Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
File: 4K4U6GPBsVoeouSaLrUEhT91tr0.mft (raw, json)
Hash identifier: DWYDQFO2HRt9QAIPvzBACsba+mHw+cjAt2nY7B2/sfI=
Subject key identifier: 85:82:16:E3:9D:F8:D6:49:5E:9E:6F:B7:D7:1A:BE:94:80:71:C7:C2
Authority key identifier: E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
Certificate issuer: /CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Certificate serial: 019D284E2E89A831DB3FB808CB4B5FA70AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
Manifest number: 0918
Signing time: Thu 26 Mar 2026 04:01:45 +0000
Manifest this update: Thu 26 Mar 2026 04:01:45 +0000
Manifest next update: Fri 27 Mar 2026 04:01:45 +0000
Files and hashes: 1: 4K4U6GPBsVoeouSaLrUEhT91tr0.crl (hash: rVVZiQ59fEbJ5dxM6bAjW3bnurT3KoJlII8mzehvhEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:2e:89:a8:31:db:3f:b8:08:cb:4b:5f:a7:0a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Validity
Not Before: Mar 26 04:01:45 2026 GMT
Not After : Mar 27 04:01:45 2026 GMT
Subject: CN=858216e39df8d6495e9e6fb7d71abe948071c7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5c:7b:c8:d2:8f:93:cb:31:61:f4:9a:9a:1d:
e7:9e:bc:8f:4b:50:60:29:b4:63:61:55:1f:9c:75:
f3:da:49:4b:86:95:3c:d2:3e:ae:f1:e5:ef:ff:22:
48:5d:67:4a:0b:81:fc:6a:9e:0b:92:e1:46:24:8b:
25:88:36:ff:39:e0:80:c4:75:96:ee:e6:a3:4e:8e:
af:d6:b1:4a:82:47:88:d5:39:5b:aa:03:5f:50:ee:
c8:7f:3a:13:5f:5a:1e:94:a9:17:46:bf:61:33:11:
e6:4b:33:c5:36:54:56:e5:33:cd:99:f4:85:7a:3c:
45:b4:a1:7d:4d:c1:36:ec:46:d8:01:5d:e5:17:09:
c5:ca:29:67:58:aa:8a:80:02:56:8c:75:62:8c:77:
1a:45:04:3c:cb:6a:6b:24:24:6a:31:76:9e:a7:96:
4c:57:13:5c:9f:30:d3:ce:84:a2:a3:03:fc:61:76:
35:6c:fe:13:cb:42:d6:bb:23:5f:3f:33:ed:f7:9e:
ba:a2:36:af:29:d6:17:8f:f3:ca:ef:0b:03:9b:e9:
a0:f3:89:cc:96:7c:14:25:5d:62:bc:8f:f3:53:5e:
c4:70:d3:9c:8e:e5:81:0f:fd:46:2f:d8:ee:ac:22:
2c:e8:c5:8f:a9:24:95:a0:3f:a1:9e:8e:fb:42:49:
64:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:82:16:E3:9D:F8:D6:49:5E:9E:6F:B7:D7:1A:BE:94:80:71:C7:C2
X509v3 Authority Key Identifier:
keyid:E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c3:53:fc:a7:62:7e:dc:13:af:59:0a:81:5a:b8:d1:a6:a2:
62:bd:22:89:84:df:78:56:fe:7a:45:ab:eb:f9:19:50:de:29:
0f:05:82:59:52:53:88:53:6b:e4:06:46:ba:94:f4:78:61:1a:
a5:f6:8c:88:7e:33:0d:eb:af:ec:1e:67:e9:7c:f5:79:35:4e:
db:69:22:10:b5:13:ec:92:c1:7a:ed:db:88:9c:e8:25:c0:d5:
39:b9:9a:01:d6:11:aa:85:f1:c4:45:e9:c9:20:85:29:aa:7d:
49:c2:15:50:2d:f7:fa:0a:4b:61:cd:69:93:08:a1:a1:ec:70:
48:21:2e:13:18:fe:5f:17:56:b4:3e:97:31:05:6e:0d:ac:9a:
ce:75:2c:7b:24:39:72:88:90:d7:48:f3:31:eb:1d:0f:da:e7:
94:78:dd:7b:c2:a2:61:0e:f0:7b:6c:19:77:b7:db:7a:64:97:
57:c9:ff:6d:ee:b6:0d:00:1e:45:ad:27:db:9f:ef:4b:d9:c0:
5e:75:d3:be:d9:6f:47:22:6f:00:5d:3f:49:41:42:ea:b2:a8:
e2:4b:07:04:5d:06:6d:e9:ee:cf:ba:f2:96:6b:51:a9:73:9b:
59:88:12:8a:d6:7b:f4:52:e2:2c:4c:06:78:bc:b5:fd:77:4a:
cc:38:0c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:46 2026 by rpki-client