
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
File: 4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft (raw, json)
Hash identifier: C9/FrXOKuFk05JQlfWVQAEd+qzUGy/Fye4W//AKaT0Q=
Subject key identifier: E8:03:73:9E:14:AA:57:9E:F7:08:24:26:E0:C3:93:F9:A8:CB:3C:9A
Authority key identifier: E2:FF:4C:4E:23:81:06:DC:5F:29:6E:26:A9:CE:CF:3C:4A:43:55:46
Certificate issuer: /CN=e2ff4c4e238106dc5f296e26a9cecf3c4a435546
Certificate serial: 01A0D192D2DFE3E1AFD64035CD9E22E40D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
Manifest number: 04F8
Signing time: Thu 24 Sep 2026 04:00:55 +0000
Manifest this update: Thu 24 Sep 2026 04:00:55 +0000
Manifest next update: Fri 25 Sep 2026 04:00:55 +0000
Files and hashes: 1: 4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl (hash: mgVXmKyF7ATLgZOZOfNAO7ZdVh9taUrQA+HlXZzhaL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:d2:df:e3:e1:af:d6:40:35:cd:9e:22:e4:0d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ff4c4e238106dc5f296e26a9cecf3c4a435546
Validity
Not Before: Sep 24 04:00:55 2026 GMT
Not After : Sep 25 04:00:55 2026 GMT
Subject: CN=e803739e14aa579ef7082426e0c393f9a8cb3c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:42:b5:82:43:1a:35:47:97:9e:6c:b0:fd:
ca:20:dc:de:7c:95:c2:4e:e6:1c:0c:de:51:83:22:
f3:c9:12:37:25:c9:d0:10:dc:9d:84:ea:fa:76:36:
5e:02:87:2d:92:11:57:86:b6:b8:0f:6e:5e:12:34:
4f:cb:35:7e:7c:17:d2:82:b8:75:1e:c2:a9:eb:4a:
b9:4f:78:70:d1:03:e4:01:7d:ec:22:b3:f2:17:0d:
f9:0f:57:56:c0:be:bd:ea:98:13:32:59:0c:a2:14:
01:de:77:b6:fb:eb:23:da:25:17:76:2f:07:bd:f1:
52:c0:aa:26:40:43:5c:ee:c5:5d:77:d4:92:0f:48:
47:f1:ef:3d:cc:73:78:b7:7c:3a:05:d5:d1:b9:f8:
18:af:c0:ac:e8:95:5e:5b:6e:6a:cd:e6:87:16:c5:
1f:ae:78:a3:49:5b:ef:78:6a:4f:36:5a:88:35:8c:
84:24:9c:b1:f1:17:a0:32:04:f8:05:e8:51:e5:18:
69:59:90:89:0e:a6:73:f3:94:08:b3:3a:f2:53:35:
e4:f6:49:d5:6f:64:52:63:6a:a3:2c:67:25:92:5f:
ce:74:f8:96:f9:e9:32:72:ed:fa:09:9b:92:52:48:
17:51:53:97:23:c8:8f:b4:80:85:a3:5f:7b:2d:93:
5a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:03:73:9E:14:AA:57:9E:F7:08:24:26:E0:C3:93:F9:A8:CB:3C:9A
X509v3 Authority Key Identifier:
keyid:E2:FF:4C:4E:23:81:06:DC:5F:29:6E:26:A9:CE:CF:3C:4A:43:55:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5a:ab:76:f7:f0:64:0c:b2:b6:cd:b5:c0:c4:5b:29:de:30:
26:15:09:55:78:11:c9:58:97:71:52:f4:b5:f2:61:e8:fe:fb:
12:e6:bd:e3:b3:0c:16:ff:ed:ff:0c:2c:36:83:51:dc:a6:2d:
ad:93:84:00:66:7d:d9:af:d1:ba:5f:7f:6d:77:a1:2c:d9:df:
bd:3a:92:cf:d5:fb:3c:a1:a9:c9:7c:16:06:03:8d:b0:c4:94:
d0:71:f9:d4:2d:18:87:f0:97:6e:52:bf:ad:30:32:f8:1a:02:
b7:41:96:00:36:79:ea:5c:71:31:cb:14:d8:60:9a:9f:cb:c0:
78:68:af:3a:0e:d6:5d:34:60:1d:b9:95:48:a2:0d:7c:f8:6f:
54:a0:5e:44:07:dc:d2:74:b3:63:dc:31:63:99:f9:a6:fe:67:
32:84:8f:54:6c:55:13:be:b2:cb:4b:00:cc:c8:60:88:d8:27:
7f:08:83:3c:a8:56:43:7d:c3:18:f1:57:26:b4:2a:3b:09:57:
0e:a6:eb:15:95:9f:e7:41:de:36:93:4c:86:8e:81:d0:de:8c:
5b:df:0c:93:28:30:3d:9b:09:2d:50:9c:18:75:d8:59:9c:74:
5c:4f:d2:2b:4e:fc:65:79:e4:b7:a2:69:6c:a6:2b:e6:a4:12:
59:45:50:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:27:03 2026 by rpki-client