Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
File: 4PcIYcfPbv530i_HBJvpbGdopQA.mft (raw, json)
Hash identifier: GmaCHVPvA11kpKSjBrba2WpNdXEKH0KIYESAbKyL5D0=
Subject key identifier: 85:5E:2D:16:D5:1E:BE:FF:6E:6B:D3:05:3B:16:AA:1B:9D:A6:A2:16
Authority key identifier: E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
Certificate issuer: /CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
Certificate serial: 019EBFC84A750E4154CDBEA3C050A4BCB139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
Manifest number: 091D
Signing time: Sat 13 Jun 2026 07:00:34 +0000
Manifest this update: Sat 13 Jun 2026 07:00:34 +0000
Manifest next update: Sun 14 Jun 2026 07:00:34 +0000
Files and hashes: 1: 4PcIYcfPbv530i_HBJvpbGdopQA.crl (hash: ShyBuA6fiEY5y9brG4Pt4Bm+oBq3BYc0ZXIwmMEkSqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:4a:75:0e:41:54:cd:be:a3:c0:50:a4:bc:b1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
Validity
Not Before: Jun 13 07:00:34 2026 GMT
Not After : Jun 14 07:00:34 2026 GMT
Subject: CN=855e2d16d51ebeff6e6bd3053b16aa1b9da6a216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:07:e3:48:46:53:be:4f:45:46:40:b6:56:
e8:fd:c8:3f:7c:98:c4:d5:7b:89:64:96:c7:ef:53:
39:79:5c:23:83:f0:35:8a:13:49:34:dc:e5:1f:23:
e9:23:aa:33:0b:17:95:12:22:5c:6e:02:fa:ce:07:
06:d4:70:86:8e:b0:4a:71:56:16:dd:54:b0:4a:3a:
9f:41:45:73:9d:fb:3a:86:61:bf:97:a4:39:0e:ea:
0a:db:31:8f:9b:b1:5e:3a:35:a2:7e:80:6b:3c:d7:
43:30:87:39:0f:c5:f2:75:0d:f8:70:e3:ac:18:13:
0d:3f:e7:91:e0:47:61:df:33:b4:30:02:2e:5c:fd:
d2:17:0e:93:1a:3e:aa:fa:26:fe:fe:0b:58:03:95:
e2:02:e0:3e:0d:ee:ab:1f:da:40:47:80:c2:ee:e6:
f0:1f:6c:14:d9:41:da:df:49:4d:3c:e2:4d:88:e0:
4c:75:33:55:01:6e:7b:ed:2a:95:75:47:0c:a3:20:
0a:e5:83:da:46:17:77:71:f7:e5:d5:a8:4c:f4:64:
b0:6e:a2:fa:3f:0c:05:f0:c7:f6:83:cf:b5:f8:06:
da:c9:e7:2d:b1:08:1a:18:b5:cf:ec:ee:78:13:c6:
fd:34:7a:36:9f:16:50:7b:ef:4b:cd:2e:c0:fa:44:
a1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5E:2D:16:D5:1E:BE:FF:6E:6B:D3:05:3B:16:AA:1B:9D:A6:A2:16
X509v3 Authority Key Identifier:
keyid:E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:9b:3b:a2:01:7c:f1:1e:81:68:8e:d7:1c:6c:3b:ae:2c:b2:
e6:04:db:3a:55:79:4a:11:42:67:9f:6c:18:71:28:24:00:6e:
27:79:8a:1e:79:39:3d:71:11:b5:a0:fa:90:71:b0:0d:62:30:
4e:1c:fb:e7:0d:10:55:26:da:c1:5c:7d:f8:11:ca:c5:bb:eb:
43:40:f1:c9:d6:ab:36:7e:92:ac:6c:8e:93:53:14:e1:9c:37:
5e:e7:76:5f:40:e9:14:9e:a6:12:e3:7a:5c:0b:31:8c:15:af:
6c:95:3a:55:ab:0b:c1:71:ac:8a:e4:b2:eb:a8:04:dd:dc:c9:
d6:3a:42:55:e7:0d:dd:c1:d5:9f:c2:17:35:72:07:fe:62:d3:
2d:11:8c:bc:d8:b6:01:de:8f:c0:f2:7f:ae:6c:91:f1:e6:d4:
32:8d:7c:aa:69:b7:53:ad:06:2c:7b:f8:c3:8c:e3:55:f9:ba:
f5:80:1a:79:03:c0:05:a7:46:23:4d:0f:f4:8c:77:84:37:5a:
eb:d7:1f:a1:d9:1a:44:f7:70:ff:49:8e:e0:c4:97:cd:26:7b:
82:06:f0:9f:76:d1:44:8c:80:49:3d:6e:b9:3c:83:58:20:c8:
cd:89:b6:19:3f:6a:da:ad:d2:d1:c2:9d:65:e9:40:08:79:32:
53:94:36:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:35:22 2026 by rpki-client