Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
File: 4dl0w71P6k6f61Ep2-0gPAdcjWg.mft (raw, json)
Hash identifier: ozMX1gqKTGZBtKjWr3ouYtCnzMkpSbjxNCZUvf7SSxI=
Subject key identifier: A3:24:04:BA:2D:96:5C:2F:6B:D0:DB:29:01:FD:0A:F5:DF:8D:7D:01
Authority key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
Certificate issuer: /CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Certificate serial: 019D296112FB9661B8376E5BF1504D63CD96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
Manifest number: 0B53
Signing time: Thu 26 Mar 2026 09:02:00 +0000
Manifest this update: Thu 26 Mar 2026 09:02:00 +0000
Manifest next update: Fri 27 Mar 2026 09:02:00 +0000
Files and hashes: 1: 4dl0w71P6k6f61Ep2-0gPAdcjWg.crl (hash: 8C/vPH0Oc137IwlS9KxA5L9yWxHWg7+mH8D32KOXG2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:12:fb:96:61:b8:37:6e:5b:f1:50:4d:63:cd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Validity
Not Before: Mar 26 09:02:00 2026 GMT
Not After : Mar 27 09:02:00 2026 GMT
Subject: CN=a32404ba2d965c2f6bd0db2901fd0af5df8d7d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:b4:f6:ad:ea:d3:c4:18:3e:73:e0:4d:18:
90:77:3d:42:b1:eb:ac:6b:b2:a3:d2:4b:d3:ba:09:
b8:45:8f:82:63:c3:5f:e0:57:28:30:6f:c1:f3:dc:
e3:88:f4:27:40:4b:a8:38:ff:af:60:35:9e:91:eb:
6c:f8:50:7b:a4:59:9a:69:23:9f:4c:e9:45:7b:b4:
25:53:cd:67:bc:54:4e:c9:31:94:46:30:8f:c9:cb:
b8:4e:32:89:52:0a:03:76:ae:f9:ac:0c:81:05:d1:
ae:ba:ec:85:bd:74:f3:cd:8c:23:58:ae:0d:e7:79:
af:99:b3:65:14:51:0d:6e:6f:f3:48:12:d2:3e:c8:
2c:80:77:bd:6b:5e:c6:72:19:12:55:73:c8:f7:56:
dc:69:fc:77:10:c2:6a:a4:58:b6:bd:5e:16:0b:1b:
46:bd:9c:90:0e:9c:94:82:d4:44:40:47:6d:7a:1a:
8c:de:8d:4a:6d:dd:06:4f:c2:3a:18:b3:a0:76:a2:
92:a8:44:85:3a:6c:af:a5:58:02:ee:1d:24:d0:7e:
ae:ed:bc:44:11:57:4a:d4:8d:0e:06:01:83:27:58:
92:81:9f:b3:7f:97:de:35:59:c8:3a:40:3d:4d:0d:
a0:ca:6e:01:a2:3d:60:3a:f7:ff:be:ca:85:bf:76:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:24:04:BA:2D:96:5C:2F:6B:D0:DB:29:01:FD:0A:F5:DF:8D:7D:01
X509v3 Authority Key Identifier:
keyid:E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:55:25:e0:73:91:bb:18:a6:ce:ca:d3:25:b8:f5:c6:83:eb:
e4:ec:e6:fc:2d:1e:14:40:0e:eb:43:79:f6:1f:7e:70:a1:a9:
49:36:0e:9a:f9:ae:52:90:b8:ea:0c:02:53:00:1a:4d:6c:47:
87:c0:ea:e2:da:7a:da:ad:a2:36:3c:fa:fd:a5:37:06:05:24:
fb:ac:46:57:42:b0:f9:cd:88:d5:62:8e:3f:e0:6d:dd:07:cb:
4c:71:c0:9a:39:92:63:fb:66:a7:76:19:ee:0d:26:0b:27:40:
d7:8c:d4:bf:16:12:50:78:2c:95:7d:02:85:7c:c5:75:51:c7:
21:31:1c:5e:1c:18:6e:5b:04:33:bf:21:67:52:16:b6:7f:dc:
20:16:2f:1c:e8:74:47:95:bf:80:c4:fa:72:aa:45:81:fd:92:
4e:ac:64:82:ef:9f:14:8f:75:6a:8c:8f:5f:ec:3d:86:20:d2:
ca:17:77:22:4e:d4:f8:63:36:b5:bc:d3:09:ad:94:c8:a9:b6:
41:b2:34:e5:f3:a2:61:c9:17:50:fb:43:c2:b6:bd:85:ac:0d:
2f:c2:4c:48:92:bf:b4:0f:6a:5b:33:cc:ee:e3:f7:61:a7:e0:
9c:64:db:c5:23:45:75:e8:a9:fb:ae:0d:a8:86:2c:f8:20:db:
0a:88:da:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:51:36 2026 by rpki-client