Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
File: 4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json)
Hash identifier: OLoZttG21uQ48LcWQ2RN6yYKAN1A/2EY6iaYm+Ofj48=
Subject key identifier: 60:47:60:2F:79:7B:4F:FC:8A:33:30:F6:28:0D:BE:B1:0C:75:A5:F1
Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
Certificate issuer: /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Certificate serial: 01A0CB59840F62593C595BE7CA6814A46E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
Manifest number: 0DC4
Signing time: Tue 22 Sep 2026 23:00:36 +0000
Manifest this update: Tue 22 Sep 2026 23:00:36 +0000
Manifest next update: Wed 23 Sep 2026 23:00:36 +0000
Files and hashes: 1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: U5UsrrVeDKSRIYD3bOAiIxg5zbpgJqBeziYwHMOBt2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:84:0f:62:59:3c:59:5b:e7:ca:68:14:a4:6e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Validity
Not Before: Sep 22 23:00:36 2026 GMT
Not After : Sep 23 23:00:36 2026 GMT
Subject: CN=6047602f797b4ffc8a3330f6280dbeb10c75a5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:86:84:8c:30:ee:39:b7:a4:ed:1a:fd:36:
f0:3a:71:60:5d:07:71:33:de:5c:5d:a5:3b:25:af:
88:c2:24:79:1c:c6:43:57:ce:e8:99:c8:8a:bc:c2:
e4:be:92:9a:c1:33:93:7d:2e:c0:10:ec:76:7c:a2:
5a:b8:68:bd:d4:bc:90:5f:8b:c2:ce:29:35:4a:a5:
f1:e6:75:56:af:c4:cd:6f:bc:02:ff:1a:78:c2:d4:
ad:ea:46:28:d7:7f:c7:cb:5a:cd:b4:d3:1a:63:d1:
04:df:3e:8d:40:5b:27:a3:6f:be:a0:ac:bd:14:74:
78:6a:5f:db:26:a6:27:d8:cd:db:72:dd:e7:4d:f6:
f6:95:ac:b6:61:2c:e7:b6:c5:5b:2f:ea:91:74:21:
11:45:46:46:ad:7f:64:a6:b1:64:eb:a7:8a:76:60:
e1:01:60:c3:3e:22:85:b9:87:49:ba:e6:17:9e:57:
16:98:9f:49:e8:3c:6b:d3:84:40:b1:d0:a7:2f:57:
51:53:0c:76:a9:f0:08:c3:9e:03:99:ef:cd:fc:0c:
50:74:c3:07:e4:2e:87:8d:81:71:75:9a:f7:b3:94:
d1:e3:f3:6c:a6:66:62:cb:d0:52:40:c0:c2:17:6a:
47:06:2a:b3:7b:2f:ac:bb:66:e1:31:bb:9c:f9:f6:
80:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:47:60:2F:79:7B:4F:FC:8A:33:30:F6:28:0D:BE:B1:0C:75:A5:F1
X509v3 Authority Key Identifier:
keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:05:87:18:aa:83:2d:69:d7:61:6e:e8:5b:1e:b1:47:8e:02:
d4:cc:19:73:2e:0d:bb:28:53:08:f0:fc:b0:ab:81:63:b6:ad:
e4:71:90:0e:60:bd:10:86:12:f4:fe:d4:5f:0b:cc:a9:38:3c:
5d:ce:cc:c0:c5:9c:36:33:45:5b:dc:dc:80:7b:87:e9:50:00:
3d:95:d7:c8:70:b3:3e:40:69:02:2b:21:44:73:04:af:d2:ac:
f6:bd:86:c1:86:01:9a:20:c9:05:e6:9e:37:f8:73:99:9a:df:
11:7b:5d:d4:43:cd:af:7c:68:39:85:8a:48:7f:38:41:27:73:
db:b8:82:5a:94:21:f8:71:b0:3d:e9:78:e2:c0:fe:2b:48:90:
7a:52:02:f6:8b:49:b8:ac:e0:06:86:64:b2:3e:11:e2:a6:dc:
21:bd:b3:a8:02:8c:e3:b8:8a:da:2f:97:d1:68:f1:44:78:c0:
09:df:9c:c7:e1:cd:90:60:81:bc:1a:8f:85:a8:2f:a1:65:47:
c1:57:ce:54:b9:1d:22:61:be:b0:b3:4d:32:21:33:08:d4:7a:
b0:10:ae:b4:68:a7:d8:25:74:ff:fe:ba:fc:7b:c5:1f:56:e4:
75:63:07:b6:fd:18:2e:5f:52:27:79:f2:97:a0:ca:8f:28:72:
75:98:4b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:34:32 2026 by rpki-client