Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
File: 4eHrAgq2pUL2C1hXaYctnwYXryY.mft (raw, json)
Hash identifier: wwt0yIG/oNg1P8/uq8IXQGz6gh9I1Ue/SW3YNkpqD7w=
Subject key identifier: A1:A6:3B:9E:6C:C7:E8:FF:A6:60:60:18:3B:5E:D0:CA:D3:48:3D:04
Authority key identifier: E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
Certificate issuer: /CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Certificate serial: 01A1DE027274C357FC935D36C6D3CF7D4773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
Manifest number: 0D06
Signing time: Sun 15 Nov 2026 07:01:04 +0000
Manifest this update: Sun 15 Nov 2026 07:01:04 +0000
Manifest next update: Mon 16 Nov 2026 07:01:04 +0000
Files and hashes: 1: 4eHrAgq2pUL2C1hXaYctnwYXryY.crl (hash: EgrjQNGkKMvCfkZA6ruc78JPqdLS42Pc8siY8d02Ozg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:72:74:c3:57:fc:93:5d:36:c6:d3:cf:7d:47:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Validity
Not Before: Nov 15 07:01:04 2026 GMT
Not After : Nov 16 07:01:04 2026 GMT
Subject: CN=a1a63b9e6cc7e8ffa66060183b5ed0cad3483d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:16:91:43:0c:07:6c:92:0b:44:52:99:35:7d:
f2:d7:b8:61:98:43:19:02:83:50:c1:20:7d:bc:e1:
d6:7c:91:74:0e:96:e6:c3:1f:26:27:dd:97:c7:a0:
b6:84:4b:6a:c2:36:0d:7c:a9:43:04:3a:90:3d:bb:
e0:68:99:50:74:04:72:20:ea:7f:95:aa:57:b3:95:
23:3d:a7:4d:2a:3d:cb:21:e6:b1:84:17:df:26:a8:
df:26:e4:5a:58:a1:48:54:9b:3f:84:cd:77:8d:ee:
24:b4:2d:0b:14:fc:ab:8c:9b:4b:fd:62:4f:2c:fa:
ca:1f:48:06:67:b2:51:4b:3b:6e:9f:de:5b:c6:55:
92:33:8b:09:7f:c1:ee:fa:b5:4e:a7:1c:52:5d:49:
8a:69:d9:b5:c2:e7:54:ad:3f:84:da:45:ad:fc:12:
af:33:9e:85:03:c3:8e:eb:e4:fc:96:5a:f9:77:87:
3b:9f:80:91:d7:b0:c2:c9:ba:38:d0:62:3d:10:46:
d0:9c:ad:a1:b1:04:93:80:8d:b3:a9:e3:aa:b8:68:
60:97:30:47:8b:dd:6a:02:58:93:f1:d8:e4:75:63:
5c:cc:de:77:af:31:dd:da:7a:0a:e5:b7:af:ef:5a:
f7:23:f4:e6:b8:5d:73:f7:13:7d:b1:90:4a:5e:32:
03:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A6:3B:9E:6C:C7:E8:FF:A6:60:60:18:3B:5E:D0:CA:D3:48:3D:04
X509v3 Authority Key Identifier:
keyid:E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:89:1f:0d:c2:44:37:95:3d:ba:c3:94:8f:50:b7:1d:7f:84:
e1:05:c3:10:1b:f9:d4:cc:69:b5:36:9f:ec:26:3a:45:96:e9:
70:96:b7:f3:f5:71:7e:91:39:cc:e0:2c:f0:7c:9b:15:e7:c7:
a7:15:39:0b:5f:7d:e8:37:dc:a0:e0:b3:c2:b0:ee:0e:2a:53:
20:f4:99:c3:3c:0d:80:77:e0:d1:9a:d1:cb:2d:e7:cf:c9:c3:
8c:7a:56:37:ed:7a:49:47:5d:bb:70:29:23:7f:c0:23:b9:9d:
c6:58:63:87:c3:df:fe:7f:8a:03:a4:6d:ee:05:89:6f:3f:75:
7e:9b:d9:b2:83:ca:75:f3:53:c1:41:49:45:3c:06:e4:65:45:
36:ed:98:6d:f6:74:28:ea:1e:59:12:af:9b:ee:b7:03:3a:0a:
7e:68:c4:a4:bd:6a:32:18:ad:51:76:f4:77:d4:22:f5:ec:f0:
fd:e8:35:4a:cd:44:dc:e7:66:82:3e:cb:3e:83:52:5b:ab:9e:
b9:48:dd:ff:01:9a:18:4b:f2:d5:bd:82:63:fd:57:8f:15:bd:
6a:ef:bd:2f:a4:ce:71:23:6d:64:24:3b:30:a5:c9:5a:19:b0:
51:36:4c:cc:1b:e3:da:b6:b5:f3:9b:a0:1c:84:52:bb:db:6c:
e2:90:84:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:36:28 2026 by rpki-client