:80:6a:fb:26:cc:f8:d3:61:fb:9f:6d:8b:09:de:17:03:
f2:bb:46:14:14:16:71:e7:54:15:4c:a7:de:7e:bc:46:d6:71:
06:e1:18:25:ff:6c:4d:a7:9d:20:a8:94:ab:6c:98:92:a4:85:
30:91:3c:47:14:91:c1:7b:19:02:cf:c5:ff:1d:8a:ab:b8:59:
b7:61:6b:3c:93:94:e4:d3:72:b5:8e:37:0e:ca:2b:e1:9a:9a:
c0:be:65:ba:5e:36:d1:5b:aa:1c:1b:d2:8d:a7:73:b9:f3:3b:
0d:04:18:c7:4a:b8:6d:8f:89:10:62:ff:50:ad:de:a3:4e:59:
49:71:d7:62:cc:03:52:fa:35:6e:ae:22:1e:5c:57:f7:bb:fa:
1e:8f:ca:af:f6:2f:73:bf:03:cf:65:d5:3e:17:24:c8:08:e7:
b8:95:c3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:55:24 2026 by rpki-client