Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
File: 4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft (raw, json)
Hash identifier: 05Vh2a5UlNu/frognn+tVmLOu4ncBtpcMmu7+nuOxHw=
Subject key identifier: 17:93:2E:1F:DB:CA:B4:12:85:11:6A:C6:96:3B:13:FC:9D:26:EF:94
Authority key identifier: E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78
Certificate issuer: /CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
Certificate serial: 019D27725F553B83645D6D2C7DDB9D775E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
Manifest number: 1007
Signing time: Thu 26 Mar 2026 00:01:40 +0000
Manifest this update: Thu 26 Mar 2026 00:01:40 +0000
Manifest next update: Fri 27 Mar 2026 00:01:40 +0000
Files and hashes: 1: 4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl (hash: p9blmdc8ysgl8wMi69rG6s7p6e+z4hD8F+oyB4+gcE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:5f:55:3b:83:64:5d:6d:2c:7d:db:9d:77:5e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
Validity
Not Before: Mar 26 00:01:40 2026 GMT
Not After : Mar 27 00:01:40 2026 GMT
Subject: CN=17932e1fdbcab41285116ac6963b13fc9d26ef94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:92:c9:a2:f9:b9:28:0a:91:0f:a1:c5:cf:b5:
b3:07:62:e8:16:97:bf:18:31:d0:57:8b:18:1a:c0:
df:51:e4:14:a9:fb:26:47:95:3c:54:80:72:2b:09:
7a:96:a8:2c:7c:05:cf:45:93:99:59:cb:05:ba:43:
ef:8a:ca:40:d0:a5:9c:f0:29:c1:3b:02:3c:d3:c7:
a3:34:de:5a:4a:2c:0a:eb:ef:fd:85:a1:23:bc:01:
e6:3d:36:d4:c7:54:c6:86:60:68:8e:d0:26:ab:c9:
3c:12:69:5e:95:1a:76:d1:57:9b:68:64:60:be:94:
65:78:0d:07:ea:eb:5a:64:dc:44:d4:6b:73:8f:9a:
1f:6a:9b:9c:3c:70:82:0a:87:64:b5:fb:d1:04:72:
a0:2e:d5:22:6c:15:7e:c2:78:a0:56:4f:7f:43:7d:
5f:4b:3a:45:ae:70:fd:cc:d3:52:fb:b0:df:07:a6:
71:2f:53:a7:87:18:3d:0e:49:a3:b5:b4:34:1c:6a:
5b:8d:5e:fc:f7:9c:fb:86:a5:81:fd:87:e3:a6:1b:
3d:6d:ea:29:aa:37:f2:fb:f5:82:e8:56:7e:9d:79:
bb:3f:8a:8c:50:69:a1:72:ca:58:37:bd:0a:24:ac:
79:d2:67:fc:ab:f0:58:6b:06:f2:92:f4:07:1c:17:
87:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:93:2E:1F:DB:CA:B4:12:85:11:6A:C6:96:3B:13:FC:9D:26:EF:94
X509v3 Authority Key Identifier:
keyid:E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8f:8c:03:28:d9:68:b7:3a:83:bc:03:34:e8:91:88:de:5c:
52:34:3f:00:17:4e:67:97:75:ef:8c:05:2b:04:19:49:11:24:
db:79:bb:fd:b4:d1:77:a7:36:e7:1f:61:e9:5b:67:b2:2b:d3:
7e:82:40:71:5d:b3:b6:61:a1:86:28:7c:a3:3f:b2:98:ee:84:
4f:20:f8:65:49:5a:d5:fd:de:41:98:4b:82:36:9e:ef:a4:60:
1b:cd:1e:75:3b:b0:40:c8:d3:e5:88:aa:7d:98:a0:fe:d9:59:
5c:6c:ee:f4:e2:7d:8c:da:58:60:fd:ea:4b:8e:d9:17:66:8e:
a3:45:e6:d8:18:c2:fb:a3:a5:e1:2f:82:07:5c:f7:0b:b5:12:
47:4e:11:8e:43:01:d5:00:0b:44:e5:49:08:95:a9:41:58:79:
7d:01:c5:f3:43:38:8f:04:31:75:c0:2c:e1:03:9f:84:4d:da:
26:fe:81:0a:08:87:bf:01:58:2b:44:b2:e5:8a:bb:a8:a3:f8:
6c:b9:ec:f9:74:92:b7:3f:cb:97:34:de:7f:44:15:93:19:6c:
1c:10:47:18:80:f8:7f:b9:db:bf:cc:97:1c:05:c4:a4:6f:9e:
b9:ca:27:0e:34:73:7d:31:33:47:81:a0:9f:a0:b7:e8:fa:a3:
c5:3c:ea:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:41:46 2026 by rpki-client