Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft
File: 4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft (raw, json)
Hash identifier: y2XUc6dadX3XvkwqefkvLB4dGdc2W+gbNS4udgmEsx0=
Subject key identifier: D7:B6:F6:9A:7E:47:E9:75:FF:5C:F4:22:39:61:37:F8:F3:EA:7D:A1
Authority key identifier: E0:BB:ED:E6:49:6F:71:72:77:68:AF:6B:61:B0:BD:D3:0E:21:70:B0
Certificate issuer: /CN=e0bbede6496f71727768af6b61b0bdd30e2170b0
Certificate serial: 01A11A19AE499BFBE92D79CD37C6E66C1135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Lvt5klvcXJ3aK9rYbC90w4hcLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft
Manifest number: 041B
Signing time: Thu 08 Oct 2026 06:00:52 +0000
Manifest this update: Thu 08 Oct 2026 06:00:52 +0000
Manifest next update: Fri 09 Oct 2026 06:00:52 +0000
Files and hashes: 1: 4Lvt5klvcXJ3aK9rYbC90w4hcLA.crl (hash: I17fnmKU2CMAbCWMvc+d9jVI20QUCkjyNBSzIF8szFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Lvt5klvcXJ3aK9rYbC90w4hcLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:19:ae:49:9b:fb:e9:2d:79:cd:37:c6:e6:6c:11:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0bbede6496f71727768af6b61b0bdd30e2170b0
Validity
Not Before: Oct 8 06:00:52 2026 GMT
Not After : Oct 9 06:00:52 2026 GMT
Subject: CN=d7b6f69a7e47e975ff5cf422396137f8f3ea7da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:82:7d:29:31:c5:20:1c:7e:92:42:80:01:
fb:99:39:e8:89:3a:a3:9d:87:32:af:69:10:e5:10:
2b:f6:0d:a2:28:2b:a9:ee:be:ab:7f:fa:a3:71:44:
26:19:1d:29:40:c0:c7:05:28:1f:2b:2e:a4:ec:98:
72:57:da:e2:16:74:6d:6c:40:2b:e4:3a:b4:57:0a:
f2:93:34:56:eb:c8:1d:b8:df:8b:87:c7:29:b6:ba:
29:80:c4:42:60:4e:a3:9a:0e:c3:97:20:14:db:b3:
d9:2e:c3:2b:07:b9:1d:0f:36:b7:3d:7e:38:45:b3:
08:9b:d7:b9:6a:2e:9b:5b:1a:13:a0:ae:00:79:51:
7f:5f:58:a5:3d:19:7d:8a:6b:b5:27:71:fd:d7:71:
1c:f5:4d:41:cc:45:7e:7d:23:51:1c:84:ef:31:0e:
52:8f:e1:ff:df:4b:de:e1:b5:a8:c8:54:a8:05:05:
18:90:b9:d4:31:a1:14:cd:54:d2:ed:93:b5:08:bd:
b9:48:cf:15:aa:35:b3:9f:8f:a7:67:ce:0c:ec:d6:
01:de:34:01:88:15:7b:3c:a4:5b:dd:44:e9:e0:f9:
fe:c4:ec:bd:2a:75:e8:5f:78:da:fa:66:c7:87:c2:
18:d6:3d:12:d6:cc:0a:b6:d5:b1:68:04:cc:53:b5:
e2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B6:F6:9A:7E:47:E9:75:FF:5C:F4:22:39:61:37:F8:F3:EA:7D:A1
X509v3 Authority Key Identifier:
keyid:E0:BB:ED:E6:49:6F:71:72:77:68:AF:6B:61:B0:BD:D3:0E:21:70:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Lvt5klvcXJ3aK9rYbC90w4hcLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:42:04:bd:ce:f2:93:90:75:bd:ab:74:7c:e6:da:28:b9:e0:
84:49:be:9e:f1:cb:7a:91:15:23:65:8f:9f:5c:ad:44:74:46:
a4:ba:68:25:56:68:f1:56:ed:7f:32:5b:09:3f:c1:98:46:fd:
97:4e:a3:db:50:bd:44:9b:fd:1e:32:20:8b:3d:62:be:e8:f1:
91:68:51:2a:69:4d:c0:3b:42:01:27:d5:56:00:b1:d8:dc:97:
a0:5e:04:91:d9:52:b1:17:75:44:2b:ca:25:95:b7:4f:0c:24:
f6:76:0c:83:72:8e:c5:90:da:f0:90:9b:1a:1a:be:65:0d:f0:
52:e7:ea:f2:f2:52:90:f4:46:13:c0:fc:38:ce:6c:00:d5:ef:
03:d7:45:91:17:97:10:0c:79:96:cd:96:19:1f:bb:cf:91:57:
57:0d:74:35:a1:ce:fa:44:4d:22:42:01:29:e8:8e:db:70:64:
e5:51:3b:c9:e0:13:93:b8:17:f6:f2:b3:6d:36:b9:f6:94:51:
5e:6e:bb:6d:f5:d1:bc:a4:81:39:dd:5b:fa:e6:33:2c:e7:a1:
4e:e5:a3:55:4f:28:bd:92:de:b6:f6:2a:02:6e:6e:e6:5c:6d:
71:e1:89:b8:3d:19:2c:4c:45:fa:66:85:cd:23:e7:a9:71:d3:
70:8e:b9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:49:38 2026 by rpki-client