Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
File: 4K4U6GPBsVoeouSaLrUEhT91tr0.mft (raw, json)
Hash identifier: wuquQGSLHrFevy5VdxKgyczlWhCp22HB6RrsOJP7Hl0=
Subject key identifier: A9:EE:FC:C1:8D:C7:CD:2D:A4:52:D7:E6:86:39:79:E7:59:1A:7F:4C
Authority key identifier: E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
Certificate issuer: /CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Certificate serial: 01A0D0EDEA002D905737E899647D98801B20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
Manifest number: 0AFD
Signing time: Thu 24 Sep 2026 01:00:47 +0000
Manifest this update: Thu 24 Sep 2026 01:00:47 +0000
Manifest next update: Fri 25 Sep 2026 01:00:47 +0000
Files and hashes: 1: 4K4U6GPBsVoeouSaLrUEhT91tr0.crl (hash: YVHp+rk7ijYBJ3iDB8mS9XoVxtiSWaohHMApQcBg7RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:ea:00:2d:90:57:37:e8:99:64:7d:98:80:1b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Validity
Not Before: Sep 24 01:00:47 2026 GMT
Not After : Sep 25 01:00:47 2026 GMT
Subject: CN=a9eefcc18dc7cd2da452d7e6863979e7591a7f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:98:e5:c9:54:2d:e6:24:49:f9:4d:90:61:
bd:f9:77:61:81:32:39:1b:ff:39:4b:57:82:1d:25:
21:51:92:5f:fd:4e:10:91:bc:dc:4c:c1:9d:ea:36:
21:c3:1c:b7:d3:61:0d:04:d5:e6:aa:05:ae:0c:51:
20:db:c1:5a:d7:6b:51:dd:f0:9c:85:e8:2b:13:4d:
94:84:40:10:f3:12:ef:ab:79:6f:38:ad:c8:ce:fd:
96:70:63:8c:8b:ad:e0:7f:56:2b:72:0c:55:d3:0b:
d5:74:a9:5e:3a:ba:eb:f5:e4:71:25:af:6f:97:a5:
94:b0:d5:b8:53:cc:94:fb:bc:9b:74:23:f5:f2:9d:
57:65:6c:2d:3b:ec:ca:4f:71:6e:f6:0d:db:ba:1c:
e7:b0:c9:50:0e:13:66:a5:74:4b:a3:63:8c:7d:8c:
a0:f5:04:c7:f7:f5:50:03:17:02:b9:d4:cc:4e:79:
78:4b:74:dc:86:3a:3f:dd:1b:d6:9b:1f:45:bb:42:
c6:8c:39:a8:3f:39:61:06:7f:a7:88:0c:11:8f:84:
48:2a:67:b8:fa:f2:ab:95:57:bf:67:fb:d0:9b:23:
04:12:97:8d:8e:0e:1c:93:b1:db:5e:3a:82:1c:38:
28:8e:2e:d0:ff:b4:b2:ac:0d:f7:6c:51:64:e6:b2:
e1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EE:FC:C1:8D:C7:CD:2D:A4:52:D7:E6:86:39:79:E7:59:1A:7F:4C
X509v3 Authority Key Identifier:
keyid:E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e7:f0:13:ce:3c:4d:fe:4e:d7:21:6d:96:62:2c:18:46:56:
d1:c3:89:45:e0:77:92:e2:57:69:20:9c:17:30:a3:97:32:5f:
91:c0:a1:61:d6:b0:78:1d:ce:9c:94:eb:c5:ff:f4:90:3e:8c:
3b:27:97:35:42:09:05:6c:71:fc:e9:cc:1b:18:06:36:1b:3a:
c3:e4:81:36:11:f9:37:c7:86:4b:25:6a:2e:09:de:f5:47:97:
65:06:fa:02:74:d8:8f:8e:8c:b4:29:d1:7a:f3:4c:14:58:13:
91:7b:9c:a6:11:22:a3:d5:b7:a1:4c:2e:61:9d:af:29:08:50:
e1:e3:36:8a:45:cb:13:6e:48:31:65:07:c5:6d:30:85:fe:b9:
e4:c4:cb:d2:3e:1c:26:26:a2:f8:52:2b:8a:04:41:65:ef:df:
ec:af:25:d1:4f:db:4d:39:11:0d:fa:1f:0c:a4:63:99:08:e4:
e9:36:c3:a4:77:52:df:03:73:2f:4c:34:6e:f5:a7:15:6d:82:
22:b4:73:00:73:de:63:88:1c:8b:d9:0e:49:3a:5a:4e:1c:a1:
f4:5a:ef:e0:8e:33:ab:68:b6:c1:8e:ca:8f:e2:e8:55:b6:e9:
c6:ee:cf:14:99:e3:2a:7b:0b:09:f7:d2:71:a9:a2:62:b5:1e:
ef:e8:a4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:46:08 2026 by rpki-client