Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
File: 4fI_OJG9feF53kEDCi_R-ljkPRc.mft (raw, json)
Hash identifier: n+3MbW2rfwenP34Ra6kuH/amwdDZU/veQpUMAOYfiBY=
Subject key identifier: 6C:9D:30:C7:1F:AA:BF:05:02:6C:B7:21:A8:95:1D:02:1B:F2:67:3E
Authority key identifier: E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
Certificate issuer: /CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Certificate serial: 019D29292F55C59CD86FB7D9FDE96FD8606F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
Manifest number: 06A3
Signing time: Thu 26 Mar 2026 08:00:57 +0000
Manifest this update: Thu 26 Mar 2026 08:00:57 +0000
Manifest next update: Fri 27 Mar 2026 08:00:57 +0000
Files and hashes: 1: 4fI_OJG9feF53kEDCi_R-ljkPRc.crl (hash: XLXtkZSdFVetf9BZbu8VJsYPL3EPl4NfRrHW1pOu+4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:2f:55:c5:9c:d8:6f:b7:d9:fd:e9:6f:d8:60:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Validity
Not Before: Mar 26 08:00:57 2026 GMT
Not After : Mar 27 08:00:57 2026 GMT
Subject: CN=6c9d30c71faabf05026cb721a8951d021bf2673e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:68:b7:27:9d:87:1d:4f:57:ed:2d:0d:fb:
1b:6c:08:bc:59:44:96:5b:ea:12:3e:d9:29:b1:d0:
d2:f3:9b:6a:d0:e9:9c:2f:c7:c2:82:6b:59:fc:49:
58:c9:bd:b2:81:e9:e4:2e:f1:02:ea:1c:14:a2:f0:
d9:46:e8:87:7a:07:f5:cd:30:d7:e3:a5:ba:ef:58:
2d:55:a4:a9:50:99:67:a4:67:40:c8:20:5e:ac:b7:
3c:be:81:96:a8:35:f1:5c:11:7c:57:16:8e:2a:b0:
80:49:20:b4:d2:a7:2e:ed:cd:1e:eb:de:89:d0:9b:
37:3c:4c:72:52:15:36:68:f1:97:57:00:0c:fc:42:
23:a2:42:93:3e:a5:3b:54:aa:3b:52:99:d9:72:24:
4d:fe:cd:47:74:41:26:55:cc:cc:91:17:5b:f3:02:
1c:44:82:8c:c7:13:aa:1b:b6:01:16:55:62:73:cc:
73:3a:5b:cd:24:cd:2e:2a:93:ae:2f:53:4d:07:73:
6d:b6:92:9e:09:94:7f:49:f4:d3:24:45:8e:f6:2d:
94:f0:f7:70:0a:89:c0:0a:2d:1d:c5:20:42:3d:7d:
79:22:1d:11:2d:d2:27:1d:0b:ac:48:6a:24:9f:c1:
f0:9e:ab:40:2e:e2:f0:94:c4:51:f3:24:42:fd:53:
76:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9D:30:C7:1F:AA:BF:05:02:6C:B7:21:A8:95:1D:02:1B:F2:67:3E
X509v3 Authority Key Identifier:
keyid:E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:dc:a5:1d:91:35:47:5d:e6:dc:5c:c1:3f:f3:5d:71:12:d0:
69:a9:3e:34:b4:6f:fc:28:98:61:d9:12:71:1e:c3:9b:c9:f1:
4d:be:99:e9:9f:5b:cd:ef:71:ba:38:1e:88:4b:5d:2a:53:d9:
e3:13:f1:50:11:46:a1:88:39:fe:68:bf:03:7a:e6:0e:8e:6b:
c9:00:5b:fa:0c:bc:75:7e:47:0e:78:5a:73:35:c1:ed:2c:d2:
a7:4f:2e:c6:93:e1:94:7c:24:14:b1:4f:ec:64:70:90:57:30:
6d:16:07:e1:bc:c8:2a:81:70:da:bf:7b:25:88:40:17:36:2f:
66:6f:7c:36:85:ca:bd:cc:47:1b:a0:ef:ea:da:1c:c0:f9:c0:
44:5f:5b:0b:0b:21:0d:3f:5f:65:0c:f1:09:4c:ba:f6:f9:c9:
5b:bc:4a:28:8f:d1:19:dd:ab:59:86:7c:c0:a1:02:d1:68:18:
45:cb:29:3c:2b:9c:5e:59:f0:a8:fa:02:ab:e3:dd:2e:94:a5:
bc:cd:19:ec:ce:5c:29:61:6e:7b:21:b5:67:13:d6:2a:8d:ea:
6e:ea:b6:a2:4b:67:9e:57:bb:5c:ef:e0:79:0c:25:b8:c1:6c:
4f:58:1b:18:4c:d4:f9:bd:ee:6b:9f:27:bd:54:20:e6:d5:0e:
39:27:0b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:35 2026 by rpki-client