Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
File: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft (raw, json)
Hash identifier: V5b1SZc5PxLKaSVGlbt0fj6J/8z+dH7gqm4YFOay1XM=
Subject key identifier: 16:E5:CF:47:72:CF:74:FC:94:43:A0:6B:33:3A:B7:99:A1:57:CF:5F
Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Certificate issuer: /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Certificate serial: 01A0CD481A2B72FE6D93E8D1968A8EDCDA71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
Manifest number: 0DE2
Signing time: Wed 23 Sep 2026 08:00:49 +0000
Manifest this update: Wed 23 Sep 2026 08:00:49 +0000
Manifest next update: Thu 24 Sep 2026 08:00:49 +0000
Files and hashes: 1: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl (hash: mTUAa52ogtEA9l7KVdWowHYeAMRB4upIwTin/dl3SnY=)
2: Lb4QYGzxLdlZHywuLvkaZr8MbV8.asa (hash: djJmDLE7dgkUswvUuZUlXxmQuuCob6by6G/MEdD7z7s=)
3: s-PKc_tu2wV4rS8DFKDtN3pEWOo.roa (hash: RIeIk6mysjr3waBR5H6D0lD1jhhyLuowL03Fip2BNmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:48:1a:2b:72:fe:6d:93:e8:d1:96:8a:8e:dc:da:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Validity
Not Before: Sep 23 08:00:49 2026 GMT
Not After : Sep 24 08:00:49 2026 GMT
Subject: CN=16e5cf4772cf74fc9443a06b333ab799a157cf5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:c8:cb:61:eb:7e:54:d1:4a:24:ea:5b:ac:
cf:a0:0f:9f:29:b0:9d:61:42:9a:6e:4c:6d:55:21:
27:9f:b7:e9:bf:b8:05:5b:40:66:92:18:fd:d9:1e:
d0:d4:05:4b:9c:96:9e:30:0e:8b:76:a7:c6:1b:02:
68:ca:0c:76:5b:77:28:5c:d5:a8:6e:25:06:05:0a:
b5:6e:53:54:ef:ce:16:cf:3d:f9:1c:98:f4:ae:05:
f0:75:5b:dc:11:72:c8:5a:12:a5:29:64:f1:de:5c:
4b:78:dc:af:4b:98:c1:3e:92:96:15:b6:c5:97:db:
c1:aa:20:eb:b8:d3:ed:35:21:b4:54:fc:31:69:7d:
69:62:be:3b:09:8c:bc:a3:b4:8e:71:0c:cc:b5:1e:
aa:b0:25:be:20:b6:60:c2:71:94:ae:26:2a:38:73:
0d:17:48:da:0f:49:82:64:a4:f4:4b:d2:fa:4c:86:
99:be:34:a5:72:aa:fe:11:0d:15:e2:ab:8e:31:0c:
3d:3b:f8:57:75:5d:6f:3d:8e:0b:6c:aa:f3:53:2a:
13:a6:08:3a:1d:55:20:8e:f5:8e:73:b4:14:36:30:
e5:5d:de:86:47:ed:be:61:52:3f:29:17:71:6e:9a:
6d:d9:e5:47:78:fb:56:f6:e5:8d:6b:f3:5a:6a:27:
52:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E5:CF:47:72:CF:74:FC:94:43:A0:6B:33:3A:B7:99:A1:57:CF:5F
X509v3 Authority Key Identifier:
keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:63:b1:e8:7d:43:82:bf:c4:b9:e5:8a:33:d7:23:af:8f:11:
d8:f0:79:e2:d1:29:b6:1e:c3:24:a0:ed:95:c8:75:0e:ba:66:
58:50:3f:c2:b1:f4:22:b6:fc:22:58:11:c4:89:8b:1f:47:b5:
37:54:b6:5b:00:ab:25:e5:95:12:11:30:97:f7:99:b5:a0:9d:
16:8e:bd:8e:48:b9:60:ca:9c:38:4e:62:8b:cd:34:4e:2b:28:
5a:38:33:94:7e:95:53:39:28:b1:55:b5:79:82:c9:92:f9:b1:
43:b3:a1:51:ce:3b:be:77:fd:85:25:40:7b:e2:0c:ed:13:ba:
92:bc:09:6e:cc:d5:d4:e4:05:0b:f9:b0:50:6e:3e:55:a8:93:
6f:96:03:b9:ca:5e:db:27:34:a3:19:be:6a:42:59:bf:3e:c9:
75:d4:99:a0:02:40:41:9b:48:24:cc:38:81:8f:c0:f7:91:ae:
ab:e7:d2:68:44:38:f0:69:6e:74:4d:05:a4:7b:87:c1:93:a4:
95:97:a7:24:1f:3b:cc:2d:3f:44:a0:47:11:a1:6b:59:37:c4:
8a:bf:c2:06:cd:b8:18:5e:0a:0f:83:0a:0a:0c:b2:10:2d:bb:
01:ae:40:8d:d9:24:90:01:a1:87:18:cd:fe:7d:ab:d6:8b:28:
ed:36:53:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:16:26 2026 by rpki-client