
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
File: 4UYAGfiAaeNhThUQkhzH5E0cq-I.mft (raw, json)
Hash identifier: yX05xlmhfaNrPkdkzq3zJwO0vMR00BBNNYtqMKcz3OY=
Subject key identifier: 9C:FE:CA:DE:1E:22:09:E2:43:C1:2D:3F:37:63:6F:DD:D6:64:3E:DA
Authority key identifier: E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2
Certificate issuer: /CN=e1460019f88069e3614e1510921cc7e44d1cabe2
Certificate serial: 01A134B515227C4CEEB6A4F9C2B0F51A2484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
Manifest number: 1A9D
Signing time: Tue 13 Oct 2026 10:00:44 +0000
Manifest this update: Tue 13 Oct 2026 10:00:44 +0000
Manifest next update: Wed 14 Oct 2026 10:00:44 +0000
Files and hashes: 1: 4UYAGfiAaeNhThUQkhzH5E0cq-I.crl (hash: d5YVedByw5ZwZghUvrn+JiFfPjCWJX9oez/3z2QdFlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:b5:15:22:7c:4c:ee:b6:a4:f9:c2:b0:f5:1a:24:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1460019f88069e3614e1510921cc7e44d1cabe2
Validity
Not Before: Oct 13 10:00:44 2026 GMT
Not After : Oct 14 10:00:44 2026 GMT
Subject: CN=9cfecade1e2209e243c12d3f37636fddd6643eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:53:ee:aa:24:7f:24:a9:3b:dc:0c:44:b4:92:
23:5d:cf:15:a5:84:ef:9a:32:24:1b:e7:3b:cb:fa:
8f:a4:e1:67:aa:07:4f:28:0a:ec:5c:2c:f8:9f:8b:
64:e7:fa:5b:19:a0:71:7a:53:2b:9c:b9:69:da:8d:
7b:e7:9c:16:9c:ac:04:ed:c2:ae:26:95:6c:a8:12:
e3:4a:a1:3a:3c:17:a3:c1:14:77:f0:2e:43:ed:6b:
9f:d4:ae:3f:e1:51:6c:c8:fb:98:d6:01:89:24:cd:
3d:14:63:3c:83:5b:54:cd:a7:a8:ce:3b:ad:de:64:
b5:fe:71:2f:83:3d:b8:24:a9:86:89:c8:de:ff:88:
0e:15:96:bf:fd:60:a5:a4:dd:83:7b:6d:e9:18:41:
73:50:c4:95:be:32:bd:ca:d7:06:f5:f5:0f:ce:0b:
8d:4e:88:f3:33:bd:b7:2a:c0:6a:96:79:a6:00:0d:
a4:36:a2:06:37:22:40:e1:54:b5:8c:d9:77:d2:29:
94:b3:5d:72:65:14:55:68:97:e5:cb:bc:ac:44:fb:
ef:6b:15:88:ff:76:d7:a6:6c:ed:db:9f:78:be:ae:
95:48:af:32:96:b3:54:88:44:d0:0f:f9:61:48:83:
5e:00:a7:ce:7c:07:2e:1c:1c:20:8d:f1:60:3b:e8:
83:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FE:CA:DE:1E:22:09:E2:43:C1:2D:3F:37:63:6F:DD:D6:64:3E:DA
X509v3 Authority Key Identifier:
keyid:E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b1:06:a7:53:d4:a5:34:e8:4d:b1:48:30:7e:c8:be:26:9f:
f4:8b:fc:92:5d:c6:f3:4e:0c:a5:30:6c:11:11:cf:67:53:5b:
63:27:e1:a7:7d:91:9e:08:8f:52:4b:e5:6d:1e:8d:60:a7:45:
6b:76:8f:12:1e:6a:fb:fc:3b:61:30:aa:1d:ce:7f:00:da:da:
61:74:12:c5:00:2a:8c:24:d3:53:1e:08:81:4f:52:65:a5:21:
3b:c9:a2:93:48:79:bc:72:d1:8f:11:11:eb:d4:31:8d:fe:a5:
7c:ae:cf:0b:7a:a0:a6:48:9d:94:dc:75:66:2c:f4:64:90:77:
4f:55:b0:9d:1e:d2:7f:7a:ee:9f:d3:cc:4e:6b:47:99:a4:39:
87:b2:be:ad:08:23:16:f8:3d:c7:b5:50:aa:f8:d4:c3:d8:33:
90:85:28:4d:23:60:19:25:e6:3b:9a:5a:d5:cd:a5:7f:00:77:
37:90:8c:ab:89:f3:b0:25:3d:ed:9f:70:cb:bb:ff:ee:e9:85:
32:5d:6b:5d:53:02:33:c8:4c:b0:2b:32:9b:a8:2d:6e:db:c8:
02:50:eb:51:9a:4d:1e:2e:e9:f2:8c:bb:33:dd:4e:52:a6:b6:
3f:eb:f8:8b:e9:c7:b4:0a:09:f6:a0:b1:de:ba:6a:c9:75:27:
2e:48:9d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:27:14 2026 by rpki-client