Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
File: 4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft (raw, json)
Hash identifier: iVTT8m25rKRwXJAXDuFPY4figzb2K/Gq/UPrgU1KZDA=
Subject key identifier: 2F:3C:56:8E:AE:27:2D:63:6D:44:5E:36:DF:1C:E9:F1:00:12:6A:36
Authority key identifier: E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78
Certificate issuer: /CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
Certificate serial: 019E1CB51205E54F8455C134F81C08F820F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
Manifest number: 1086
Signing time: Tue 12 May 2026 15:01:28 +0000
Manifest this update: Tue 12 May 2026 15:01:28 +0000
Manifest next update: Wed 13 May 2026 15:01:28 +0000
Files and hashes: 1: 4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl (hash: bg3nIMYUGeb50iAN2IWmWfihdlEyZU78Wo9X/r0BeUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:12:05:e5:4f:84:55:c1:34:f8:1c:08:f8:20:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
Validity
Not Before: May 12 15:01:28 2026 GMT
Not After : May 13 15:01:28 2026 GMT
Subject: CN=2f3c568eae272d636d445e36df1ce9f100126a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4c:d3:55:1c:5c:08:c3:5b:c5:51:73:1c:2e:
b3:59:11:c7:73:54:c4:bd:3a:3c:24:c5:ca:0b:3d:
09:39:37:8c:3c:76:b0:80:aa:5a:b5:41:78:34:3e:
84:88:1f:7c:4d:61:e4:02:f2:c1:a2:5a:7d:ea:81:
69:da:ae:19:11:c2:3c:bb:cf:a9:c6:94:eb:15:ca:
21:26:6c:26:55:77:74:dd:68:13:d9:fa:6c:52:32:
a6:66:e4:7e:df:17:b1:a5:32:27:ce:9f:c8:9e:f3:
96:89:d9:8c:fc:a8:9a:2e:2e:51:a1:2b:5c:e5:fa:
6d:5d:76:bd:22:c3:02:cf:7c:77:80:56:a9:82:33:
61:92:ad:84:16:f6:e7:28:dd:02:01:41:56:f4:fa:
05:2e:1d:b7:bc:f5:1a:13:48:7b:06:6a:a9:0b:dc:
b9:a4:29:b6:58:eb:6a:37:3e:54:f7:b1:0b:9c:d0:
99:a2:4f:34:d1:9f:26:cf:fa:4f:11:8b:e1:ca:b9:
66:36:5e:44:26:4a:40:cc:93:97:01:8c:22:fd:91:
4c:e4:49:7f:ce:e7:50:f5:97:5d:2c:73:fc:99:76:
64:ce:a6:1e:b7:86:93:da:b9:88:63:a8:e5:6c:f7:
d0:27:b2:94:85:50:18:d0:64:31:55:e8:8e:43:67:
53:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3C:56:8E:AE:27:2D:63:6D:44:5E:36:DF:1C:E9:F1:00:12:6A:36
X509v3 Authority Key Identifier:
keyid:E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bd:03:78:3e:18:f5:1a:9b:c2:df:9d:86:79:fc:29:8b:4a:
38:62:f0:1a:87:b0:a7:b6:67:dc:a3:60:51:85:2f:65:09:3d:
c6:eb:99:e2:4c:ea:d6:78:7e:c6:19:72:6b:6d:7f:68:f5:c9:
1a:d6:0a:fb:75:5e:49:f2:8d:b9:d4:0c:87:fd:58:ad:c3:83:
05:94:01:88:54:10:c6:a5:2d:d6:59:aa:e8:2d:eb:d2:96:84:
d7:58:d3:d0:52:0f:3b:b1:9d:93:b7:5e:04:a9:a3:75:bf:3a:
1d:93:ec:1d:14:db:91:a9:3d:7d:2e:8e:65:91:8b:5f:dc:2b:
bf:14:b2:44:f4:be:0e:27:d1:ba:fa:32:c2:13:a0:f5:2b:5e:
81:cc:05:f5:4b:f1:4c:6f:5d:69:4d:c3:0c:a0:b8:3c:07:87:
06:35:0a:54:e4:37:b2:71:e3:12:23:ac:5d:b5:3f:b9:35:43:
3e:f6:dc:c3:d9:09:0e:f2:bb:c9:24:41:81:3a:2e:c7:1b:0d:
17:5c:ca:b1:d6:c1:08:ac:05:ef:83:2b:f1:6a:be:12:48:19:
98:78:4d:c4:ca:c8:7b:d9:69:a9:5f:a6:53:3a:92:f3:d9:46:
14:18:bd:47:71:cf:27:f5:75:e9:c2:fd:b0:fc:c9:90:92:32:
e1:5c:1d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:01 2026 by rpki-client