Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft
File: 4iUB2aQBcJg48z0a4nm85xALPM8.mft (raw, json)
Hash identifier: iz+wJ30xDzM+p57A+NVSwpXT+9mPE6vtIX1ZYLk9Yv8=
Subject key identifier: 02:AC:52:EA:47:6D:42:F4:ED:31:1F:5D:53:FB:72:BB:29:E1:6F:02
Authority key identifier: E2:25:01:D9:A4:01:70:98:38:F3:3D:1A:E2:79:BC:E7:10:0B:3C:CF
Certificate issuer: /CN=e22501d9a401709838f33d1ae279bce7100b3ccf
Certificate serial: 01A0DF189591B108689D89988F5B5E651FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iUB2aQBcJg48z0a4nm85xALPM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft
Manifest number: 14EA
Signing time: Sat 26 Sep 2026 19:02:05 +0000
Manifest this update: Sat 26 Sep 2026 19:02:05 +0000
Manifest next update: Sun 27 Sep 2026 19:02:05 +0000
Files and hashes: 1: 4iUB2aQBcJg48z0a4nm85xALPM8.crl (hash: 6b2nbnWV7J/176GUUzVEyhn54CbzsPH1hLEesZxw0Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iUB2aQBcJg48z0a4nm85xALPM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:18:95:91:b1:08:68:9d:89:98:8f:5b:5e:65:1f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22501d9a401709838f33d1ae279bce7100b3ccf
Validity
Not Before: Sep 26 19:02:05 2026 GMT
Not After : Sep 27 19:02:05 2026 GMT
Subject: CN=02ac52ea476d42f4ed311f5d53fb72bb29e16f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:24:9d:ea:cf:7c:e9:68:19:cb:69:3d:2f:16:
13:e6:5a:74:71:ae:b7:b0:f3:5d:14:3b:18:f9:6d:
cf:c9:3c:4c:ba:05:7e:d6:59:6e:09:16:57:91:39:
d3:b3:40:ad:fe:a3:2a:63:58:57:f4:3d:5e:f9:1a:
9c:9c:7a:0e:70:14:6f:c2:fb:2b:8b:2e:0f:0a:62:
a5:34:e8:61:4a:fb:94:91:1c:89:b3:ff:79:4d:fa:
cf:7e:ef:07:d6:26:49:7d:f7:e5:1b:d3:cd:81:dd:
b2:db:0b:d4:99:4f:01:e1:7a:8e:b1:76:db:e3:fb:
a7:e6:fd:3b:74:37:75:43:af:8e:ef:db:74:ae:28:
ea:90:6d:42:ea:d9:bc:27:1d:b5:a9:b1:ac:31:61:
fa:a1:42:d8:dd:57:36:05:de:a6:8f:80:d3:f5:1a:
90:b9:6b:48:06:59:b2:41:9c:a8:4d:fd:80:98:bf:
2b:6b:42:08:69:e2:8d:6c:3a:fc:16:65:6c:22:6c:
59:a5:d7:ed:5f:46:31:98:e9:a6:b9:f0:2d:32:48:
fb:90:bc:e3:86:c9:7b:a5:e9:e8:ce:10:a1:b9:85:
3c:d4:e6:22:5f:73:45:fa:63:89:44:76:5d:84:f3:
23:b8:df:59:92:98:ba:16:b5:d0:15:c2:39:e7:28:
ce:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AC:52:EA:47:6D:42:F4:ED:31:1F:5D:53:FB:72:BB:29:E1:6F:02
X509v3 Authority Key Identifier:
keyid:E2:25:01:D9:A4:01:70:98:38:F3:3D:1A:E2:79:BC:E7:10:0B:3C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iUB2aQBcJg48z0a4nm85xALPM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:50:77:32:14:96:e9:f2:90:50:9e:b5:a7:a3:c4:56:12:1b:
2a:89:e5:c1:37:d6:23:23:7f:19:bd:b6:ef:a0:1a:46:cc:2d:
9d:8c:82:8e:55:c8:7e:69:d2:89:61:9a:be:7b:ea:9c:9d:6d:
8f:ad:b5:4a:03:39:1b:56:83:ae:6d:33:26:ab:28:3b:38:3e:
ff:47:05:62:c9:29:3e:56:c3:1c:d7:b2:06:46:80:bb:28:93:
4d:35:7b:9b:a6:ab:7f:65:86:c3:39:d1:f6:e0:92:cd:76:da:
63:48:63:24:d3:cd:d1:c5:57:92:b6:ff:a0:55:96:b0:55:93:
cf:19:9d:12:99:18:ac:8d:1a:ab:36:49:4b:e9:e3:ab:07:48:
68:13:25:77:e1:e9:44:43:70:ee:0a:95:1d:4e:6d:46:bc:10:
f8:e1:5a:bf:d6:ac:73:1b:88:7c:e8:8a:37:51:96:9f:67:35:
e2:45:a3:ab:82:fe:03:98:f8:d3:2d:87:bf:2b:af:8a:3f:75:
0c:bd:6b:04:5d:a1:a3:44:95:55:61:76:a8:cc:bd:3a:9d:1e:
c4:f5:17:5b:dc:8c:d4:fa:3c:ef:bb:93:ea:80:b4:7f:e0:ee:
87:5a:75:89:8b:42:ff:17:a4:8b:33:af:54:dd:d1:b0:c0:48:
60:67:2d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:56:55 2026 by rpki-client