Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
File: 4tY8oFQoMuZCZPOssVYZki_s-Ds.mft (raw, json)
Hash identifier: b72EnJ8G6qW4fqDcQSqHt8pFck5Dk92/PR5qrXqouZ8=
Subject key identifier: CF:C9:66:B4:DC:75:24:6C:FF:AD:3A:93:9A:13:53:EA:60:AA:BD:6D
Authority key identifier: E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B
Certificate issuer: /CN=e2d63ca0542832e64264f3acb15619922fecf83b
Certificate serial: 019D25F20954301A234BDB75E3834C7C6FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
Manifest number: 115E
Signing time: Wed 25 Mar 2026 17:01:52 +0000
Manifest this update: Wed 25 Mar 2026 17:01:52 +0000
Manifest next update: Thu 26 Mar 2026 17:01:52 +0000
Files and hashes: 1: 4tY8oFQoMuZCZPOssVYZki_s-Ds.crl (hash: ezB/mUdWe6nC+9rCsRfpf54HUIsVmWMTnuaZn2+88vQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:09:54:30:1a:23:4b:db:75:e3:83:4c:7c:6f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d63ca0542832e64264f3acb15619922fecf83b
Validity
Not Before: Mar 25 17:01:52 2026 GMT
Not After : Mar 26 17:01:52 2026 GMT
Subject: CN=cfc966b4dc75246cffad3a939a1353ea60aabd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:a5:e6:c1:e8:f4:42:04:18:3c:6c:06:33:
d4:be:3b:1a:b3:88:c1:c2:47:f9:13:e1:1b:37:e1:
09:e9:2f:13:a8:c1:84:9c:5c:4a:46:f4:3b:d5:a5:
22:57:37:a5:ee:55:24:7c:a0:12:ec:01:fb:38:5f:
a5:9d:d5:a2:f8:96:b1:ca:7f:4c:ae:63:c6:f3:a4:
5e:6b:e0:a3:97:fa:b4:d9:a9:37:0b:15:1c:b4:1d:
e7:3e:86:06:9a:79:b2:45:43:b8:d4:01:10:06:65:
7d:7c:6a:4e:c9:c8:c4:42:46:ab:4d:95:42:94:d0:
1b:c0:17:3c:09:ac:22:b3:14:7a:e6:e4:51:76:e7:
6c:4a:46:07:0a:11:9f:1d:91:35:6a:2f:2d:c7:fa:
89:d7:95:8e:c0:d9:51:24:d5:24:6f:ea:55:7e:94:
4a:1b:48:3b:b1:71:c1:6e:a9:80:a7:8b:df:bc:65:
1f:13:7f:0f:44:ab:49:c9:de:91:2b:14:c5:7b:65:
be:78:9b:c0:6f:35:ef:af:c1:bf:6e:a3:a7:c7:68:
8b:47:61:ca:5e:60:7c:ad:65:cd:16:ea:74:e2:18:
80:b4:da:23:26:57:df:d9:5d:bc:78:64:57:12:0f:
f6:a1:ea:88:d6:40:36:17:6a:02:0a:d0:55:83:3a:
06:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C9:66:B4:DC:75:24:6C:FF:AD:3A:93:9A:13:53:EA:60:AA:BD:6D
X509v3 Authority Key Identifier:
keyid:E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0c:4c:67:f3:55:6d:32:19:02:9b:09:8e:0f:9c:48:75:34:
24:f1:5c:fd:b0:b8:d0:cd:4a:1e:dc:25:52:96:29:d4:65:ca:
cf:a5:0f:07:0a:0a:2c:c5:18:1b:e3:d4:07:09:ad:4b:4f:95:
b3:5f:06:b5:61:83:fd:a3:20:10:9b:03:78:fe:81:45:ff:cb:
ac:71:30:2a:1b:86:71:5c:5c:92:9a:24:fc:b0:72:57:c5:35:
42:35:71:74:d2:a8:8e:72:ee:af:3c:6c:e7:89:f3:d3:65:02:
79:33:9a:2e:b4:0e:85:09:91:56:a2:20:3f:c7:cc:8f:29:df:
fc:37:5e:b2:0e:f3:18:30:fe:86:13:07:a9:2b:aa:36:9c:dc:
42:4e:31:07:2f:49:22:1b:b8:be:7d:7f:a1:c2:b6:77:f3:bb:
8a:a7:6e:7b:00:a3:ec:65:a2:a2:ed:ff:23:8d:94:a3:e3:2f:
e3:6a:cc:bb:16:60:38:54:50:2d:2f:c3:01:7f:fe:d2:97:57:
f0:2a:e7:81:45:65:d9:74:2d:8e:6e:65:64:9d:2a:18:c9:7b:
6f:52:3a:bb:c5:c5:69:95:c5:66:ad:b5:8e:8e:a9:e5:6e:8f:
96:45:f2:95:8a:e7:35:5d:f0:52:2c:2c:a7:23:95:f6:00:5c:
0a:ed:bc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:53 2026 by rpki-client