Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
File: 4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft (raw, json)
Hash identifier: PYBDaNzKhNiFIkV6rDSfwzcMjlBzkrJA93xnSMsR7eE=
Subject key identifier: 27:2B:66:8F:AB:2B:5E:5C:75:BF:E4:35:EB:38:7B:73:1B:0A:AA:D0
Authority key identifier: E2:A4:D1:45:EE:89:B2:7B:15:53:D5:51:C2:0A:15:BC:6B:BF:6D:69
Certificate issuer: /CN=e2a4d145ee89b27b1553d551c20a15bc6bbf6d69
Certificate serial: 01A13FA78C69E8C02492259EE5B3EF26686E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 13:01:47 +0000
Manifest this update: Thu 15 Oct 2026 13:01:47 +0000
Manifest next update: Fri 16 Oct 2026 13:01:47 +0000
Files and hashes: 1: 4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl (hash: nSnyJM1ZJWGJeEo0gsC1AKsKc6IqN+MkHDwELvLXi1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:8c:69:e8:c0:24:92:25:9e:e5:b3:ef:26:68:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a4d145ee89b27b1553d551c20a15bc6bbf6d69
Validity
Not Before: Oct 15 13:01:47 2026 GMT
Not After : Oct 16 13:01:47 2026 GMT
Subject: CN=272b668fab2b5e5c75bfe435eb387b731b0aaad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:e4:27:27:30:22:be:d0:8e:3f:23:9d:e6:
60:5c:ff:02:ab:fe:b9:03:97:41:dd:1c:f0:3f:5d:
d2:2d:ae:ae:cd:35:c1:da:7a:4d:32:9b:b6:24:74:
ca:68:15:74:2d:9c:7f:41:fd:79:9b:4f:f2:ae:89:
6f:a6:7b:81:b6:be:b4:ca:77:f6:c9:a8:0f:8b:f3:
a4:02:f7:d8:d8:e1:e5:d8:ff:30:2d:5c:f9:5c:1c:
d4:53:59:fb:91:1b:c2:d7:44:09:b0:61:8e:05:94:
18:4f:5d:01:6d:3f:b4:cd:19:4f:43:88:25:c1:87:
4b:bf:47:1b:1d:90:69:79:99:79:6e:29:83:4b:3e:
76:ae:fa:39:ab:da:5f:94:ec:5f:03:b2:42:57:cd:
4a:68:ad:02:ae:ac:8a:40:47:fc:45:bc:52:25:b7:
64:a1:af:d3:49:f5:55:5b:af:d9:80:1e:fd:2b:a1:
b6:54:5f:4b:96:ec:13:7d:c1:3c:1b:fd:24:06:34:
80:b8:ff:ca:91:12:90:f8:53:52:76:86:b1:af:0b:
cb:00:cf:a9:aa:eb:32:37:3f:ec:1d:19:a4:d8:7a:
95:42:6a:46:bf:a3:ae:49:9b:55:82:99:d4:ec:4c:
d5:8f:a5:3d:5d:f5:57:c1:92:f1:78:1c:c0:fa:94:
f6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2B:66:8F:AB:2B:5E:5C:75:BF:E4:35:EB:38:7B:73:1B:0A:AA:D0
X509v3 Authority Key Identifier:
keyid:E2:A4:D1:45:EE:89:B2:7B:15:53:D5:51:C2:0A:15:BC:6B:BF:6D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:80:a2:3c:2b:0b:8c:87:f9:13:a5:e9:23:08:9d:ab:0d:df:
a6:bf:0f:89:b4:e0:e5:eb:66:71:03:aa:ae:11:62:26:bd:8a:
4b:09:d3:97:71:4d:80:d4:5f:5a:e7:69:a8:a7:78:53:27:93:
27:ec:5d:70:44:8e:09:12:50:18:41:a7:fe:72:44:78:6e:dc:
2b:dd:26:8d:4b:bd:27:a6:cf:60:ba:74:0c:f5:d7:4b:55:e8:
fe:c0:5d:84:85:bc:19:6f:90:78:c7:09:79:af:0f:cc:01:da:
15:ed:52:e0:79:f2:81:06:44:9f:48:4b:41:7f:70:59:7f:8c:
92:d4:1b:90:a5:59:b5:79:39:0b:a4:57:0d:f6:0d:c4:b0:73:
4f:7d:60:44:60:db:67:81:c3:a5:9e:84:16:a7:f2:59:9e:2e:
f5:dd:c0:9c:12:c8:38:f7:b0:34:fc:4c:bc:fb:e6:f6:14:1f:
7c:3e:26:6a:fc:b4:b6:0e:b6:09:c1:a8:40:4c:c7:72:6b:65:
f0:3b:50:fa:f8:4b:24:6a:b4:7d:ed:46:45:ca:5e:b6:cb:71:
65:a9:ee:4e:17:84:18:65:78:e6:ca:f0:a4:8e:4a:44:84:15:
b7:e2:f8:1e:a9:db:b3:13:f9:7a:d5:8c:6e:7c:68:84:91:8c:
46:2e:bf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:19:47 2026 by rpki-client