
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft
File: 4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft (raw, json)
Hash identifier: S9KQfwsNOi/HB+DunBWKYdp5Psrq1LcYbv+nHH1CE48=
Subject key identifier: 39:F0:AB:9E:89:0F:60:8B:65:1A:D3:45:7F:5C:14:41:66:81:A7:37
Authority key identifier: E0:B0:EC:99:26:89:6B:A1:25:BE:8F:A4:AE:BE:EA:8F:D3:09:B8:B4
Certificate issuer: /CN=e0b0ec9926896ba125be8fa4aebeea8fd309b8b4
Certificate serial: 01A0D4941F611B8D361D82C3F50D2153EECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LDsmSaJa6Elvo-krr7qj9MJuLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft
Manifest number: 0347
Signing time: Thu 24 Sep 2026 18:01:12 +0000
Manifest this update: Thu 24 Sep 2026 18:01:12 +0000
Manifest next update: Fri 25 Sep 2026 18:01:12 +0000
Files and hashes: 1: 4LDsmSaJa6Elvo-krr7qj9MJuLQ.crl (hash: RbQb4PcT7MFVqOyxGeVLKnueFM7/oug5CAWF4PkHquw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4LDsmSaJa6Elvo-krr7qj9MJuLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:1f:61:1b:8d:36:1d:82:c3:f5:0d:21:53:ee:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0b0ec9926896ba125be8fa4aebeea8fd309b8b4
Validity
Not Before: Sep 24 18:01:12 2026 GMT
Not After : Sep 25 18:01:12 2026 GMT
Subject: CN=39f0ab9e890f608b651ad3457f5c14416681a737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:9f:bb:00:f3:55:57:34:f4:1d:f8:11:23:
0c:73:b8:be:7e:61:b2:1d:5c:47:dc:0d:33:f9:4a:
ce:e2:59:85:f8:fd:b0:4d:d9:55:68:fa:a4:10:46:
9f:ef:39:ef:1a:f5:ac:61:9d:05:d6:ad:db:6a:a9:
13:07:0a:2d:0a:f8:7e:55:29:3d:30:ec:fe:c0:57:
d0:b3:a0:90:70:79:f6:db:8b:2f:89:13:fc:8b:e5:
44:92:45:11:ea:dc:90:55:d1:a8:6b:9d:5a:1d:f5:
13:a2:67:df:3a:24:7a:53:9b:da:df:65:cf:a4:47:
78:0b:e3:72:81:28:69:a3:d7:d1:c8:e0:d8:87:c7:
72:29:7f:a1:cf:83:9d:90:74:d3:92:52:5a:ba:86:
48:62:d0:b2:f0:88:fc:1d:7f:bd:45:64:06:04:7b:
ae:b5:b3:71:61:d9:60:ac:f8:a0:bd:5d:a2:a1:03:
00:38:ee:b4:e1:95:ff:f1:c5:40:5b:40:1c:04:f5:
53:2b:80:2d:6a:a0:00:db:26:7e:e1:e2:28:d9:fc:
3d:c4:08:29:85:38:37:8f:b6:1d:8e:dc:b5:b2:17:
e4:bb:49:6f:31:67:8b:ed:67:b6:16:94:85:2a:9e:
ae:cc:94:8f:65:77:3f:e0:04:57:10:66:13:1b:cf:
7f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F0:AB:9E:89:0F:60:8B:65:1A:D3:45:7F:5C:14:41:66:81:A7:37
X509v3 Authority Key Identifier:
keyid:E0:B0:EC:99:26:89:6B:A1:25:BE:8F:A4:AE:BE:EA:8F:D3:09:B8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LDsmSaJa6Elvo-krr7qj9MJuLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:63:04:9a:71:e0:90:8c:7a:e3:1b:c5:1e:15:ed:fd:e4:a3:
1e:c6:29:b6:1b:70:b9:2c:6d:2c:f8:3f:9f:f0:da:85:47:91:
f4:8e:32:91:70:7c:b0:be:44:df:7c:b9:14:80:ad:aa:8f:50:
35:22:0f:5e:40:dc:d2:e6:87:39:a6:31:9a:30:61:4e:ae:e4:
c4:af:84:be:2a:c4:61:5b:10:42:ba:8f:73:21:f5:bc:bb:95:
3a:37:2b:12:4e:fd:71:0c:6f:c6:26:3b:d3:1e:ad:01:3d:41:
b7:3e:f0:90:0f:b9:a4:7f:c6:a8:14:0a:e9:2b:36:1c:a5:ac:
d1:ef:12:24:cb:6f:59:c7:4b:65:b9:1b:2a:23:ba:e1:4a:df:
c7:0a:de:e1:75:72:25:ed:f3:41:c9:2c:b8:b3:fb:f6:1a:0d:
cb:fe:9c:3e:88:19:cc:84:3b:03:83:29:8d:0e:af:2a:87:56:
d9:c6:78:7a:5f:92:50:89:16:56:b3:98:59:12:a0:e9:ff:31:
d5:51:55:cb:5d:fe:b1:bb:d4:4b:1e:d3:c5:69:27:ff:57:f8:
27:6e:49:49:37:97:e3:9f:82:a7:82:df:b5:48:b6:b1:87:d8:
7f:8d:96:cd:86:64:ac:93:fc:d3:41:a0:a0:a9:d9:a4:06:ce:
41:25:df:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:54:05 2026 by rpki-client