
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
File: 4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft (raw, json)
Hash identifier: QtWoVIUZijp25DaEEj53PwrnfrK1ulktGqOicWo3EVM=
Subject key identifier: CA:84:C6:A3:FD:2A:CF:19:13:F9:50:BE:DE:A8:CD:C3:C5:C9:83:3E
Authority key identifier: E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60
Certificate issuer: /CN=e33779b8388d001fdcbddc48ace227f009850660
Certificate serial: 01A0E10646D527250C6722161B5D9FD90BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
Manifest number: 1A6F
Signing time: Sun 27 Sep 2026 04:01:20 +0000
Manifest this update: Sun 27 Sep 2026 04:01:20 +0000
Manifest next update: Mon 28 Sep 2026 04:01:20 +0000
Files and hashes: 1: 4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl (hash: opIcicKRg8XNyCWRYMNftFTqZd66yOlVI4XTfyFLQ5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:06:46:d5:27:25:0c:67:22:16:1b:5d:9f:d9:0b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33779b8388d001fdcbddc48ace227f009850660
Validity
Not Before: Sep 27 04:01:20 2026 GMT
Not After : Sep 28 04:01:20 2026 GMT
Subject: CN=ca84c6a3fd2acf1913f950bedea8cdc3c5c9833e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:0b:f0:e6:65:46:91:84:08:a0:37:86:52:
fc:90:20:8f:1f:12:a9:fe:7e:89:26:35:eb:9d:04:
4c:22:bc:90:fd:54:58:f7:53:db:4c:5c:f0:fc:f5:
d4:cf:75:e0:2d:1b:77:0f:b2:56:c3:5b:75:f5:d7:
29:e2:e6:b7:02:3c:15:bb:24:04:06:f4:69:de:8e:
02:7b:5b:3a:a1:63:0a:c0:d9:da:d3:88:fe:1d:1a:
25:e6:6c:23:9a:63:7d:5a:e5:d6:a2:b0:96:d2:1a:
c5:f7:bd:e5:e3:5a:82:f7:47:9c:bd:e6:33:ed:0f:
80:6f:b6:b5:82:54:e8:53:42:6a:8e:f9:47:4b:ed:
2b:d2:7c:20:79:5e:51:cc:7c:96:de:57:5f:9f:8e:
1d:32:b0:1e:93:de:3c:8f:bb:c5:fd:90:ad:a9:b8:
84:79:50:9f:a3:08:1a:10:fa:aa:d5:59:cd:6e:d2:
70:29:b8:df:a2:87:be:07:c2:1b:ad:24:1e:0b:45:
78:5c:92:f4:62:a2:d1:92:40:95:6c:34:3f:73:29:
3a:9d:81:32:db:0c:69:17:f1:bb:ef:9d:5b:a0:6c:
18:1d:1e:1f:92:6f:a4:15:35:df:2e:e4:62:96:60:
56:22:33:4d:8c:96:2f:be:9c:81:5e:fb:91:31:35:
87:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:84:C6:A3:FD:2A:CF:19:13:F9:50:BE:DE:A8:CD:C3:C5:C9:83:3E
X509v3 Authority Key Identifier:
keyid:E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b9:ba:9d:8e:5a:c0:83:3e:ee:3c:f7:1b:b0:7f:14:e6:4b:
95:61:b0:02:6f:db:5a:64:a2:11:44:9f:aa:b2:ce:9e:35:44:
7d:fe:35:86:b7:21:74:1b:a1:9e:e2:a9:12:85:d0:8d:2e:10:
58:45:9f:57:e6:54:cb:6b:39:12:d8:f2:9a:02:d9:f2:02:02:
c0:5b:e6:2b:07:88:11:94:bc:31:55:a5:c1:0f:f2:cf:c3:d2:
8f:5e:f8:1b:72:b9:2c:8b:29:e0:2e:a0:8c:7c:ba:f4:cc:f1:
5c:cb:e6:d3:f2:df:ff:e1:f1:3a:36:47:77:e2:38:db:5e:fa:
83:d6:fb:37:1e:b9:c9:cd:3b:ed:af:1e:86:78:9c:fb:36:40:
71:cf:e3:d0:6a:79:a3:cb:5f:fe:e0:ad:d5:57:b1:67:ab:57:
c2:bf:85:23:bd:25:22:00:37:72:55:00:9b:81:8d:36:37:76:
85:1a:6f:3f:b0:a3:12:a6:d2:56:d7:3d:2c:b9:69:9a:40:f1:
45:bc:11:11:9f:ae:af:13:27:61:b1:b0:37:04:9b:6f:80:48:
30:cb:21:7b:af:97:0e:1a:07:13:d2:c8:b5:71:22:75:2a:b5:
64:ef:21:12:96:16:c7:17:b2:19:5c:c8:6d:c6:e7:a4:73:83:
30:47:21:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:19:38 2026 by rpki-client