Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
File: 4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft (raw, json)
Hash identifier: 66q9zW5vpjTVogPBF2GBTav/sfy6ShPcmL1AJDB9C/0=
Subject key identifier: 9A:F2:A5:FF:C4:57:CF:60:1C:9D:2E:F2:B6:A4:9A:CA:50:6C:64:B5
Authority key identifier: E0:B8:67:13:11:00:C1:5D:E8:90:11:00:63:E6:38:A5:F0:23:67:C4
Certificate issuer: /CN=e0b867131100c15de890110063e638a5f02367c4
Certificate serial: 01A1408384A7EE300547131B4A14261D2DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 17:02:03 +0000
Manifest this update: Thu 15 Oct 2026 17:02:03 +0000
Manifest next update: Fri 16 Oct 2026 17:02:03 +0000
Files and hashes: 1: 4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl (hash: 7gqVA4AqqvrMduv4hglGPegHBhF+OFEXyO1ZpU0HOtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:83:84:a7:ee:30:05:47:13:1b:4a:14:26:1d:2d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0b867131100c15de890110063e638a5f02367c4
Validity
Not Before: Oct 15 17:02:03 2026 GMT
Not After : Oct 16 17:02:03 2026 GMT
Subject: CN=9af2a5ffc457cf601c9d2ef2b6a49aca506c64b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f3:6b:fb:02:8b:88:b0:15:3a:04:0e:99:95:
c5:9e:e3:d8:88:97:c6:9e:e9:fd:e1:00:0d:e7:c9:
e0:e3:c9:f4:9e:c7:d9:07:65:b0:c8:ba:42:1e:08:
1a:05:5b:89:a6:91:70:83:8f:82:55:40:16:56:15:
7c:16:88:f4:a3:51:78:c1:68:4d:7d:71:6b:91:5f:
ae:f0:20:49:a6:78:32:17:b2:43:40:ca:16:00:a4:
33:8f:82:5b:06:d5:b3:d0:5e:64:a7:27:f1:cd:c1:
43:20:ed:2f:0e:c9:3d:8e:b1:1a:00:05:8d:20:62:
50:19:94:50:fd:23:f6:fe:9d:21:5c:98:b9:16:fc:
81:48:ab:71:8c:08:c7:9f:a4:a2:ac:66:37:59:32:
17:18:2a:22:ac:42:ff:3f:81:f2:bb:a8:17:b6:e7:
3b:28:e8:6f:11:38:5b:46:7d:a1:3b:13:ba:16:c7:
3a:45:8a:b6:48:b7:2c:dd:ce:38:ff:d6:7b:5a:f9:
e9:80:4e:c6:58:5e:be:82:e1:45:e9:e8:e0:34:f5:
a5:59:a3:cb:66:3b:0f:b3:c1:ed:f5:f2:42:9b:30:
93:79:a7:78:75:45:c7:0b:28:b4:ff:9c:dd:89:c3:
60:dc:15:c7:32:e2:05:e1:85:7a:c7:67:ab:d5:64:
e5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F2:A5:FF:C4:57:CF:60:1C:9D:2E:F2:B6:A4:9A:CA:50:6C:64:B5
X509v3 Authority Key Identifier:
keyid:E0:B8:67:13:11:00:C1:5D:E8:90:11:00:63:E6:38:A5:F0:23:67:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:89:aa:60:f8:4a:94:4d:70:b0:69:b1:88:3c:20:1e:fa:42:
09:da:f6:1f:74:76:50:46:a3:5f:7d:ba:99:23:11:0b:a5:82:
61:d8:25:a8:d5:4f:95:1e:05:72:ec:67:bc:4a:3b:69:07:1c:
9a:08:bd:f1:d6:21:66:54:f7:7d:3f:27:fc:7a:c8:ec:bb:19:
3f:de:de:d9:3e:d9:26:ea:a8:60:59:4a:d7:df:b6:70:76:4a:
9a:de:55:59:ad:2d:8d:fe:82:df:bb:32:2d:09:b8:ce:25:55:
eb:a8:90:71:ce:b9:f3:ac:0a:ae:a9:4a:9b:53:67:61:65:cf:
f4:03:57:e7:e5:17:ce:e9:32:1a:27:aa:d8:db:5c:b0:33:bf:
74:f7:fd:7c:62:ef:4a:0e:42:10:ee:39:fa:23:71:46:0a:7b:
70:89:af:69:8d:63:fd:dc:3c:e9:19:e8:1e:2d:4f:bb:77:e6:
00:e4:51:fb:17:9d:11:59:71:2c:c3:b2:fe:b2:ad:57:62:e4:
3b:0f:b5:ce:38:61:28:6c:85:d9:3e:4a:7a:f0:a5:a3:7e:ab:
1c:a0:bd:1f:6a:13:ae:3a:e6:18:04:77:55:0f:02:d8:67:3b:
b8:8e:f6:d0:3e:79:84:d7:e6:95:97:fe:2f:83:8c:21:bd:f7:
00:b0:d5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:10:09 2026 by rpki-client