Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/1eb1b5-fddb-47f3-b2a8-9075bdf0412e/1/4kdcIAP_i1kJZMXHOBibRRDYOSE.mft
File: 4kdcIAP_i1kJZMXHOBibRRDYOSE.mft (raw, json)
Hash identifier: cNkXybgzv/42GlnnMTzw2qPsscaJMKg3u+L27yNzvlQ=
Subject key identifier: 90:E0:F6:71:F2:A8:0E:21:B0:FA:8A:E7:BD:F3:E0:33:4D:9D:77:EE
Authority key identifier: E2:47:5C:20:03:FF:8B:59:09:64:C5:C7:38:18:9B:45:10:D8:39:21
Certificate issuer: /CN=e2475c2003ff8b590964c5c738189b4510d83921
Certificate serial: 01A0F71FBE81F136B996466CBF5BB7A73A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kdcIAP_i1kJZMXHOBibRRDYOSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1eb1b5-fddb-47f3-b2a8-9075bdf0412e/1/4kdcIAP_i1kJZMXHOBibRRDYOSE.mft
Manifest number: 49
Signing time: Thu 01 Oct 2026 11:00:47 +0000
Manifest this update: Thu 01 Oct 2026 11:00:47 +0000
Manifest next update: Fri 02 Oct 2026 11:00:47 +0000
Files and hashes: 1: 4kdcIAP_i1kJZMXHOBibRRDYOSE.crl (hash: MC8TdXL92240A8Sbel8woUVHLD4rLbul6+Rl7OfXs/g=)
2: lhqKuY233Qgu__kpMt7uXojeF60.asa (hash: cFK+gL8Gk0rv2m7xgJ59sjv8Yj9mQ4xqhNQGmeiU3JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1eb1b5-fddb-47f3-b2a8-9075bdf0412e/1/4kdcIAP_i1kJZMXHOBibRRDYOSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1eb1b5-fddb-47f3-b2a8-9075bdf0412e/1/4kdcIAP_i1kJZMXHOBibRRDYOSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kdcIAP_i1kJZMXHOBibRRDYOSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:1f:be:81:f1:36:b9:96:46:6c:bf:5b:b7:a7:3a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2475c2003ff8b590964c5c738189b4510d83921
Validity
Not Before: Oct 1 11:00:47 2026 GMT
Not After : Oct 2 11:00:47 2026 GMT
Subject: CN=90e0f671f2a80e21b0fa8ae7bdf3e0334d9d77ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ca:4c:88:f0:dd:0e:0b:29:64:b2:70:d4:b2:
25:fe:33:7e:dc:92:b2:fb:52:1c:25:b1:85:23:18:
fd:58:8f:71:02:93:80:e5:e4:07:b4:c4:6c:97:02:
5b:a1:1d:6e:b3:f0:b4:73:d8:15:4e:4d:f0:ec:be:
57:41:13:b6:2f:22:06:b0:10:a2:28:db:68:83:55:
be:2a:e1:2b:75:a1:65:c4:49:75:70:98:81:21:61:
fa:e8:2c:39:39:11:d8:d9:61:91:a4:5c:7d:c4:ec:
84:c8:c8:79:fb:f4:f5:e5:9f:07:cc:bf:23:71:35:
87:5d:ba:00:8a:0e:e5:7e:52:85:8a:89:c5:ce:ad:
05:94:de:cf:e9:b8:f7:46:3f:79:34:bf:62:85:e9:
93:0e:74:c4:61:3c:9c:9e:42:3e:56:1f:0f:c7:ae:
4b:f1:0d:ed:f6:83:ed:45:95:a4:f6:a6:f1:a6:f7:
29:ad:b6:68:bb:9e:16:d0:96:e4:cf:24:50:66:6f:
9f:61:c1:3d:f4:b5:f3:73:31:3a:4a:49:3b:37:81:
cb:f2:16:d1:89:23:f0:30:41:fd:7d:2d:c6:ea:0e:
54:86:24:48:b1:90:42:34:85:e7:38:88:f8:73:f1:
20:aa:98:a2:b6:94:f0:61:95:be:26:4d:51:87:2a:
d7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E0:F6:71:F2:A8:0E:21:B0:FA:8A:E7:BD:F3:E0:33:4D:9D:77:EE
X509v3 Authority Key Identifier:
keyid:E2:47:5C:20:03:FF:8B:59:09:64:C5:C7:38:18:9B:45:10:D8:39:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kdcIAP_i1kJZMXHOBibRRDYOSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1eb1b5-fddb-47f3-b2a8-9075bdf0412e/1/4kdcIAP_i1kJZMXHOBibRRDYOSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1eb1b5-fddb-47f3-b2a8-9075bdf0412e/1/4kdcIAP_i1kJZMXHOBibRRDYOSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e2:53:cc:61:26:1c:4e:1e:57:15:31:e1:d3:f1:4b:b4:8a:
fb:c6:54:f1:60:60:b5:ca:3b:76:f5:64:99:7e:44:ea:4b:f6:
6e:e3:5f:ea:5c:ff:60:7d:f7:55:e4:23:01:d5:cd:1d:01:e6:
e6:f8:10:aa:0f:47:f2:1c:1f:9d:fb:05:d5:9e:cb:1b:33:4e:
0e:d9:07:48:e4:b9:05:d8:c2:04:52:3f:02:03:17:5c:64:08:
b9:57:c2:4d:05:ad:91:d6:d8:8d:e2:3c:17:1f:d4:61:50:c9:
55:32:8e:91:84:65:0c:0d:52:34:c1:c2:f9:b1:65:b6:51:fb:
00:ba:ca:59:27:66:fc:97:1e:b1:ff:b4:20:47:ce:ef:70:17:
5f:73:97:b2:15:d8:71:e0:ac:90:34:00:9f:26:bf:8b:ae:a3:
3e:c7:52:51:3f:13:d6:8f:d6:13:e4:27:7a:fd:1f:4a:5f:2d:
9f:85:6a:07:da:f1:5b:13:57:df:98:3f:e7:32:f8:a0:db:4a:
b1:08:b1:a6:4f:85:6d:3b:6a:a5:1d:43:59:80:a7:a8:af:a6:
2b:61:a0:83:a1:98:42:00:0d:2b:4b:b7:05:7e:2a:26:b3:69:
2c:2d:80:28:f1:bf:97:0c:70:57:5d:42:40:2c:bb:9a:7d:23:
13:90:4d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 16:29:07 2026 by rpki-client