Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
File: 4fhh7IT8VurKm4xjbnkj5vktzOo.mft (raw, json)
Hash identifier: FY27rxvqZiA/pBKcUANL4KFx3BYWTe/vQQhZsYQqeyc=
Subject key identifier: 03:A6:D0:BD:92:1F:A0:E2:3D:E2:F1:9C:97:31:AA:EF:3A:8E:87:96
Authority key identifier: E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
Certificate issuer: /CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Certificate serial: 01A0D56FDF0A1DAD54E13953180A2B9D57FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
Manifest number: 1A6B
Signing time: Thu 24 Sep 2026 22:01:13 +0000
Manifest this update: Thu 24 Sep 2026 22:01:13 +0000
Manifest next update: Fri 25 Sep 2026 22:01:13 +0000
Files and hashes: 1: 4fhh7IT8VurKm4xjbnkj5vktzOo.crl (hash: Dq6q57YZNJGDfQeaw5cldXjxA+NAlxhtd6pvyXsevT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:6f:df:0a:1d:ad:54:e1:39:53:18:0a:2b:9d:57:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Validity
Not Before: Sep 24 22:01:13 2026 GMT
Not After : Sep 25 22:01:13 2026 GMT
Subject: CN=03a6d0bd921fa0e23de2f19c9731aaef3a8e8796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:05:43:0a:c0:c3:9b:ae:41:66:63:c6:43:1f:
da:02:db:53:ca:66:bb:a9:01:03:e9:1a:6f:7d:40:
88:f0:3e:30:a2:ba:44:9b:11:25:76:52:8b:81:ee:
ee:51:29:71:d8:bd:ef:a1:f6:c6:a2:a9:9a:48:e1:
fa:90:e0:97:87:ca:67:02:19:05:81:0a:f3:18:7d:
30:d4:c5:d7:7a:3e:18:e3:6d:9f:76:7b:e5:5a:74:
40:69:cb:54:a7:bc:83:45:23:24:11:94:a8:54:37:
06:e8:38:f9:26:f9:e3:aa:f5:88:32:5a:77:6a:5e:
9b:05:e4:b2:5c:62:20:1c:d4:f9:68:dd:a1:91:fd:
3e:d9:3e:ad:a9:6b:94:be:6f:52:61:56:cc:77:ac:
5b:0c:e6:e8:5e:ed:b4:06:83:d4:de:b4:d6:31:d8:
a9:d9:3a:ee:52:9f:81:d3:0c:c3:5f:18:07:ad:0f:
88:ac:6e:4d:0c:79:fd:9f:3f:0a:23:7a:ef:54:7e:
ca:73:fc:88:fa:d8:f8:3f:cc:97:c5:d5:b0:83:8a:
49:f7:65:cd:f8:40:a6:31:b6:c8:62:f0:02:5e:1f:
a3:c5:c0:79:f7:89:cc:b1:b3:79:ed:7e:15:6c:cf:
f5:9f:fa:51:cb:81:6e:c7:73:ff:a8:dd:e7:31:ba:
44:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A6:D0:BD:92:1F:A0:E2:3D:E2:F1:9C:97:31:AA:EF:3A:8E:87:96
X509v3 Authority Key Identifier:
keyid:E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:24:74:71:c7:50:98:c2:73:d8:b9:70:8e:7c:76:c0:29:03:
7b:c7:71:05:da:e6:ec:33:ea:44:29:b1:b3:82:3b:93:ee:e2:
1a:73:12:a2:ed:ab:a3:ff:63:d6:c4:ea:8b:50:a3:47:2d:db:
fb:2d:2d:28:1f:3f:72:dc:fb:7b:d5:82:42:3c:05:08:3d:2a:
a4:e2:e0:c1:65:3c:6f:a3:de:09:b4:f5:fe:a9:b4:8c:65:23:
6c:2f:5a:4d:18:31:93:41:02:5e:cf:d9:8b:f5:6e:f6:0e:01:
70:aa:c5:86:fb:fb:22:69:5d:ca:1a:65:a1:1c:1f:a9:09:bf:
00:89:d0:f3:55:d8:9a:f1:f6:16:65:fe:77:33:7a:7a:70:fe:
f7:c0:0e:15:11:af:45:09:aa:ba:d7:9b:ee:b9:1c:c7:70:90:
73:ec:24:63:08:e3:95:ba:f2:bb:04:ec:6f:84:a2:f0:b0:a8:
e6:0d:7a:18:c3:7f:f3:9e:37:9c:c1:0f:c2:e6:96:af:d4:c7:
ea:67:c5:45:df:a7:e1:a2:24:d1:8e:b7:50:71:38:42:2c:49:
9d:f5:bd:1b:3a:6f:17:c1:7d:32:b7:8d:81:f8:55:c7:02:53:
0a:85:ea:cd:6d:b4:2c:dd:91:df:ae:f3:2b:3f:82:ba:de:88:
45:26:3a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:00:04 2026 by rpki-client