Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
File: 4fhh7IT8VurKm4xjbnkj5vktzOo.mft (raw, json)
Hash identifier: ircwzYDKQkv9aFeVFqG/4/O2oH3JxXH3N384cMD5UhM=
Subject key identifier: 7B:89:D9:D0:43:EA:4A:C9:BC:C9:4B:2F:48:DC:1A:24:49:4D:30:F5
Authority key identifier: E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
Certificate issuer: /CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Certificate serial: 01A13FA7BA39B4D1573277FDCB6679B6839F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 13:01:59 +0000
Manifest this update: Thu 15 Oct 2026 13:01:59 +0000
Manifest next update: Fri 16 Oct 2026 13:01:59 +0000
Files and hashes: 1: 4fhh7IT8VurKm4xjbnkj5vktzOo.crl (hash: FawdFRWjGWHcxWWESIcTMv/6s2yMkTHyHme5Hihk+HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:ba:39:b4:d1:57:32:77:fd:cb:66:79:b6:83:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Validity
Not Before: Oct 15 13:01:59 2026 GMT
Not After : Oct 16 13:01:59 2026 GMT
Subject: CN=7b89d9d043ea4ac9bcc94b2f48dc1a24494d30f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:4b:b2:cd:c2:62:8f:86:97:8c:92:38:0a:
27:81:e5:7c:42:bb:82:7b:6f:1d:ac:48:97:1e:75:
aa:a6:d6:ac:84:e6:a4:1f:62:f8:98:b0:93:9f:eb:
a0:7a:c5:d2:49:24:da:ef:17:75:4a:95:02:7d:cd:
45:88:27:4b:5c:79:fe:70:61:1e:de:85:c2:b0:cf:
70:15:32:20:5c:0b:42:00:30:45:27:8c:8f:42:01:
24:6e:93:50:e1:2e:01:07:e3:8d:35:06:d9:d7:b6:
64:34:91:c0:32:d8:f9:aa:3d:71:fc:b9:31:10:fd:
dd:fe:96:cb:7a:b7:b4:da:e5:8d:56:83:b7:9f:fe:
be:7d:25:64:46:90:03:3d:c4:26:cc:64:1a:f3:da:
c9:f2:0d:20:2e:07:ae:b9:47:db:de:a7:45:b2:f8:
fd:c0:33:7d:64:19:9c:ad:1d:70:88:28:c9:9e:d3:
52:1e:e2:72:34:25:89:b6:8a:d1:3c:11:9b:bc:4e:
fd:5c:05:3a:8f:9e:c8:8b:4a:df:1c:76:8f:2b:f4:
a9:b8:8d:99:96:47:7c:47:f6:6b:5b:c6:6c:29:6c:
66:88:4a:2a:e0:b2:54:71:7d:2d:0c:5a:a5:2e:a9:
ea:ac:77:04:40:c8:99:ec:81:84:64:be:c9:35:a6:
09:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:89:D9:D0:43:EA:4A:C9:BC:C9:4B:2F:48:DC:1A:24:49:4D:30:F5
X509v3 Authority Key Identifier:
keyid:E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a4:ce:64:1f:96:19:c8:90:d6:f4:45:7c:b3:76:db:b8:4e:
38:7e:f2:ae:4e:44:ec:3d:6a:38:5a:c7:d7:ca:3f:9d:34:0b:
bc:ac:dd:86:56:6a:86:01:a7:99:ff:18:73:38:b0:3f:13:e3:
58:3d:82:f3:9c:77:36:e7:b5:ef:c9:6f:ec:bf:87:4c:a8:6a:
9c:c9:45:1a:1a:f9:e4:d1:ea:cb:b8:45:f2:b9:38:f0:7b:f3:
36:90:61:a8:43:1e:ed:1b:a4:33:29:b2:ab:0c:68:4a:bd:d1:
85:ce:58:f6:fa:d1:af:31:19:c2:18:c6:01:a7:3a:06:46:86:
37:65:de:e5:86:98:91:da:de:eb:53:7a:a4:d6:f1:cf:66:ad:
94:68:de:62:01:a7:17:3d:8f:37:ab:59:ea:79:d4:a6:bb:3a:
5a:29:93:13:e4:a2:44:1a:28:11:a7:15:92:09:e6:7b:d7:ef:
a5:d8:61:08:03:fb:61:d6:10:34:83:24:29:c2:d4:4c:ee:08:
7f:88:d6:3f:2e:20:a3:b1:63:7b:e2:3e:7d:a7:19:49:7b:29:
93:f1:62:77:ba:10:f8:a2:70:a3:77:4a:16:02:c6:e8:f7:f7:
a3:d8:00:20:d2:88:8a:79:e9:63:a5:93:a4:ad:4a:7a:ad:49:
be:89:c8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:56:45 2026 by rpki-client