Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
File: 4dl0w71P6k6f61Ep2-0gPAdcjWg.mft (raw, json)
Hash identifier: 7Xdh5SzAL1rEN8Q+0rRXTHuXk3yCMtrX8SNcir1M/u8=
Subject key identifier: 8C:D9:3F:16:A3:18:72:D6:19:9C:A8:BA:48:1D:89:34:1C:D2:47:7B
Authority key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
Certificate issuer: /CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Certificate serial: 01A0D3F08EFCF037429334C7C6D75F4AF1F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
Manifest number: 0D39
Signing time: Thu 24 Sep 2026 15:02:32 +0000
Manifest this update: Thu 24 Sep 2026 15:02:32 +0000
Manifest next update: Fri 25 Sep 2026 15:02:32 +0000
Files and hashes: 1: 4dl0w71P6k6f61Ep2-0gPAdcjWg.crl (hash: 6C7jqif4tOzPaU3whE5yVgJdEdWnbWW0Fo0kfXSdQx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:8e:fc:f0:37:42:93:34:c7:c6:d7:5f:4a:f1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Validity
Not Before: Sep 24 15:02:32 2026 GMT
Not After : Sep 25 15:02:32 2026 GMT
Subject: CN=8cd93f16a31872d6199ca8ba481d89341cd2477b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:34:88:e7:be:83:0c:e5:e5:aa:ad:76:3c:cf:
25:f5:76:64:82:a3:e7:6c:f0:7e:d9:fc:6f:13:41:
3b:49:25:4b:e4:15:c4:52:5c:d8:95:c8:bf:11:12:
7c:b2:86:b0:96:81:d6:7c:0b:36:19:81:bb:ce:7b:
41:0e:27:7f:b1:54:da:2e:73:52:36:1b:d5:2d:87:
37:7a:55:b3:2a:1e:35:64:d4:f2:e4:ce:8b:24:e5:
b4:35:d2:09:e0:85:7e:a0:1b:3d:91:8f:f9:d6:02:
4c:c0:35:46:ed:b8:05:ab:96:12:b6:9d:06:8e:ce:
9e:05:1c:2b:45:72:e1:fb:5c:de:4d:05:fc:04:28:
88:61:5d:56:16:47:f0:40:ea:44:69:99:42:dc:db:
d7:44:16:52:34:6d:12:97:19:72:38:35:7c:38:9e:
01:3c:7d:24:be:f7:c3:99:00:ef:c2:f7:9c:0d:28:
50:18:82:fe:4b:63:aa:29:87:5e:a3:c3:c0:29:d2:
67:00:a8:e0:11:27:00:4b:f3:e0:1b:65:93:41:84:
f0:76:45:0c:be:bc:bc:78:30:31:5b:5a:9a:2d:e0:
d5:e2:5e:e7:6d:45:d9:58:d3:01:8b:a8:45:4f:2f:
70:4e:49:4e:78:b5:01:6e:eb:66:92:9a:98:e8:35:
d0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D9:3F:16:A3:18:72:D6:19:9C:A8:BA:48:1D:89:34:1C:D2:47:7B
X509v3 Authority Key Identifier:
keyid:E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c2:69:d4:7c:a3:74:8e:b3:93:55:f9:0f:2a:28:c8:d6:5c:
7f:bb:55:bd:59:9f:f0:69:ed:fd:a7:f4:be:63:d2:1b:da:e6:
a4:3b:4d:fa:3a:24:96:46:3f:e4:f1:ac:bc:63:c0:60:cd:12:
c3:bb:65:9a:1a:e1:07:80:06:ee:c9:4a:8e:ff:dc:1a:5a:b7:
cd:4f:7d:26:0c:63:c0:e1:5d:5a:4c:8d:6c:6d:dc:e1:46:ca:
8a:05:f6:d1:41:33:45:36:2a:d4:d5:dc:c6:d7:78:09:bb:90:
57:01:4c:b2:93:2c:b7:32:b2:93:2b:85:f0:d3:85:73:71:af:
a3:f2:2e:0e:41:4c:1c:f6:2a:ec:cf:7d:0e:de:17:f6:6f:af:
e2:18:46:e0:23:5a:26:1a:fa:47:dd:f5:5d:ca:ad:af:9f:f7:
17:6a:22:0e:1a:ea:ca:7f:21:05:91:d9:01:1b:8e:db:9f:dd:
42:39:8a:12:65:d6:2b:0f:aa:f3:ad:e8:81:92:eb:75:0f:ca:
7b:f3:a5:c6:11:92:a3:76:c4:aa:fd:bd:20:6d:ff:d7:9f:5d:
24:5e:15:11:87:a1:2d:85:21:37:26:86:eb:44:78:34:5a:98:
56:0a:9c:e0:05:10:36:94:41:38:b8:33:9c:60:b9:c5:f6:a4:
a7:da:c2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:16:43 2026 by rpki-client