Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
File: 4TcnopRRvk3Zkitg0cWW6Aaplfs.mft (raw, json)
Hash identifier: R/BSHudT7wdX6q73ZSE2U0iYWnIUdvumpHbMorzqN7U=
Subject key identifier: DF:3B:21:30:1D:24:7F:DE:62:C9:FA:B6:6B:7A:73:63:78:FE:E7:AA
Authority key identifier: E1:37:27:A2:94:51:BE:4D:D9:92:2B:60:D1:C5:96:E8:06:A9:95:FB
Certificate issuer: /CN=e13727a29451be4dd9922b60d1c596e806a995fb
Certificate serial: 01A0C9D961BEF0E00A38963E8E3248AECBC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
Manifest number: 1A64
Signing time: Tue 22 Sep 2026 16:01:01 +0000
Manifest this update: Tue 22 Sep 2026 16:01:01 +0000
Manifest next update: Wed 23 Sep 2026 16:01:01 +0000
Files and hashes: 1: 4TcnopRRvk3Zkitg0cWW6Aaplfs.crl (hash: sDNFvFKjoFnZJl8r1/0ltWl/Cuw8WyDiOLKSMMSbk5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:61:be:f0:e0:0a:38:96:3e:8e:32:48:ae:cb:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13727a29451be4dd9922b60d1c596e806a995fb
Validity
Not Before: Sep 22 16:01:01 2026 GMT
Not After : Sep 23 16:01:01 2026 GMT
Subject: CN=df3b21301d247fde62c9fab66b7a736378fee7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:af:27:81:f9:63:7b:15:16:d5:9b:11:3a:a8:
25:6f:a2:12:60:ee:6c:b1:5d:f1:50:d9:26:e7:a2:
ae:73:3a:db:e3:29:e9:e9:6c:25:73:20:2c:80:92:
43:dc:6b:45:57:23:99:4b:9a:f1:75:78:72:f4:0c:
c9:4e:3e:ea:f1:7a:8e:e1:f6:32:9f:dd:8f:c6:de:
b3:39:eb:d5:df:89:f7:aa:04:09:03:96:a7:7f:5d:
6c:1e:e7:5d:94:03:e3:71:09:2c:eb:53:84:b2:79:
62:64:64:bb:a4:88:31:20:c2:80:05:0d:74:38:87:
d9:22:00:96:ea:67:d9:e2:c6:96:b1:d9:c8:33:1a:
e9:ca:f8:d8:3f:9b:25:89:f4:1b:dc:d1:e5:df:d6:
ec:15:9e:70:1e:c1:6a:70:fc:16:eb:f2:e3:0b:a5:
05:a9:97:11:fd:71:c4:c9:d4:53:e1:77:8a:48:15:
81:5b:97:6a:f6:57:38:d9:f5:aa:c3:ac:00:ed:5d:
59:ec:47:a8:42:62:8b:8c:31:8d:d3:c5:87:00:33:
8a:a5:5f:93:66:a7:50:7c:47:fa:df:5a:61:dd:c7:
ec:dc:45:21:42:71:5b:38:f6:e8:21:0a:c8:e4:c9:
82:a5:e2:d7:0a:67:69:1e:d7:45:f3:df:1a:47:59:
ad:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3B:21:30:1D:24:7F:DE:62:C9:FA:B6:6B:7A:73:63:78:FE:E7:AA
X509v3 Authority Key Identifier:
keyid:E1:37:27:A2:94:51:BE:4D:D9:92:2B:60:D1:C5:96:E8:06:A9:95:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3f:37:d7:2c:7d:be:78:30:4f:90:7e:ad:ab:b4:83:9c:41:
db:05:6e:a5:fe:56:c6:35:ea:97:58:fc:64:38:2b:a2:42:93:
9b:8a:2d:84:b1:38:ef:6a:5f:21:4a:35:7a:7b:a1:a2:63:4d:
0a:75:cb:40:22:a1:e2:35:d7:7e:76:1d:e6:ad:ec:01:19:98:
e8:3b:42:5f:38:3c:cb:7e:8f:bc:f2:79:24:d1:20:3d:a8:aa:
b3:1d:a8:34:86:61:27:71:d1:04:76:d7:0c:17:93:56:ed:45:
ed:3c:a7:3e:48:31:e9:61:0f:65:6d:7b:92:2f:b0:61:a7:6d:
97:34:3c:fb:d7:57:52:b0:fb:9a:72:0f:3c:7e:ca:fc:83:a2:
af:85:5d:1b:3b:3f:91:eb:24:3e:42:f2:97:ac:35:0f:dc:3c:
50:73:d9:8c:19:cd:33:c0:f8:62:69:80:44:d7:b3:38:f4:6a:
e4:8e:9e:96:9d:28:c0:3d:2e:6e:2a:18:70:78:eb:78:60:74:
6f:d0:e0:94:a7:b3:83:0e:08:72:69:ab:ad:8b:77:f1:45:75:
20:36:c4:8c:51:b7:c1:aa:b7:bf:4d:07:36:97:4d:af:da:90:
0d:f6:67:0e:a7:76:47:5a:8b:0f:f8:6d:17:32:38:2e:6c:c9:
ce:d1:f1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:42:10 2026 by rpki-client