Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
File: C4K9iLuhoX0siu9h3sHaxmFe75A.mft (raw, json)
Hash identifier: rRoOAd6+ACK30bTP7ktt+OosJGT86ksZC/T3H2e7kYU=
Subject key identifier: 5E:A7:F2:77:46:58:43:A4:F7:3E:67:F3:34:0A:17:29:1E:18:BE:96
Authority key identifier: 0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90
Certificate issuer: /CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
Certificate serial: 01A0F267C663F7565ED1D7641B6C085770E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
Manifest number: 1A7A
Signing time: Wed 30 Sep 2026 13:01:22 +0000
Manifest this update: Wed 30 Sep 2026 13:01:22 +0000
Manifest next update: Thu 01 Oct 2026 13:01:22 +0000
Files and hashes: 1: C4K9iLuhoX0siu9h3sHaxmFe75A.crl (hash: WqezC2/MPkU6dqqQbYvT4oFjU0lAbaVORyHvC07g6vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:67:c6:63:f7:56:5e:d1:d7:64:1b:6c:08:57:70:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
Validity
Not Before: Sep 30 13:01:22 2026 GMT
Not After : Oct 1 13:01:22 2026 GMT
Subject: CN=5ea7f277465843a4f73e67f3340a17291e18be96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:b5:f7:a9:ec:c8:95:e4:22:0e:4c:8c:93:
81:21:75:5c:2e:4e:87:1f:b6:bb:84:99:90:60:17:
ab:86:35:f0:2f:72:03:e4:d4:c1:5f:34:a6:10:67:
13:81:9f:71:ce:62:d6:98:c8:df:dd:6d:dc:30:2d:
a1:b8:0c:cc:18:f8:d3:b6:f4:1c:65:b2:3d:ec:53:
03:a1:95:13:af:60:ad:8e:e1:d7:ea:32:e1:cf:4f:
b9:32:74:05:e1:b8:35:24:cf:e5:b9:cf:f0:e3:0a:
54:50:99:ec:96:e2:c1:1a:05:74:00:d1:68:91:9d:
d4:96:95:0d:02:1d:47:09:5e:0c:dd:0e:01:5a:fe:
fd:ca:61:90:75:15:dd:a5:fb:57:63:5f:b5:e9:dd:
f8:15:50:78:af:50:5f:83:24:c3:da:18:40:c5:91:
92:ec:33:2d:e8:59:34:80:56:f9:61:10:5d:3e:49:
81:2a:fe:3d:e4:05:f3:80:e8:0a:9a:10:38:f7:44:
33:7f:d2:32:02:bf:8b:90:3e:2c:3f:8c:61:4e:2d:
8b:d9:1a:87:67:74:06:a8:a6:57:ad:67:09:28:52:
b9:53:b2:bd:af:0d:42:d5:4b:1e:3e:fd:d9:ff:3a:
f0:bd:71:cd:98:40:4d:ba:17:db:3c:39:a7:0e:2d:
48:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A7:F2:77:46:58:43:A4:F7:3E:67:F3:34:0A:17:29:1E:18:BE:96
X509v3 Authority Key Identifier:
keyid:0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e5:2e:63:f6:f1:65:e7:20:fd:1b:b4:94:b7:1a:01:54:d9:
b6:80:94:22:4f:01:57:7f:09:2e:ad:87:2e:ff:5d:1d:18:c3:
09:69:83:70:b6:f9:61:1c:ab:50:2a:a3:f6:62:c2:75:e0:85:
a2:73:03:df:6b:2a:69:17:78:82:11:76:7e:2b:b7:4f:d6:23:
a5:0e:7a:93:d9:c4:6c:62:89:92:3e:6c:2c:36:af:f4:3c:a1:
f2:bf:cc:18:c2:b4:1b:eb:42:e7:44:c0:79:3f:04:f9:c1:fa:
1d:07:90:2b:7b:f1:e1:b9:49:d1:40:88:6b:2d:b0:26:a9:7e:
c0:c6:c8:b0:90:78:e6:a9:a4:d6:44:58:be:af:46:c2:c1:c2:
f7:97:65:da:a3:66:8c:af:d6:48:87:dc:b7:3d:d7:3c:ed:f8:
24:c1:44:43:ad:bd:6c:30:36:90:e4:72:b7:fb:b3:46:cc:5d:
3f:1a:1c:2e:e8:7f:e7:0c:57:ac:81:b4:05:4a:83:cd:00:72:
14:eb:72:d7:1c:a5:50:49:e0:7c:2f:47:be:40:70:7d:e2:20:
bb:a8:04:f1:88:75:0f:58:8b:d1:dd:8e:0c:ca:b1:e4:e0:71:
21:d7:12:f1:1c:f0:de:86:a2:15:11:ee:41:ec:49:50:eb:19:
20:32:cf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 04:24:32 2026 by rpki-client