Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
File: 4K4U6GPBsVoeouSaLrUEhT91tr0.mft (raw, json)
Hash identifier: ti+umP1VDpOhUOXc6lr8z5TCaKWt90XE/8znrYjO5KQ=
Subject key identifier: AA:F3:45:D2:ED:53:CE:86:EC:B4:F7:41:AC:78:8F:F2:F2:2D:D6:09
Authority key identifier: E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
Certificate issuer: /CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Certificate serial: 01A0D6B9513D73ACF8E716F60256B4515733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
Manifest number: 0B00
Signing time: Fri 25 Sep 2026 04:01:04 +0000
Manifest this update: Fri 25 Sep 2026 04:01:04 +0000
Manifest next update: Sat 26 Sep 2026 04:01:04 +0000
Files and hashes: 1: 4K4U6GPBsVoeouSaLrUEhT91tr0.crl (hash: nhbDjNMqXRNJheEAsG0cK0x9+cDp60dc3HwhX4o0czo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:51:3d:73:ac:f8:e7:16:f6:02:56:b4:51:57:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Validity
Not Before: Sep 25 04:01:04 2026 GMT
Not After : Sep 26 04:01:04 2026 GMT
Subject: CN=aaf345d2ed53ce86ecb4f741ac788ff2f22dd609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b7:f1:d5:cf:d8:1f:b7:4c:f6:26:15:48:e9:
ce:03:f2:a1:62:e5:fb:36:e2:bf:db:2a:06:a7:86:
9a:a6:e7:62:8b:0b:e9:51:02:ad:e8:a6:27:bf:25:
57:69:ff:88:ad:cb:fe:e8:f7:56:7e:51:4b:e3:3c:
63:c0:92:c7:a0:71:bd:58:57:71:44:64:25:7c:32:
46:22:64:56:83:e7:6f:28:c3:f5:4d:07:7e:c3:19:
da:fa:b4:8d:72:30:82:12:a4:d0:45:7f:c4:a4:b7:
c0:51:93:7a:4e:22:4f:56:f7:9e:9b:2e:c6:63:da:
4c:64:b0:82:b5:31:d1:51:98:4d:ac:81:fb:4f:64:
9a:44:62:0d:35:b6:1d:91:2e:1e:3e:6f:41:64:db:
e8:a7:34:f6:c9:ff:02:02:cb:43:92:0b:9c:46:09:
58:ca:fd:cc:4e:04:48:13:b6:c2:76:23:dd:0a:78:
10:1e:47:b4:ce:c7:5c:d6:bd:99:4f:5f:99:29:a8:
ce:c5:cc:08:7f:6f:c9:80:e7:b8:1b:cd:75:0b:85:
86:c7:ee:82:3e:61:d6:dc:b5:da:ec:5f:d4:69:af:
25:7f:61:51:c4:98:2f:3a:3d:ab:70:c8:a7:2c:50:
97:aa:84:8d:cf:71:78:62:fa:80:f6:60:d7:b6:f7:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F3:45:D2:ED:53:CE:86:EC:B4:F7:41:AC:78:8F:F2:F2:2D:D6:09
X509v3 Authority Key Identifier:
keyid:E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:0d:ef:e0:5d:ee:bc:f0:ce:70:76:10:34:c7:d8:ff:ff:f2:
17:c7:0e:0c:9b:6f:5c:0a:69:15:6e:bc:83:d9:92:fa:e3:b3:
3f:40:8f:99:4b:69:0d:28:5d:06:65:7e:d5:57:c4:66:aa:59:
6e:22:f7:98:d0:ef:53:50:d5:7f:25:43:ed:09:02:81:39:00:
e1:63:e9:a4:ca:5c:cd:ac:42:a4:4b:c2:05:c8:eb:5e:88:f0:
a9:b2:0a:34:3f:1d:7d:36:2f:f7:83:1c:cf:78:bc:a5:e7:74:
24:8c:f7:12:b9:70:02:db:ad:d3:e5:a8:26:31:22:fc:06:0c:
c3:fc:57:65:55:c0:16:0a:62:fb:73:8e:b0:ca:ee:c9:b2:49:
db:95:8a:1f:50:cd:58:27:b4:25:b7:7a:31:4f:c6:8b:12:ff:
ad:3b:ec:8e:8b:16:3d:6b:99:b6:d3:4e:dd:73:52:bb:8b:e7:
33:2b:82:df:5c:d2:3b:d0:7d:a1:6b:0e:75:ca:81:eb:a6:55:
fb:ca:c9:72:5a:64:fc:fc:8d:42:99:05:54:7c:9f:81:7f:c3:
51:3e:04:89:f3:47:3f:84:0a:2e:ed:4f:04:58:8c:42:19:bc:
e8:ce:34:27:75:16:75:87:cd:be:65:ee:4e:ea:9a:c2:90:09:
e6:20:35:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:53:22 2026 by rpki-client