Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
File: 4xubYpkE1DhFESeFW1L4guvhYqo.mft (raw, json)
Hash identifier: Vuel5kfKPIvjG8qWNvwjKtjBe8sswWtXR4ZhWsrz/KA=
Subject key identifier: 09:B8:66:8D:9F:F1:31:8D:70:FD:51:0C:5C:88:5C:05:F2:DE:F2:E8
Authority key identifier: E3:1B:9B:62:99:04:D4:38:45:11:27:85:5B:52:F8:82:EB:E1:62:AA
Certificate issuer: /CN=e31b9b629904d438451127855b52f882ebe162aa
Certificate serial: 01A0DA968C6C13E13A452E6AD7409E7B8C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xubYpkE1DhFESeFW1L4guvhYqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
Manifest number: 13A2
Signing time: Fri 25 Sep 2026 22:01:34 +0000
Manifest this update: Fri 25 Sep 2026 22:01:34 +0000
Manifest next update: Sat 26 Sep 2026 22:01:34 +0000
Files and hashes: 1: 4xubYpkE1DhFESeFW1L4guvhYqo.crl (hash: 7ed0B7lie+t2qSdfbCDs8HYkEEhU4Et1TGYSKAjiEQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xubYpkE1DhFESeFW1L4guvhYqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:8c:6c:13:e1:3a:45:2e:6a:d7:40:9e:7b:8c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31b9b629904d438451127855b52f882ebe162aa
Validity
Not Before: Sep 25 22:01:34 2026 GMT
Not After : Sep 26 22:01:34 2026 GMT
Subject: CN=09b8668d9ff1318d70fd510c5c885c05f2def2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:ac:90:9a:78:50:64:51:81:ac:2f:14:3d:
24:39:98:2a:8e:b4:b5:36:6f:50:5d:72:ef:af:df:
00:3a:0e:7e:ce:88:38:21:a4:70:49:e3:74:73:31:
3c:d2:af:89:bf:55:0c:e4:a5:7d:9b:b6:9a:d2:ba:
89:1e:3f:70:90:b1:11:2b:80:05:7a:8a:73:80:4e:
c3:e7:cc:13:87:e8:f8:34:72:fa:2a:4d:80:53:c0:
f5:8e:9a:f5:c9:ff:62:c4:6a:e3:f6:3e:a8:b7:22:
57:a3:06:37:7f:a6:37:5e:b5:1c:11:f6:91:22:bf:
4d:b9:6a:32:91:db:de:89:d0:d0:9f:41:a4:e5:e6:
62:aa:55:47:1e:86:7c:dd:20:57:16:4c:9d:82:85:
98:45:c5:64:98:73:ae:aa:99:a9:17:f4:bf:fd:b2:
4b:06:de:c8:b5:29:0f:42:e3:be:a0:28:2a:e7:8f:
39:4e:cb:1e:08:d0:73:e6:ad:dd:ae:a0:54:7f:09:
d5:97:86:a3:bc:d4:fb:b1:e2:63:4b:ea:6e:be:ea:
54:e6:82:48:e3:4e:af:01:09:33:b6:61:da:82:c5:
e0:2c:20:c6:2e:73:8d:88:de:7d:fd:d6:33:b1:a5:
c7:d2:e2:a0:da:0b:27:05:38:f5:73:d8:91:cb:de:
4b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B8:66:8D:9F:F1:31:8D:70:FD:51:0C:5C:88:5C:05:F2:DE:F2:E8
X509v3 Authority Key Identifier:
keyid:E3:1B:9B:62:99:04:D4:38:45:11:27:85:5B:52:F8:82:EB:E1:62:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xubYpkE1DhFESeFW1L4guvhYqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ad:59:5a:2f:8d:30:88:d2:98:4a:7b:13:b4:f4:50:0b:e7:
53:42:58:b5:f9:b9:6e:43:f4:be:90:b2:21:97:e1:ea:a8:eb:
f3:97:7d:0c:ed:eb:51:20:ef:0e:39:72:81:91:62:f4:56:ca:
cb:93:1f:26:b4:df:8c:29:3f:7c:35:a4:a6:c8:cd:e9:a5:d9:
0e:94:e8:46:ed:60:fa:5d:62:bc:b0:94:a3:dc:72:4c:f9:4d:
51:1c:23:cc:8f:82:30:98:7f:04:b5:8b:a7:0d:76:cf:8c:66:
7b:d3:da:8f:0d:b9:6b:6e:18:ad:2f:fc:19:78:c6:50:c9:6c:
57:2b:79:f2:be:46:f3:2b:0d:2c:cc:b8:5c:8b:89:54:ae:40:
17:ef:7a:dd:ab:96:cc:1d:00:33:3e:39:e3:6c:89:1f:c5:9e:
54:43:b8:7f:42:3a:c6:64:64:10:38:29:ca:f5:3b:85:f6:94:
0d:57:4c:95:41:83:1e:ef:97:f6:4d:47:76:d6:84:e5:a5:70:
ba:d3:df:b7:54:c9:49:18:e2:6f:d4:33:85:9e:df:db:22:2b:
fe:5b:1a:ea:ad:97:2b:50:3b:72:1f:a2:24:29:37:1c:d7:85:
f6:32:88:51:26:71:18:7d:22:db:69:77:91:db:11:1b:83:b3:
df:89:d1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:23:00 2026 by rpki-client