Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
File: 4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft (raw, json)
Hash identifier: pL/71Wa8J9DDyV2hxIvauqtP8pGGmCXmE8A20b7WcjU=
Subject key identifier: AC:DE:DD:BF:43:58:E8:1D:C2:91:14:C5:9B:EF:87:C2:07:78:C2:EF
Authority key identifier: E0:B8:67:13:11:00:C1:5D:E8:90:11:00:63:E6:38:A5:F0:23:67:C4
Certificate issuer: /CN=e0b867131100c15de890110063e638a5f02367c4
Certificate serial: 01A104A576882C1DA7558305A1640B6A1D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
Manifest number: 1A85
Signing time: Sun 04 Oct 2026 02:01:54 +0000
Manifest this update: Sun 04 Oct 2026 02:01:54 +0000
Manifest next update: Mon 05 Oct 2026 02:01:54 +0000
Files and hashes: 1: 4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl (hash: /Xh+4Ev9zF6NCqLrHg2jpjIezpfRdc01zUSfs4XcfxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:a5:76:88:2c:1d:a7:55:83:05:a1:64:0b:6a:1d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0b867131100c15de890110063e638a5f02367c4
Validity
Not Before: Oct 4 02:01:54 2026 GMT
Not After : Oct 5 02:01:54 2026 GMT
Subject: CN=acdeddbf4358e81dc29114c59bef87c20778c2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:69:45:96:08:5e:dc:00:a1:0b:f5:82:37:43:
2f:00:2a:3a:b5:5f:55:db:79:7d:a0:f8:0f:d3:0b:
71:db:6d:de:7b:12:5c:81:0a:56:47:b4:ee:9d:9b:
39:4a:db:91:83:73:19:76:9a:91:d6:b7:27:6c:ef:
fe:5c:65:b9:e9:b9:6f:9b:3b:f1:a6:67:4e:b6:a4:
c6:02:62:4e:3d:3b:69:5c:c8:a5:34:11:b9:8e:c4:
92:94:c4:35:aa:2d:a8:12:17:f2:27:61:cd:49:cb:
79:61:0c:36:9e:0b:2c:5d:8a:02:d0:2b:4b:1c:e4:
f7:f6:fa:75:35:92:d0:18:73:ef:af:9d:d7:66:bd:
6b:68:33:9f:66:a4:34:27:0d:2b:6a:ce:ed:d0:e0:
92:98:4c:1a:88:c4:1a:3d:e7:e8:e0:c5:9e:62:12:
6e:34:13:9a:8b:09:e2:3c:39:4f:e6:6b:0a:3a:b2:
78:eb:1b:a1:54:62:af:13:30:59:24:e6:6a:2e:1f:
a7:fc:45:5a:fe:e1:51:3b:79:61:8b:a5:0c:37:2b:
62:42:8c:80:82:f1:76:67:2b:c3:fb:13:33:b1:6e:
43:c6:3e:68:28:9d:8d:e4:3d:fa:f1:db:52:38:97:
13:92:c5:15:ac:11:25:12:fd:14:59:2f:74:ec:8e:
70:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DE:DD:BF:43:58:E8:1D:C2:91:14:C5:9B:EF:87:C2:07:78:C2:EF
X509v3 Authority Key Identifier:
keyid:E0:B8:67:13:11:00:C1:5D:E8:90:11:00:63:E6:38:A5:F0:23:67:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c7:1b:4f:45:10:ff:4b:a6:2f:30:2c:a3:bc:6d:a1:6f:e1:
70:8d:ac:44:45:58:89:ef:9b:ab:13:80:43:eb:b5:c6:13:9b:
b3:a4:bd:2d:89:c6:1a:7c:b8:03:f0:b8:76:0b:f0:fa:f7:c3:
e1:f5:6c:70:4a:0f:b6:b4:8a:98:4c:7d:8e:6f:be:ab:81:2b:
ac:83:71:bb:6d:d3:ea:c1:fb:a2:bb:9d:8f:34:98:0f:99:3f:
33:2a:32:31:68:3a:57:b8:8a:1c:64:b3:2e:0b:8d:c7:d8:64:
ae:be:b0:3e:9f:69:08:13:6f:a6:2e:07:1c:37:eb:7d:8d:4b:
ac:13:44:e8:32:0e:9d:9e:be:ab:3e:22:ba:76:1a:2f:36:00:
01:b9:04:89:f5:3a:2e:f9:d3:f7:cc:f2:d0:24:a9:dd:95:04:
11:72:84:12:95:50:99:51:5b:52:ed:be:aa:83:43:df:43:32:
a9:4a:3c:fb:f2:54:14:da:0e:f1:58:89:d9:ed:be:3a:da:95:
9e:29:ad:f3:cb:31:ba:9f:8f:89:3d:cd:a5:b6:d2:42:58:72:
82:a4:5f:25:d6:34:02:87:7f:e9:d1:ca:26:21:01:01:af:70:
e6:a3:e2:31:b9:2f:ef:64:84:e5:eb:2b:39:85:3b:23:31:c1:
eb:08:48:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:12:34 2026 by rpki-client