Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
File: 4PcIYcfPbv530i_HBJvpbGdopQA.mft (raw, json)
Hash identifier: ymLXLb+NpV0kPX3grDauR/Gt9dGZc9OVx6+d1mCsQM8=
Subject key identifier: 6F:B5:71:35:B5:E6:89:F0:C5:93:7B:05:0D:8E:B4:09:84:E8:B8:F5
Authority key identifier: E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
Certificate issuer: /CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
Certificate serial: 019D9A3EDC955D75636D8496F061A5AEC511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
Manifest number: 0885
Signing time: Fri 17 Apr 2026 07:01:44 +0000
Manifest this update: Fri 17 Apr 2026 07:01:44 +0000
Manifest next update: Sat 18 Apr 2026 07:01:44 +0000
Files and hashes: 1: 4PcIYcfPbv530i_HBJvpbGdopQA.crl (hash: /5W6WAXUyRPMpLc0a8TcMrW5ZqcENg1+lvnEGx/HRfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:dc:95:5d:75:63:6d:84:96:f0:61:a5:ae:c5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
Validity
Not Before: Apr 17 07:01:44 2026 GMT
Not After : Apr 18 07:01:44 2026 GMT
Subject: CN=6fb57135b5e689f0c5937b050d8eb40984e8b8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ce:30:7f:2e:18:98:34:64:67:40:2e:77:fb:
76:09:3c:68:50:a8:df:b8:9a:36:cf:fb:2d:94:17:
cd:2b:82:20:65:6c:e2:a8:46:fd:fc:b8:4c:21:04:
1c:c9:bb:86:bf:c8:31:c7:a5:07:b9:5d:0c:af:5a:
f8:55:55:a5:15:d0:d8:e1:58:da:9e:3f:53:9e:4e:
91:07:46:7b:87:7e:00:55:ba:24:f3:6f:a9:e7:2a:
1a:bc:7e:48:31:2c:0e:e3:9c:0b:7b:45:c8:ba:b8:
0d:72:3b:d5:7d:e4:4e:6d:1e:b4:27:2d:87:30:a8:
f8:74:0d:12:c3:dd:82:d6:25:c7:05:00:b4:d2:8a:
14:36:ab:fe:5a:68:4f:56:df:25:61:cd:01:47:50:
2e:77:81:75:0f:a7:1b:e8:b8:81:9e:40:88:ae:8e:
af:78:65:37:c8:85:7a:55:db:c6:75:0c:19:75:7a:
3a:55:d5:25:29:0c:a9:71:67:67:0d:ed:9a:72:c5:
4a:0f:e3:dd:5f:d7:19:8c:a4:92:42:24:6d:a5:55:
17:39:2f:ac:e5:60:51:1f:6d:af:6a:82:9b:1d:dc:
bf:52:30:dd:e9:8f:d3:d7:25:54:7a:a6:6f:25:1d:
66:59:fc:de:bc:d0:cf:8d:4e:5a:32:9d:92:f3:31:
ff:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B5:71:35:B5:E6:89:F0:C5:93:7B:05:0D:8E:B4:09:84:E8:B8:F5
X509v3 Authority Key Identifier:
keyid:E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:51:90:d1:bd:31:c5:bd:60:39:07:c8:3c:97:eb:f4:03:37:
d3:e9:1f:f9:9a:98:cf:c2:68:44:4c:72:37:ba:59:b2:11:17:
ae:74:37:1d:0b:06:bf:e5:5b:08:04:a8:e4:99:f1:de:b9:51:
79:32:f0:01:ec:4b:7b:6b:22:b1:88:c4:5d:db:53:97:c4:31:
45:81:24:51:f8:0a:0e:f3:e3:c4:1d:b5:be:d5:7e:45:5d:a2:
c3:e0:6c:4b:1c:9b:fe:7b:1b:ce:1a:1b:63:5d:e5:23:1f:a6:
80:d7:e7:db:ea:74:27:03:db:f2:a1:cc:c5:7e:84:ea:35:b4:
ee:db:07:f0:e9:a6:1f:a1:db:8f:2e:32:d1:27:5a:63:3e:40:
48:b6:79:80:e2:ac:b2:9b:2a:18:58:20:f2:96:ea:08:7d:bd:
03:98:78:29:08:c0:ea:b9:df:77:a5:85:76:f0:1a:99:9a:5a:
fc:ea:99:ee:3a:ef:6a:00:95:b1:ba:47:50:6b:81:90:a1:ee:
e6:1b:90:6a:e5:b7:e7:c6:2e:2d:7d:ec:54:d6:17:86:2d:a3:
83:5c:31:d5:be:94:d0:c8:a1:f8:67:ac:7a:15:74:00:ae:61:
13:e7:ab:e4:70:5b:52:32:de:77:d0:4c:24:21:6b:e4:c1:bc:
51:6a:24:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:07:48 2026 by rpki-client