Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
File: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft (raw, json)
Hash identifier: FuhD2bh2+34vqaHR6hbypuDmrvCloE5w2ufYrBexJkg=
Subject key identifier: CC:B3:C4:C7:30:1C:75:92:EC:AE:0E:D4:A5:9C:63:46:7A:46:46:A1
Authority key identifier: E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
Certificate issuer: /CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Certificate serial: 019D2772C77B24AF754309F85A4899506E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
Manifest number: 0F6B
Signing time: Thu 26 Mar 2026 00:02:06 +0000
Manifest this update: Thu 26 Mar 2026 00:02:06 +0000
Manifest next update: Fri 27 Mar 2026 00:02:06 +0000
Files and hashes: 1: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl (hash: dfL+iiO5T3LwCZ2A0+LkJM+jNWyPWDiPAa8yd6yIHJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:c7:7b:24:af:75:43:09:f8:5a:48:99:50:6e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Validity
Not Before: Mar 26 00:02:06 2026 GMT
Not After : Mar 27 00:02:06 2026 GMT
Subject: CN=ccb3c4c7301c7592ecae0ed4a59c63467a4646a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:96:c6:60:d8:c8:0e:70:c6:c8:6f:b3:f5:da:
94:8a:56:29:75:a5:06:67:02:3c:a0:44:b6:87:6a:
57:5e:7a:0c:e7:36:7d:f9:16:4c:98:cc:86:7f:10:
82:38:fb:de:62:d3:8c:4b:8a:35:f3:f2:95:9d:ff:
a6:91:a0:27:fc:34:ab:c1:9f:6f:ef:3e:75:1e:42:
60:43:27:f2:09:01:bc:d8:1a:06:a3:7c:af:fd:31:
9b:48:06:3b:2f:17:33:e1:de:f5:a5:e6:fc:9b:e5:
2f:34:73:68:c8:47:6b:a4:5a:51:75:18:34:a0:0c:
60:24:bc:16:08:e1:c3:6f:e2:41:8f:ac:1a:70:51:
4b:e2:8f:c4:66:79:ff:44:08:1f:33:03:0d:a1:4d:
3c:03:eb:c0:ff:4c:70:78:90:98:e7:99:af:27:83:
8f:b8:a1:85:7e:dc:20:5e:77:0e:18:a9:97:6c:bf:
7c:3c:9a:97:0f:6f:82:b1:ba:5e:b9:c4:f5:fd:49:
33:08:00:9e:0c:a4:28:49:a9:2b:b0:36:9f:ab:a1:
04:99:f6:93:57:7e:84:ec:a1:cd:fb:66:27:0a:a5:
fc:c0:c4:ff:2a:09:03:bc:79:dd:73:82:9e:7a:38:
0b:c4:51:7b:a7:94:31:77:f3:5e:50:52:0f:33:4c:
56:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B3:C4:C7:30:1C:75:92:EC:AE:0E:D4:A5:9C:63:46:7A:46:46:A1
X509v3 Authority Key Identifier:
keyid:E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:bf:c2:83:78:8f:39:bc:de:0d:54:49:36:d2:4e:18:1a:c9:
d4:9d:78:67:99:8c:0c:3c:70:b6:85:1b:f7:f6:6e:e8:18:12:
17:77:b9:ad:89:e2:15:2a:61:b4:bc:4b:38:4e:d7:91:80:62:
5b:81:23:c8:ce:6e:c3:3b:7e:27:03:b4:2b:59:c0:03:d7:f6:
ac:d6:66:eb:44:41:67:d7:dd:15:32:b8:e7:4b:4a:aa:aa:43:
ad:01:92:43:1e:db:f3:41:36:0d:79:5f:70:4b:cc:5e:d6:f9:
4f:09:24:aa:9e:c2:6c:e5:b8:c5:8c:05:4a:1c:28:c9:4a:52:
19:0d:af:00:6d:ce:7f:e3:8e:72:3a:a9:01:58:19:2b:e8:dc:
76:3b:4e:3a:f1:71:82:e8:0e:c6:c9:32:bb:74:84:62:ea:95:
a5:94:ae:b8:c7:2f:5f:74:42:e5:18:40:df:7f:34:79:c3:91:
09:77:b8:71:cc:9c:bf:28:8d:19:34:52:16:e3:da:8e:e0:3f:
89:7f:8a:e7:7d:cf:d1:f8:d3:cf:97:38:ed:25:01:96:48:7d:
12:99:b7:b1:6d:21:c7:3e:0e:e6:dc:d5:44:4e:70:99:aa:ed:
60:01:22:0c:c3:5a:fb:ef:b8:b5:17:0a:8e:da:85:f1:83:eb:
76:f6:7b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:54:33 2026 by rpki-client