Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/067e7e-9337-4275-938c-3423cacefc93/1/4BiCRMvb9IR_QR3v-kCcodsYQbk.mft
File: 4BiCRMvb9IR_QR3v-kCcodsYQbk.mft (raw, json)
Hash identifier: 7a2MfOFYwvxN9Vs8gmx4CLGvk9mYeBXRt8WVt15SZoY=
Subject key identifier: EE:0C:CB:01:B2:39:1B:A5:25:25:0D:D2:23:37:15:88:1E:02:69:1B
Authority key identifier: E0:18:82:44:CB:DB:F4:84:7F:41:1D:EF:FA:40:9C:A1:DB:18:41:B9
Certificate issuer: /CN=e0188244cbdbf4847f411deffa409ca1db1841b9
Certificate serial: 01A1DF4C72D5B156CE001E714612B09BEA19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BiCRMvb9IR_QR3v-kCcodsYQbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/067e7e-9337-4275-938c-3423cacefc93/1/4BiCRMvb9IR_QR3v-kCcodsYQbk.mft
Manifest number: D4
Signing time: Sun 15 Nov 2026 13:01:31 +0000
Manifest this update: Sun 15 Nov 2026 13:01:31 +0000
Manifest next update: Mon 16 Nov 2026 13:01:31 +0000
Files and hashes: 1: 4BiCRMvb9IR_QR3v-kCcodsYQbk.crl (hash: nBFBoA50ugXr1FJqnfN9mG373F0E56eUAg1G4gIJf84=)
2: AO8goRbzV7PBCtbzwtt1-y0Y_cE.asa (hash: dom8RHI6jzPo201yvdJYcI+G83hClL+fbPQN0nSSOgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/067e7e-9337-4275-938c-3423cacefc93/1/4BiCRMvb9IR_QR3v-kCcodsYQbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/067e7e-9337-4275-938c-3423cacefc93/1/4BiCRMvb9IR_QR3v-kCcodsYQbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BiCRMvb9IR_QR3v-kCcodsYQbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:72:d5:b1:56:ce:00:1e:71:46:12:b0:9b:ea:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0188244cbdbf4847f411deffa409ca1db1841b9
Validity
Not Before: Nov 15 13:01:31 2026 GMT
Not After : Nov 16 13:01:31 2026 GMT
Subject: CN=ee0ccb01b2391ba525250dd2233715881e02691b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c0:ae:98:15:3d:51:6d:d5:68:4e:2c:97:36:
ae:dc:b6:3e:8f:d1:e4:82:f1:54:7b:a3:ef:a0:c7:
57:96:78:f2:20:58:88:9c:00:c6:50:22:08:67:ed:
d8:63:56:9d:9d:c4:08:83:7d:28:a7:83:78:dc:96:
74:d5:a3:68:bf:18:33:53:1e:cf:06:16:01:b3:b3:
b2:5e:f3:15:20:34:3a:56:80:75:83:e0:7d:fa:d3:
56:1c:67:14:d9:18:82:ba:2a:bb:64:e0:77:44:e9:
5b:1a:8b:66:1e:59:47:9b:66:52:30:23:9c:0b:89:
4e:10:15:c5:66:69:ed:2e:8f:02:b3:d2:cb:16:89:
e3:5b:ec:91:11:95:5e:93:51:47:93:27:48:07:e5:
f8:d1:8d:4a:bc:88:4c:6d:ed:f4:8b:6c:e1:8f:a4:
ba:76:7e:22:41:41:c4:c6:95:3d:6d:6a:d8:69:7f:
70:2a:c7:3b:a0:d5:c7:0a:f4:14:a6:ef:1b:32:3e:
91:f2:cb:27:bc:77:30:f0:23:05:2a:81:9b:e9:a9:
2b:10:6d:74:8d:6f:73:0d:55:d9:c1:93:0d:13:3d:
a4:12:c5:55:60:b5:ce:fa:9c:90:8e:f4:64:a3:01:
48:c2:38:f6:fa:78:5e:79:17:96:dd:fb:f4:c3:8c:
0d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0C:CB:01:B2:39:1B:A5:25:25:0D:D2:23:37:15:88:1E:02:69:1B
X509v3 Authority Key Identifier:
keyid:E0:18:82:44:CB:DB:F4:84:7F:41:1D:EF:FA:40:9C:A1:DB:18:41:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BiCRMvb9IR_QR3v-kCcodsYQbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/067e7e-9337-4275-938c-3423cacefc93/1/4BiCRMvb9IR_QR3v-kCcodsYQbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/067e7e-9337-4275-938c-3423cacefc93/1/4BiCRMvb9IR_QR3v-kCcodsYQbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5f:36:97:ca:63:dd:60:f9:ab:fe:1c:70:5a:87:c8:d9:d8:
45:c6:8d:53:bb:db:43:e2:e8:be:8e:6a:8e:4f:2b:94:4b:dd:
59:82:c4:39:a0:14:b4:13:3a:64:39:7c:81:43:0b:bf:ce:21:
b7:03:43:1d:35:17:a0:4e:ac:07:18:e8:86:0d:c3:9e:ce:b7:
23:60:96:5a:fc:f3:f4:36:57:b7:d5:f7:24:1b:92:78:c6:44:
19:f6:0d:5e:b4:2d:6f:60:40:18:83:fa:94:4e:4b:e2:2c:48:
14:26:c3:db:ee:6b:7c:9e:81:c5:bf:bf:b1:17:6c:57:f6:eb:
93:fa:d1:58:4b:a3:e2:ca:a9:83:ed:85:9d:dd:2f:07:eb:8e:
7b:06:e5:c1:40:9c:0a:7d:74:3c:1e:87:50:98:1d:2b:ba:2c:
7d:8e:52:f6:b4:d8:e1:dc:23:fd:04:27:0a:d3:36:bc:11:dc:
57:02:16:5c:aa:9f:ac:ca:98:0f:27:67:ba:7e:52:3f:99:cb:
e2:ab:70:7d:d3:9b:ed:67:d5:53:e7:1a:3a:f8:e3:2c:99:7c:
04:90:83:2c:41:d2:40:db:f2:90:2e:ac:1f:31:ef:52:ce:af:
01:54:35:71:04:a0:36:aa:88:b3:d8:6f:9e:12:40:dc:62:6b:
23:2d:4a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:35:28 2026 by rpki-client