Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
File: 4T3UuB8fx53U2mQo-cKgJzRX_wY.mft (raw, json)
Hash identifier: 2umh99U0UrXkEwogEm5X6mZV9gKPwFUgg+r8jhvJoLg=
Subject key identifier: 30:C8:76:40:4C:F5:AB:04:A3:13:EA:91:3F:9F:C7:86:F9:52:E4:6A
Authority key identifier: E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06
Certificate issuer: /CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06
Certificate serial: 01A0D2DEA89414377E0AFC09F4A7C9E4860F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
Manifest number: 08E6
Signing time: Thu 24 Sep 2026 10:03:22 +0000
Manifest this update: Thu 24 Sep 2026 10:03:22 +0000
Manifest next update: Fri 25 Sep 2026 10:03:22 +0000
Files and hashes: 1: 4T3UuB8fx53U2mQo-cKgJzRX_wY.crl (hash: 49FrTlv+n11CAYHVFAtoxgn1DN7x+Z/6mASGdWuzq6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:a8:94:14:37:7e:0a:fc:09:f4:a7:c9:e4:86:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06
Validity
Not Before: Sep 24 10:03:22 2026 GMT
Not After : Sep 25 10:03:22 2026 GMT
Subject: CN=30c876404cf5ab04a313ea913f9fc786f952e46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:74:2b:98:98:71:e6:94:c7:21:86:20:a6:
3a:12:60:1d:d0:5c:67:e0:18:59:44:0a:97:1d:5c:
48:5c:de:f9:42:24:ea:c5:c8:e3:e2:9a:cc:08:fd:
f2:9c:c8:9c:4c:ff:e1:4c:45:79:27:c5:a3:77:94:
6e:2a:52:e5:fc:37:59:5d:39:ea:f2:80:61:da:dc:
03:b9:46:7f:51:79:af:71:7a:65:8b:c7:8e:25:ab:
b0:4c:cb:7c:a1:99:5c:7e:6d:37:2f:8d:b8:6e:2f:
c3:be:51:d1:a7:6a:db:a3:a3:aa:2b:1b:55:03:8c:
66:31:a6:e0:e5:1d:c3:8a:cb:2f:7b:a4:a8:d3:7d:
0e:40:d2:1f:0a:08:1f:f5:9d:a4:4d:02:d9:f5:b2:
1e:fb:f3:99:27:42:db:a7:73:25:ea:10:0c:25:58:
a3:01:41:d1:36:17:54:4d:ad:23:4a:2b:5f:83:7c:
65:c0:5f:48:1d:f1:d4:55:61:80:86:63:92:a6:2c:
1c:6f:d8:d3:ac:02:2f:3c:28:0c:51:4d:c5:e0:d7:
cd:35:92:c1:d1:37:d6:08:b4:50:7e:42:e7:75:b7:
b0:b6:36:a5:bd:87:23:e9:c4:5f:e2:7a:cb:e8:86:
bc:82:11:97:18:5d:a4:09:47:5c:44:4c:d8:91:df:
89:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C8:76:40:4C:F5:AB:04:A3:13:EA:91:3F:9F:C7:86:F9:52:E4:6A
X509v3 Authority Key Identifier:
keyid:E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d3:62:eb:a2:9a:02:46:42:a3:66:4c:40:ee:4c:28:18:58:
03:06:77:04:5b:b3:77:9c:9c:8f:a5:48:d3:08:1c:9d:ab:a9:
4c:2b:57:3a:d7:8e:94:4d:38:1f:88:f5:3c:ed:bc:f2:2f:4e:
93:23:ae:8b:e8:2e:e3:b9:27:c2:27:1a:33:65:b5:a6:6c:ce:
56:be:2b:6f:5b:8d:ce:ca:0f:57:20:31:2a:ff:e3:ba:07:8a:
06:14:16:51:51:93:11:73:58:dc:31:ee:e3:78:da:40:53:b7:
19:74:9d:be:c7:8f:e1:ce:e7:3d:f6:e4:e9:fa:3c:0c:77:22:
7c:ce:73:79:33:37:f1:4d:56:f8:6c:80:c9:65:b4:08:fd:fe:
d5:32:2c:a4:15:1c:8b:15:9b:96:2d:33:ca:7b:38:61:4f:4d:
e5:4b:a3:e2:7b:3d:b5:eb:bf:16:40:36:8e:f9:16:41:98:0e:
dc:0a:96:d7:a0:51:7c:52:27:57:d4:f8:a7:b6:72:5c:97:ee:
53:0a:9a:37:b6:7e:7e:2a:c3:25:82:3e:c4:ca:12:4b:79:b1:
98:94:17:b9:eb:17:70:df:31:b0:8d:06:75:e4:ed:1a:f9:53:
6a:9a:23:16:1f:61:b6:f0:41:a3:80:d1:b5:94:8f:55:f9:26:
10:26:3e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:46:59 2026 by rpki-client