Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
File: 4zgHQmp0h6CET99NelLw-5C9t9M.mft (raw, json)
Hash identifier: mgC7ntrRqfZMQQltv2GfcErBv+KIIS9grse8ad4SB/g=
Subject key identifier: 51:39:20:6B:48:0C:43:9E:F1:FB:E0:1B:29:34:77:72:AA:17:AB:DA
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Certificate issuer: /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial: 01A13DB8A9A79CA78D6469745F87CCD29078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
Manifest number: 1976
Signing time: Thu 15 Oct 2026 04:01:14 +0000
Manifest this update: Thu 15 Oct 2026 04:01:14 +0000
Manifest next update: Fri 16 Oct 2026 04:01:14 +0000
Files and hashes: 1: 4zgHQmp0h6CET99NelLw-5C9t9M.crl (hash: A5d7xu+COh6kFtF9n/9NR/B6BgM4hG2AbGhRPCc2qak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:a9:a7:9c:a7:8d:64:69:74:5f:87:cc:d2:90:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Validity
Not Before: Oct 15 04:01:14 2026 GMT
Not After : Oct 16 04:01:14 2026 GMT
Subject: CN=5139206b480c439ef1fbe01b29347772aa17abda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:e6:d5:ce:2e:6f:3b:14:fb:54:1a:bf:e7:
20:32:ab:1b:05:4f:7c:a0:8d:93:3c:07:f7:ea:66:
da:99:43:97:29:14:3a:8c:d3:f7:d9:75:76:5c:04:
ee:22:2d:4c:a7:f5:c8:23:14:e6:93:3d:83:fc:fa:
47:df:a4:3a:87:8a:87:fb:44:11:de:88:23:0e:38:
96:13:90:a4:13:6b:10:0b:f2:b0:86:36:34:50:73:
9f:3a:f5:cf:45:6e:93:09:57:1c:89:8a:62:78:6c:
ac:de:29:99:43:90:c3:f9:3c:ee:b9:75:e5:5e:1f:
77:10:7b:2e:e3:7c:4d:33:1a:2e:34:89:a7:b8:eb:
6c:35:29:06:ee:f0:30:25:07:11:68:d3:ec:55:aa:
3d:b8:ef:e1:6d:8b:ba:cb:45:09:55:b2:b8:45:ca:
62:0e:23:88:2a:80:67:98:fc:3a:28:e3:8c:92:bf:
97:5c:79:e5:c6:41:29:d9:08:93:21:33:fb:f9:04:
c7:6f:27:d6:a1:22:0e:ab:15:26:c0:f4:2d:b5:62:
28:e8:92:67:78:89:e6:a3:f4:4c:af:23:75:cf:09:
1c:c0:0b:9a:bf:fe:86:b7:fd:c0:a2:b7:fe:ac:29:
1f:c9:e0:69:1c:6f:cc:a6:51:81:5f:44:24:38:48:
f8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:39:20:6B:48:0C:43:9E:F1:FB:E0:1B:29:34:77:72:AA:17:AB:DA
X509v3 Authority Key Identifier:
keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7f:be:db:37:6a:f0:fb:0c:40:71:d6:4c:d1:94:c6:1b:5f:
27:c4:52:75:8b:62:e7:bf:d3:70:76:8e:77:49:6a:61:7a:a7:
17:d3:4c:5d:f4:d7:5a:1b:5d:b6:79:4f:1d:2d:3d:6a:4b:ee:
49:da:47:ab:7f:ab:13:23:5f:80:7f:c3:1a:1d:29:ae:9c:22:
e1:a4:6a:fd:7d:a8:0f:90:c1:d7:71:db:4e:52:d0:ce:5d:59:
9a:9a:93:88:c6:eb:c9:c2:5b:15:cd:97:c2:ab:f9:54:1d:38:
43:e2:8d:47:19:50:bd:b9:3f:49:7a:40:3b:60:de:22:6d:76:
4d:87:27:88:ef:7a:2e:be:d9:8b:52:a6:67:26:dd:c1:fe:53:
49:04:5e:ac:1c:92:f0:81:cf:88:e1:a1:8f:8b:b1:52:63:22:
89:eb:a6:9f:e5:9d:fa:4f:80:5f:20:07:ad:02:1d:ee:52:1b:
61:6a:ba:46:1d:3f:92:9f:23:2b:4c:98:81:83:cc:ee:59:9c:
6c:3d:c4:01:a1:ab:b9:66:17:c6:fb:0d:fe:c9:8d:f0:69:e4:
02:ea:02:f2:e9:12:bd:90:12:6e:a6:6a:58:e6:47:56:2c:59:
ec:3c:a9:3d:16:55:e8:f4:e1:54:d6:56:a6:a7:85:d1:71:ae:
73:a3:1f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:25:08 2026 by rpki-client