
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
File: 4eHrAgq2pUL2C1hXaYctnwYXryY.mft (raw, json)
Hash identifier: THQ4vRzefMooZh3+1thyoSP0NWVgeP1LcPjUPznw1DU=
Subject key identifier: B6:CD:F4:BB:EB:DD:B9:A1:43:7D:D6:EE:1A:F1:D0:A4:14:95:7F:A7
Authority key identifier: E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
Certificate issuer: /CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Certificate serial: 01A0CBC6F590B12B4AFFFACE71C6B5A3A9B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
Manifest number: 0C78
Signing time: Wed 23 Sep 2026 01:00:08 +0000
Manifest this update: Wed 23 Sep 2026 01:00:08 +0000
Manifest next update: Thu 24 Sep 2026 01:00:08 +0000
Files and hashes: 1: 4eHrAgq2pUL2C1hXaYctnwYXryY.crl (hash: hw4FufjOuE/8Zd4JMer+ahJVe9WNeUYBEuQckNF50pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c6:f5:90:b1:2b:4a:ff:fa:ce:71:c6:b5:a3:a9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Validity
Not Before: Sep 23 01:00:08 2026 GMT
Not After : Sep 24 01:00:08 2026 GMT
Subject: CN=b6cdf4bbebddb9a1437dd6ee1af1d0a414957fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0f:1c:24:04:85:a6:54:ed:b3:f3:19:3a:e4:
75:82:5d:e2:bd:70:83:08:23:42:ec:96:53:64:45:
a1:a5:37:59:82:5e:e4:e9:f9:0d:a9:1f:83:92:86:
0c:f3:e3:73:1e:f5:4a:3e:5f:55:bf:81:5d:a0:f3:
55:5f:d9:91:25:9b:12:51:43:59:0e:14:c4:6a:c6:
00:a9:2c:71:b6:c4:df:ec:fb:3f:8a:a7:be:a8:8f:
04:30:ed:09:de:be:08:37:6d:a6:3e:70:bd:b1:34:
b1:63:97:1d:09:fb:c1:b9:03:30:77:6b:af:ac:a4:
87:46:74:ba:b9:6b:9c:f0:2d:cf:a7:d4:36:ef:05:
bc:8e:a3:8b:45:d7:d4:47:24:9d:46:b5:07:81:80:
0d:1d:8a:a0:77:b5:94:3c:34:dc:85:ba:d6:39:51:
98:c7:14:10:6c:29:5b:20:fe:de:05:53:61:66:78:
0c:ea:a1:c6:10:3b:ee:8f:8f:2a:ea:56:7a:0a:e5:
fc:54:eb:39:01:3c:95:e9:f4:ac:ac:72:a1:48:1b:
a8:e0:eb:3c:18:60:5a:9d:9a:01:63:74:cb:11:39:
cf:29:01:ce:a8:7b:79:53:44:35:87:a8:27:94:31:
0b:f9:b0:64:94:60:38:98:8d:d9:e8:d4:e2:f3:c5:
22:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CD:F4:BB:EB:DD:B9:A1:43:7D:D6:EE:1A:F1:D0:A4:14:95:7F:A7
X509v3 Authority Key Identifier:
keyid:E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b8:ed:c0:1a:1d:fb:4a:43:bd:cf:07:22:dd:2e:bf:18:6f:
1c:67:fd:4b:fe:a5:24:b6:d6:e2:a4:a7:14:12:7c:ed:dc:31:
fe:ea:bb:66:99:17:d2:95:07:c8:ea:8a:9c:2a:1b:34:07:9e:
cf:bd:d1:42:67:4f:12:fe:5d:e6:d7:45:38:1a:08:be:1a:3b:
15:6e:f8:59:eb:2a:ab:a4:bf:5a:c2:fd:54:02:07:f4:cd:96:
a0:20:c1:07:5e:76:22:67:db:04:8d:73:16:25:92:28:99:7a:
2b:01:30:3c:49:e8:a9:00:2b:68:8b:42:87:ac:e1:cf:0e:f9:
16:03:e5:72:a2:36:67:84:33:fb:4e:5d:91:26:a4:dd:bf:f8:
28:b1:e4:29:b0:34:35:ff:d6:7b:79:79:29:3a:f1:7d:26:7f:
9c:e8:ca:b3:3b:00:37:7a:1f:72:32:c4:ee:7f:b6:3f:8d:1a:
32:07:4e:2e:5b:6d:a7:c2:83:6a:aa:dd:42:9b:b7:4b:80:a6:
69:83:e3:74:42:1d:5b:4c:a1:ab:5b:e0:64:a9:55:d0:5f:27:
a7:db:ab:fb:38:bd:87:0e:84:0a:37:b2:de:5d:a0:75:d9:b9:
6f:fc:9a:35:c5:a6:5c:2b:25:19:9c:90:7f:f7:e2:e6:f5:43:
9c:79:5b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:15:54 2026 by rpki-client