
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
File: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft (raw, json)
Hash identifier: ElXttDHK5jNemwI+rYzHtoQLWvx3TNVYl15k9u1XVdQ=
Subject key identifier: 7B:1E:E9:34:D4:F1:2E:F6:B0:F3:CF:35:FD:0C:12:DA:11:81:55:90
Authority key identifier: E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
Certificate issuer: /CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Certificate serial: 01A0CBC6F94CAC524B3684780507F578C89E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
Manifest number: 1A65
Signing time: Wed 23 Sep 2026 01:00:09 +0000
Manifest this update: Wed 23 Sep 2026 01:00:09 +0000
Manifest next update: Thu 24 Sep 2026 01:00:09 +0000
Files and hashes: 1: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl (hash: TXpsDRnBvj+0PQWG7E1glyhBQ1jawPtn/fWdq744yew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c6:f9:4c:ac:52:4b:36:84:78:05:07:f5:78:c8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Validity
Not Before: Sep 23 01:00:09 2026 GMT
Not After : Sep 24 01:00:09 2026 GMT
Subject: CN=7b1ee934d4f12ef6b0f3cf35fd0c12da11815590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:eb:3d:d8:ea:5c:88:6d:da:58:25:b8:89:
72:2a:fe:ff:ff:fd:9e:39:60:ed:bc:ce:6f:f6:09:
9c:16:be:bb:75:23:90:79:ff:22:7c:63:b6:61:34:
a9:72:c0:70:b5:97:96:a8:aa:2b:2b:ec:66:45:51:
80:82:b6:75:b6:61:b4:70:36:dd:29:03:50:e0:ec:
45:09:61:98:dd:bc:70:0c:7b:fe:ad:aa:e3:b3:ee:
8d:50:28:28:fc:1c:ba:94:d1:cd:5b:51:3a:99:26:
2d:a3:56:fb:61:83:ab:b6:0c:7a:f1:7a:e1:1c:5f:
d9:1d:61:6e:37:42:90:e9:e7:45:ed:a4:fa:77:e0:
69:cb:ec:6e:b7:6b:bb:f6:e5:b1:c5:e1:53:24:67:
09:cb:19:76:42:6a:c4:c8:95:c4:66:f8:1c:c6:27:
fd:04:a7:8f:8f:02:c5:f8:8f:c5:94:8a:cf:9a:30:
f1:1c:d9:1f:e7:bb:50:fa:4b:7d:8d:b5:72:08:b2:
60:5a:01:3b:15:35:d4:ec:72:d8:49:25:57:55:c4:
97:9c:b7:25:99:62:4c:13:ba:e1:44:44:b7:d5:c5:
bd:de:fe:ec:91:12:8f:d7:3e:af:9c:ad:d0:fe:65:
4d:66:80:77:3e:50:ff:72:92:c0:58:7e:34:23:cc:
72:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1E:E9:34:D4:F1:2E:F6:B0:F3:CF:35:FD:0C:12:DA:11:81:55:90
X509v3 Authority Key Identifier:
keyid:E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e4:2c:cf:9b:82:a7:54:c6:1d:bd:1a:f8:50:d3:c9:9f:32:
77:7f:67:87:5f:1c:2e:62:87:f0:44:d7:62:78:10:07:08:b0:
09:70:d3:6d:37:c9:1e:06:4d:cf:d0:8e:81:59:4c:98:75:e9:
0e:05:3e:a5:52:90:ff:d2:dc:60:a3:43:f0:8c:8b:67:47:d5:
7e:be:ac:94:f1:de:96:3b:59:07:c0:ab:cf:53:08:b8:28:3d:
e4:54:0d:b5:12:aa:4c:6e:8c:f1:9a:b4:72:a5:2e:5e:00:ee:
10:e9:2c:fc:c1:40:a0:3a:46:a5:c2:67:51:9c:1a:ef:06:1e:
61:25:43:05:53:db:85:a2:16:c9:21:7e:1e:f5:da:cc:8c:02:
40:1f:f1:46:34:91:e3:84:2f:7d:2d:a0:1a:41:cd:78:62:f9:
06:f4:0a:29:d0:bc:66:78:cb:7b:36:80:99:39:be:8a:fa:ed:
46:a3:a0:db:94:50:10:9d:0b:7b:03:b4:48:6b:f1:46:b5:6b:
5c:9d:d9:06:03:7a:db:55:c4:af:c1:8b:5c:5e:5b:17:fc:a8:
bb:af:b1:d1:3b:fa:e9:ea:6d:af:b1:04:2b:f5:f9:c4:18:21:
52:34:76:b5:83:ea:b3:12:b7:e2:84:ca:01:8f:8f:58:dd:d5:
ba:80:c7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:09:58 2026 by rpki-client