Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/9ae54e-1559-44c4-a8f6-a607e722d490/1/4Yup6gmzdhhN50OUcr0G2LHRfQs.mft
File: 4Yup6gmzdhhN50OUcr0G2LHRfQs.mft (raw, json)
Hash identifier: 8021dsBNlzN887X2J3U1MM6oNs7R02eQMHk0ieCNgU8=
Subject key identifier: 49:0A:3A:71:3A:60:A5:BD:D0:B7:20:BC:27:E9:BB:38:57:82:C4:D8
Authority key identifier: E1:8B:A9:EA:09:B3:76:18:4D:E7:43:94:72:BD:06:D8:B1:D1:7D:0B
Certificate issuer: /CN=e18ba9ea09b376184de7439472bd06d8b1d17d0b
Certificate serial: 01A0E06124B6C2A830893A6A3270423B5E45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Yup6gmzdhhN50OUcr0G2LHRfQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9ae54e-1559-44c4-a8f6-a607e722d490/1/4Yup6gmzdhhN50OUcr0G2LHRfQs.mft
Manifest number: 0201
Signing time: Sun 27 Sep 2026 01:00:57 +0000
Manifest this update: Sun 27 Sep 2026 01:00:57 +0000
Manifest next update: Mon 28 Sep 2026 01:00:57 +0000
Files and hashes: 1: 4Yup6gmzdhhN50OUcr0G2LHRfQs.crl (hash: JpSAnGYhWgnE1vTMI8juSMfVZYN7LIi9xKaClzSFSn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9ae54e-1559-44c4-a8f6-a607e722d490/1/4Yup6gmzdhhN50OUcr0G2LHRfQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9ae54e-1559-44c4-a8f6-a607e722d490/1/4Yup6gmzdhhN50OUcr0G2LHRfQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Yup6gmzdhhN50OUcr0G2LHRfQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:24:b6:c2:a8:30:89:3a:6a:32:70:42:3b:5e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e18ba9ea09b376184de7439472bd06d8b1d17d0b
Validity
Not Before: Sep 27 01:00:57 2026 GMT
Not After : Sep 28 01:00:57 2026 GMT
Subject: CN=490a3a713a60a5bdd0b720bc27e9bb385782c4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:55:86:fc:e8:8e:bf:df:94:cb:10:e7:ef:
81:4c:63:cd:3c:bf:48:2b:d1:22:bd:33:71:b3:a8:
a9:56:59:dd:b0:82:50:8a:47:39:38:e2:f8:34:26:
3e:e7:da:53:82:76:51:ac:ed:f1:66:74:40:2d:c3:
95:a3:2b:87:c1:22:b8:8a:50:6b:b4:27:2d:af:8c:
dc:c5:7b:bb:b6:c7:27:e7:79:1c:27:77:2b:25:57:
81:74:83:87:79:1e:af:0c:73:a0:1a:5f:35:b4:27:
c4:4d:52:5f:2a:d5:c4:ee:1a:8a:9e:b5:ee:8a:37:
aa:ac:81:06:da:39:12:47:65:0e:54:77:ad:bc:5f:
55:e7:84:84:34:dc:e0:70:16:64:97:0a:ca:db:cb:
37:81:b8:00:bf:20:e2:07:ff:0d:da:cd:24:8a:83:
3e:ae:2a:fc:98:4b:9d:3d:27:ca:30:9f:e6:1b:06:
10:5a:50:58:00:c1:05:d2:c9:fd:f1:63:9f:ce:cf:
10:7b:5c:1d:5a:9d:09:95:ae:2a:1f:c9:47:8e:c6:
e8:7b:5d:cf:d4:46:84:9b:91:87:48:da:5e:65:51:
00:9f:60:f1:69:92:7f:ab:01:27:93:b3:3b:dc:91:
9f:0b:4c:d0:e3:ff:f3:81:16:d9:c4:d3:88:4b:b7:
f3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0A:3A:71:3A:60:A5:BD:D0:B7:20:BC:27:E9:BB:38:57:82:C4:D8
X509v3 Authority Key Identifier:
keyid:E1:8B:A9:EA:09:B3:76:18:4D:E7:43:94:72:BD:06:D8:B1:D1:7D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Yup6gmzdhhN50OUcr0G2LHRfQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9ae54e-1559-44c4-a8f6-a607e722d490/1/4Yup6gmzdhhN50OUcr0G2LHRfQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9ae54e-1559-44c4-a8f6-a607e722d490/1/4Yup6gmzdhhN50OUcr0G2LHRfQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9d:e5:7e:70:cf:c6:f1:c7:f5:50:de:5e:7c:2d:75:91:fb:
69:ff:8e:99:19:b0:5b:03:40:f5:20:60:0d:6d:fe:4c:3d:3e:
1b:40:7c:aa:51:b1:37:e2:fc:cb:a3:b1:48:0a:16:bb:da:ed:
a0:f7:c9:d6:dc:b4:80:89:0d:44:0e:c0:c5:a1:ec:75:a3:c5:
c9:71:de:65:03:e3:a4:fa:59:61:93:9d:38:02:b4:7e:af:d9:
37:93:47:04:a3:ae:96:dd:08:95:7c:73:0f:79:55:ba:92:32:
52:9d:cf:48:34:dd:ea:a4:1b:a9:b1:eb:d1:2f:f7:08:63:15:
32:56:9a:b3:6f:eb:fd:c4:ee:f1:f4:f5:8c:ea:f6:26:95:1f:
28:88:50:98:f1:51:27:3c:e2:ba:f9:35:56:11:28:f2:9c:94:
a9:b7:1c:b6:54:03:68:07:8b:dc:f8:f7:bb:94:0a:49:ef:61:
21:44:b9:fe:9a:56:52:27:b4:7b:17:7f:ab:0a:77:c4:83:d0:
3e:1f:e0:55:46:5f:2a:5a:2e:a7:fd:10:f8:24:52:61:0c:79:
c1:67:84:92:08:c7:cb:c4:94:3f:90:d7:c9:77:38:13:7c:9e:
9e:d2:8d:e0:ff:f4:55:4c:b8:c2:f1:3f:f2:52:6e:d2:bb:ea:
d6:39:64:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:02:35 2026 by rpki-client