Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/a613c5-e599-429c-b850-032c27bc97b8/1/4s-SfSexasnN2X9RygeN9H2NjpQ.mft
File: 4s-SfSexasnN2X9RygeN9H2NjpQ.mft (raw, json)
Hash identifier: sfiMMtAWsPe0uk1HMhujvdb0samned2Gr1PHlwjO8Lg=
Subject key identifier: 81:44:34:C1:B2:84:E1:8F:4B:4E:CE:5F:85:79:F2:B0:8D:E1:D1:3A
Authority key identifier: E2:CF:92:7D:27:B1:6A:C9:CD:D9:7F:51:CA:07:8D:F4:7D:8D:8E:94
Certificate issuer: /CN=e2cf927d27b16ac9cdd97f51ca078df47d8d8e94
Certificate serial: 01A03FE0092A82FD1892F0944F7C2CCAE4F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4s-SfSexasnN2X9RygeN9H2NjpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a613c5-e599-429c-b850-032c27bc97b8/1/4s-SfSexasnN2X9RygeN9H2NjpQ.mft
Manifest number: 0107
Signing time: Wed 26 Aug 2026 21:00:42 +0000
Manifest this update: Wed 26 Aug 2026 21:00:42 +0000
Manifest next update: Thu 27 Aug 2026 21:00:42 +0000
Files and hashes: 1: 4s-SfSexasnN2X9RygeN9H2NjpQ.crl (hash: b9Nj97whDPkiraB4y5rZo/lAuWgdTojB+YetubccUIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a613c5-e599-429c-b850-032c27bc97b8/1/4s-SfSexasnN2X9RygeN9H2NjpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a613c5-e599-429c-b850-032c27bc97b8/1/4s-SfSexasnN2X9RygeN9H2NjpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4s-SfSexasnN2X9RygeN9H2NjpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:e0:09:2a:82:fd:18:92:f0:94:4f:7c:2c:ca:e4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2cf927d27b16ac9cdd97f51ca078df47d8d8e94
Validity
Not Before: Aug 26 21:00:42 2026 GMT
Not After : Aug 27 21:00:42 2026 GMT
Subject: CN=814434c1b284e18f4b4ece5f8579f2b08de1d13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b5:c1:bd:21:47:e8:fe:18:db:53:3b:dc:46:
39:c7:b2:24:33:4e:e0:6d:50:0f:e1:85:54:ec:e6:
03:1f:a4:3d:93:fc:51:ad:af:dc:b8:ac:e9:be:f6:
66:5e:a1:ec:03:77:70:00:70:0f:1f:34:fa:63:8d:
f9:fd:a2:94:15:b4:31:b1:19:d1:99:72:ad:a4:e6:
ad:8e:dc:72:20:de:55:fc:10:52:f3:63:f9:ee:30:
b1:44:a2:49:78:d6:b3:82:fa:e6:6f:7b:99:f1:6d:
8d:af:91:99:a9:6f:17:dc:1f:d5:1b:94:f0:46:da:
ec:4e:81:9f:e8:3c:09:6d:82:6d:cd:9b:26:43:e5:
83:a9:a0:9e:8e:c7:10:e8:4f:f4:29:fc:44:b5:c8:
98:09:0e:45:4d:a4:d1:af:2b:e9:24:bd:7c:e0:1e:
37:b1:5c:86:4f:0b:b5:11:ee:1b:b9:be:19:cd:cc:
aa:1d:df:fe:b3:d5:0e:b4:2f:77:38:19:eb:a4:63:
c3:c4:dc:36:90:c1:17:d4:50:ad:28:52:be:ea:78:
da:73:ec:b0:c6:45:62:5f:81:c6:a9:57:1f:66:bf:
05:20:04:d9:c9:4d:3d:08:33:d1:53:59:4f:8a:91:
ac:24:b9:3f:ef:fb:7f:c8:4d:51:fb:72:81:3d:3e:
55:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:44:34:C1:B2:84:E1:8F:4B:4E:CE:5F:85:79:F2:B0:8D:E1:D1:3A
X509v3 Authority Key Identifier:
keyid:E2:CF:92:7D:27:B1:6A:C9:CD:D9:7F:51:CA:07:8D:F4:7D:8D:8E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4s-SfSexasnN2X9RygeN9H2NjpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a613c5-e599-429c-b850-032c27bc97b8/1/4s-SfSexasnN2X9RygeN9H2NjpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a613c5-e599-429c-b850-032c27bc97b8/1/4s-SfSexasnN2X9RygeN9H2NjpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:fb:c0:17:c5:ef:01:3b:9e:52:31:30:17:a8:f3:fb:ca:dc:
cb:48:fc:c0:c4:a2:1c:45:f1:be:1a:79:ba:01:ab:57:95:26:
30:e1:8c:ba:a8:29:5a:48:de:be:51:d0:60:eb:e3:03:f5:6f:
39:26:d4:dc:c1:01:a7:ca:4b:13:cf:88:b8:db:fb:ed:db:6b:
8a:33:3a:fe:96:b4:8e:f0:d2:11:a0:5c:4c:13:2e:cc:b5:9b:
0d:f7:de:03:f7:33:bb:34:91:28:bc:1c:dd:9b:1b:56:93:ff:
90:f6:cb:b0:17:63:f9:23:18:dc:a1:3b:47:fb:1a:96:76:3e:
b4:18:d7:88:7b:f8:e0:65:ef:90:be:26:23:d1:76:b1:f3:f2:
68:e4:16:f9:b8:25:47:3b:f5:d7:c8:65:15:ef:ee:57:73:30:
20:ef:1b:91:e8:55:f7:5f:82:0a:cc:c2:e5:58:34:62:ed:c0:
41:08:e6:66:24:1a:9c:b3:86:19:85:17:b7:e1:2f:9d:d7:0e:
f2:bb:99:f6:a3:65:8e:85:76:0c:af:1f:2b:f8:90:ca:13:df:
ac:cc:53:5b:ce:b7:8b:75:ae:c7:5c:3e:ef:0e:25:23:1e:97:
f6:c3:5f:bd:e8:de:93:2a:39:e5:4f:3a:5d:49:25:d0:12:c6:
3c:e9:c1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:32 2026 by rpki-client