Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
File: 4fLKlRgjMUpfTRCmangiOY-4iWs.mft (raw, json)
Hash identifier: p0EDlqowHeFX1UUTdQUFsA6/uZ8XGt+fZKLBMC9s/Kg=
Subject key identifier: A0:06:16:6F:3F:14:70:AA:15:19:09:19:9C:40:39:03:F5:CE:20:13
Authority key identifier: E1:F2:CA:95:18:23:31:4A:5F:4D:10:A6:6A:78:22:39:8F:B8:89:6B
Certificate issuer: /CN=e1f2ca951823314a5f4d10a66a7822398fb8896b
Certificate serial: 019D27045CBA53C0C2797C944F3BFEA95930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:01:30 +0000
Manifest this update: Wed 25 Mar 2026 22:01:30 +0000
Manifest next update: Thu 26 Mar 2026 22:01:30 +0000
Files and hashes: 1: 4fLKlRgjMUpfTRCmangiOY-4iWs.crl (hash: ZFvZV0w/Q4J6OcdvLLt4MI7oVsWnXdQekxLJrsoOgMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:5c:ba:53:c0:c2:79:7c:94:4f:3b:fe:a9:59:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f2ca951823314a5f4d10a66a7822398fb8896b
Validity
Not Before: Mar 25 22:01:30 2026 GMT
Not After : Mar 26 22:01:30 2026 GMT
Subject: CN=a006166f3f1470aa151909199c403903f5ce2013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:f4:a4:62:62:99:b0:51:a1:66:e0:2b:ec:
d5:41:b7:2a:da:92:a5:9e:3b:6f:52:a7:4d:c4:e7:
30:58:d0:96:2d:e8:36:19:9c:55:80:68:8a:e7:ca:
30:9c:98:9a:da:22:a7:e1:80:cc:9d:6f:87:9b:58:
5e:37:0e:f5:ac:45:2f:61:54:62:dd:ea:5f:69:ba:
e1:56:ff:fd:63:59:e0:da:05:4b:db:f5:ac:b6:41:
cc:2b:2a:04:84:69:55:4b:5b:d3:8c:a5:34:41:be:
16:93:a9:6d:82:56:4e:cd:81:a1:79:ee:c8:f8:13:
2b:84:c2:eb:ec:e0:b7:be:0b:3d:0c:7f:84:a6:58:
95:42:67:ef:6e:94:c3:2d:84:2b:d7:22:b4:a7:5b:
e2:bb:1e:7a:6f:67:16:48:20:79:63:0c:5d:5a:0d:
ac:b4:73:34:e8:37:ff:c4:c2:9c:35:2e:fd:69:18:
b9:db:ef:11:71:47:6f:99:0d:24:c9:17:e5:df:0f:
09:91:2e:bc:0c:dc:02:49:45:86:05:ad:e5:30:11:
41:b7:ae:92:77:e6:f2:71:b3:6f:cc:44:2f:7d:67:
03:48:33:97:4f:66:e5:5d:3b:d9:ee:fa:6e:c7:d1:
8a:0a:1d:e2:38:8b:3d:74:83:e8:90:fb:38:a3:c3:
a0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:06:16:6F:3F:14:70:AA:15:19:09:19:9C:40:39:03:F5:CE:20:13
X509v3 Authority Key Identifier:
keyid:E1:F2:CA:95:18:23:31:4A:5F:4D:10:A6:6A:78:22:39:8F:B8:89:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9c:9d:65:f6:47:65:3c:43:f5:42:f5:84:45:58:0a:fb:28:
b5:24:82:9d:d5:f6:ec:ef:7f:0e:15:51:99:ad:9c:0d:af:c8:
c2:63:28:13:bf:07:d2:4d:01:23:a5:76:76:87:2b:d9:a1:7d:
45:5a:b5:83:4a:53:e1:1b:76:2a:7b:f1:78:59:f9:5f:8e:cc:
89:f2:1c:1f:c9:84:6f:5a:09:3e:17:b8:c5:7e:6c:0d:60:db:
3f:c4:d9:bf:e2:8d:60:24:48:87:db:0c:2d:69:45:84:e4:23:
d9:a9:cb:8e:64:a8:b3:d3:a0:92:64:a1:69:2b:ba:5c:36:f1:
2e:2c:66:41:5e:bf:78:52:b7:f7:57:f1:61:63:90:da:8a:7a:
45:cd:ec:23:35:65:4e:90:96:2a:3d:17:53:82:83:8c:d1:9e:
51:e4:d5:26:2a:b9:17:18:39:fc:a9:5c:f6:29:be:1c:e1:b5:
8c:79:2e:be:d1:5a:1b:8c:18:f3:d1:cd:9d:b5:44:5c:ef:e4:
a6:49:f9:45:e4:be:d4:5a:e4:e3:af:5e:94:b6:74:49:c3:a9:
ac:ea:c9:54:f7:82:29:b2:8b:20:a4:2c:09:c6:4e:73:2b:6e:
ee:0d:5e:01:8d:56:a1:f4:03:fd:83:a9:7f:6f:ec:34:f3:de:
a8:9c:49:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:56 2026 by rpki-client