Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
File: 4HDNq3OhLa82gGsOFgLI2vuQk7s.mft (raw, json)
Hash identifier: M6xA7KBrMSml6IBEPXO3KlbyPyzqLSnttLlqdKQxfAI=
Subject key identifier: 28:64:31:91:74:6E:D1:12:81:B6:F0:92:D2:47:20:B1:65:81:A9:A9
Authority key identifier: E0:70:CD:AB:73:A1:2D:AF:36:80:6B:0E:16:02:C8:DA:FB:90:93:BB
Certificate issuer: /CN=e070cdab73a12daf36806b0e1602c8dafb9093bb
Certificate serial: 01A0D192CE95C08A65878D13CB67BC97BA6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
Manifest number: 0FB6
Signing time: Thu 24 Sep 2026 04:00:54 +0000
Manifest this update: Thu 24 Sep 2026 04:00:54 +0000
Manifest next update: Fri 25 Sep 2026 04:00:54 +0000
Files and hashes: 1: 4HDNq3OhLa82gGsOFgLI2vuQk7s.crl (hash: H1odZ/ADELoBDnUfPn7sa5jcAZEvb4tmL6ebHb88QIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:ce:95:c0:8a:65:87:8d:13:cb:67:bc:97:ba:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e070cdab73a12daf36806b0e1602c8dafb9093bb
Validity
Not Before: Sep 24 04:00:54 2026 GMT
Not After : Sep 25 04:00:54 2026 GMT
Subject: CN=28643191746ed11281b6f092d24720b16581a9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:31:c3:4b:62:61:7c:4e:38:9f:1f:22:60:11:
3f:55:f6:13:b0:fb:80:d0:f8:8b:cc:a2:78:5f:57:
c0:7f:02:18:4f:cf:70:86:f9:18:04:e5:3d:e6:22:
87:7d:6d:35:2b:8d:e6:90:87:b2:4c:7c:f1:ae:9e:
e9:31:a1:dd:ef:dc:58:37:ec:3b:ab:47:ba:17:ea:
be:13:e1:96:9a:b2:4b:a2:f5:61:a4:99:99:b4:fb:
ec:7b:01:ff:1e:9b:d9:f9:e6:27:a0:78:ca:93:c3:
65:34:c3:2f:e6:c2:b9:65:2a:4d:c7:f0:1e:fe:e2:
e3:c4:0f:62:b3:61:82:be:ed:fb:db:51:e0:e1:5c:
6e:0c:02:ca:8b:c4:a5:2b:b4:e4:7b:4a:1d:20:a3:
e1:11:a8:a1:4d:b5:1a:2b:5e:30:51:3a:d0:d0:9f:
0e:99:37:6e:a9:90:80:13:e2:82:34:46:98:1a:55:
5a:d4:32:8c:5a:69:36:8f:ed:84:29:4a:11:3a:74:
1d:46:8c:f7:ff:4f:bb:37:77:a4:aa:a2:c5:e7:bf:
3f:ed:51:32:4c:7a:77:92:68:3c:d6:6d:d9:87:9a:
e7:8e:09:99:11:0f:f8:0d:92:c1:40:75:51:50:d0:
29:c3:38:de:13:ea:7d:d3:00:b9:6e:c1:3c:6e:72:
46:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:64:31:91:74:6E:D1:12:81:B6:F0:92:D2:47:20:B1:65:81:A9:A9
X509v3 Authority Key Identifier:
keyid:E0:70:CD:AB:73:A1:2D:AF:36:80:6B:0E:16:02:C8:DA:FB:90:93:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7a:5e:12:c0:0b:79:21:b3:f9:c0:b8:36:a9:05:61:82:2a:
7e:34:b9:d7:ae:3b:01:de:41:54:08:b9:9e:92:03:3e:cd:bf:
19:ac:1b:98:93:73:4f:7f:ab:28:1f:38:d1:c7:b2:b3:56:6f:
e7:c4:8a:ce:fb:f1:77:45:35:62:eb:b3:66:a0:dc:b4:24:62:
94:aa:9b:d5:41:72:75:d1:db:d4:2a:4e:19:fd:b7:13:51:75:
cd:3c:b8:d7:d7:86:df:c7:22:3a:b2:25:ef:8d:86:8e:ca:56:
f8:7d:7f:4c:c8:f1:c6:54:55:03:4b:f3:7d:a7:6f:e0:92:12:
00:1a:a1:33:f5:ef:1c:4e:17:3d:e7:2c:6c:0a:91:f6:e0:ff:
70:51:b9:eb:42:34:7b:fc:da:15:9d:ee:a3:9d:5b:bc:56:29:
ef:30:17:5b:4c:a8:84:5e:9a:b6:cb:f4:a2:9b:59:10:b0:fe:
17:86:56:b6:40:50:05:dd:7b:4a:87:22:b5:9b:69:19:8c:73:
54:b1:0c:44:00:27:3e:cb:8b:1d:d5:08:41:e6:14:23:c8:c9:
b7:f8:23:f7:3d:f4:d9:bf:a9:78:12:b0:8e:a7:96:ac:0e:5b:
d0:7c:f1:0b:ab:e6:19:df:9c:5b:53:bb:cf:48:bb:6d:a4:6f:
9f:ee:7d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:41:44 2026 by rpki-client