Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
File: 04G3AXBRkLnOnRsYRTU4TnHKMWU.mft (raw, json)
Hash identifier: apOHQvpDGJmg++gan3jJoR6zKmJ84dTtlnHJiMGeSfY=
Subject key identifier: 7F:80:4B:1B:61:88:2B:9E:34:A6:E5:9E:E6:CB:79:AB:70:C1:D4:62
Authority key identifier: D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65
Certificate issuer: /CN=d381b701705190b9ce9d1b184535384e71ca3165
Certificate serial: 01A0D94D91F4D2E80502151C32BD6D43D057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
Manifest number: 1A6E
Signing time: Fri 25 Sep 2026 16:02:14 +0000
Manifest this update: Fri 25 Sep 2026 16:02:14 +0000
Manifest next update: Sat 26 Sep 2026 16:02:14 +0000
Files and hashes: 1: 04G3AXBRkLnOnRsYRTU4TnHKMWU.crl (hash: CB+0AiiOB3doZallDi/7R5xXMCOUtrc84o2/Ur3sUvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:91:f4:d2:e8:05:02:15:1c:32:bd:6d:43:d0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d381b701705190b9ce9d1b184535384e71ca3165
Validity
Not Before: Sep 25 16:02:14 2026 GMT
Not After : Sep 26 16:02:14 2026 GMT
Subject: CN=7f804b1b61882b9e34a6e59ee6cb79ab70c1d462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:08:d8:f7:d5:6b:8e:a4:c9:37:2a:82:44:2c:
b8:10:93:7f:dc:f1:4c:83:06:11:11:d6:66:05:60:
a1:27:ed:b1:e8:ec:73:c0:2b:56:c4:af:93:a9:7e:
dd:ed:b1:fd:52:e8:8e:ea:30:86:a0:6c:e8:ec:63:
35:be:4c:a1:34:6c:eb:c0:a6:34:39:03:02:29:93:
4c:52:8c:c3:9b:7e:07:8f:cc:3e:d1:02:2d:65:1b:
1e:a0:00:3f:88:e2:13:bb:38:a5:67:00:53:6a:ed:
86:3c:05:3c:75:ba:37:5d:34:41:b4:e6:aa:83:a6:
d9:1e:b9:45:6f:7e:20:40:78:74:53:13:15:98:be:
6d:9c:29:e0:83:f5:54:e0:30:22:02:25:8d:c0:7a:
80:10:41:cb:88:51:c7:83:62:41:eb:ab:5b:2d:da:
23:bd:a3:b9:ba:4c:a7:72:2a:77:c1:48:4e:8d:e0:
6a:6a:d1:5e:a3:b5:df:f2:cd:d0:9d:3a:00:32:53:
f3:58:d4:a3:c1:44:22:06:4c:45:d9:0c:8e:d6:64:
95:5a:f0:c5:22:a1:ce:72:e3:a6:b2:11:dd:40:0f:
8a:76:1f:48:17:03:46:06:71:c0:5a:2c:8e:92:97:
60:a9:17:8d:7d:c1:14:5a:71:a7:ed:26:86:db:9b:
86:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:80:4B:1B:61:88:2B:9E:34:A6:E5:9E:E6:CB:79:AB:70:C1:D4:62
X509v3 Authority Key Identifier:
keyid:D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:cb:6b:68:8d:bb:ac:e9:29:a4:43:02:00:e9:97:66:f1:ee:
43:62:b1:55:70:2e:75:cd:95:c0:44:d7:d9:d5:46:ca:e4:0d:
b8:c8:95:2a:90:83:88:1d:b7:09:ef:e5:ae:14:08:59:bd:e1:
9d:df:c9:87:90:81:66:3c:32:7b:16:9a:7e:48:76:de:22:48:
ec:cd:4b:ae:12:64:41:d8:6f:df:7b:ef:13:16:2b:a1:17:ff:
26:35:e1:27:03:81:4a:39:7d:19:ec:91:0b:da:df:34:1d:6b:
30:19:ee:70:30:25:81:fc:fd:fe:24:9c:fe:e9:6a:6e:93:69:
1b:22:0d:72:04:b9:77:2c:0a:4d:aa:c4:c8:18:93:b1:0e:5b:
b6:ab:b8:0b:b1:cb:25:c9:0e:0e:a9:c3:31:56:d0:f2:f7:b1:
bb:f5:50:93:7b:3b:44:87:1e:ac:2c:1e:55:69:33:dc:1c:e0:
d8:ab:68:13:70:c6:d5:2f:d6:20:dc:7d:f7:4b:c7:31:63:5a:
09:d5:12:95:92:a4:5c:b6:85:ca:9a:48:56:d0:17:d7:ed:db:
e5:6f:9f:e7:5c:50:57:f4:d7:8b:85:78:5c:94:b3:be:83:22:
42:60:34:9c:3c:7c:b1:7c:06:a5:19:b4:8b:59:06:4e:cc:9f:
4e:c6:9e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:56:28 2026 by rpki-client