Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
File: 4K4U6GPBsVoeouSaLrUEhT91tr0.mft (raw, json)
Hash identifier: /twp8i78lqRiJEbQmChEdjcCkys/2y32oHly/2fWjJg=
Subject key identifier: 58:FA:28:1E:54:13:A3:D0:31:BA:82:60:3A:0B:8F:A8:92:8E:EB:F4
Authority key identifier: E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
Certificate issuer: /CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Certificate serial: 019CAAC617FB80632FE93190F6FE82069C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
Manifest number: 08D7
Signing time: Sun 01 Mar 2026 19:00:34 +0000
Manifest this update: Sun 01 Mar 2026 19:00:34 +0000
Manifest next update: Mon 02 Mar 2026 19:00:34 +0000
Files and hashes: 1: 4K4U6GPBsVoeouSaLrUEhT91tr0.crl (hash: ou6iHaL39bbOvWBiXp97KiceT3k/EImrG9+bPCMoIdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:17:fb:80:63:2f:e9:31:90:f6:fe:82:06:9c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Validity
Not Before: Mar 1 19:00:34 2026 GMT
Not After : Mar 2 19:00:34 2026 GMT
Subject: CN=58fa281e5413a3d031ba82603a0b8fa8928eebf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b9:14:3c:53:69:32:cf:e7:1e:02:71:6a:61:
29:24:17:bc:11:7a:bb:4e:64:c3:f2:d9:59:db:c7:
50:9c:3c:a7:20:b0:a7:1c:ab:13:75:4b:7a:d3:0e:
1e:9b:8e:8f:c4:ef:45:75:35:d5:45:39:da:37:28:
17:36:ba:9d:59:2f:48:c3:14:49:00:84:3d:79:a4:
83:91:f9:81:9f:bc:79:a9:86:bd:7a:d3:2a:98:6e:
f7:af:82:85:81:79:18:03:87:19:db:c1:84:37:23:
9f:50:1d:61:91:bb:ee:28:8e:f4:3b:fb:5d:b1:63:
53:e5:a4:1e:2f:b6:8a:34:f3:5b:8e:72:12:e6:fa:
96:d6:77:cd:a1:21:b8:bb:f9:d0:2e:1c:5e:5b:41:
bd:88:a6:d0:ca:df:48:10:c5:9c:5a:cb:1a:a4:8a:
f0:34:11:5a:ca:f0:1c:91:70:cb:04:05:97:dc:e4:
c3:55:36:65:f7:9d:5c:a3:ba:14:be:ae:56:f0:42:
21:99:7f:2a:bb:a5:f1:50:3a:cd:80:be:0e:53:65:
0d:c7:8e:5c:85:97:4b:f7:49:c0:95:b2:99:d2:88:
3e:24:16:65:7b:e6:9b:be:33:63:64:4e:5e:61:3c:
14:a5:df:cc:5f:72:7c:2a:84:21:4a:65:a4:81:ad:
63:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FA:28:1E:54:13:A3:D0:31:BA:82:60:3A:0B:8F:A8:92:8E:EB:F4
X509v3 Authority Key Identifier:
keyid:E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e2:1d:a5:be:59:01:bc:9e:9c:8e:a2:f4:f4:91:f3:68:f7:
32:f6:9d:40:ba:82:56:7f:ef:38:df:6d:5f:fd:0a:03:c4:da:
4f:01:2d:b3:78:e1:f1:d5:eb:af:7e:d9:35:16:7c:c8:20:43:
64:58:a9:f8:bc:75:6c:a8:6d:a5:9c:10:17:06:e0:91:31:94:
7b:26:cb:c5:54:86:c2:1e:5b:14:a4:5e:05:f3:48:85:3f:73:
22:9a:2e:98:27:74:6f:cc:e2:eb:0f:4a:30:41:ae:74:89:53:
b5:8c:da:fe:a7:94:92:0a:66:7f:d6:5f:21:05:de:50:a9:18:
8a:cc:fb:92:a2:4a:21:30:90:85:33:a4:fa:9b:f5:81:35:5f:
0d:0a:ce:a9:1e:dc:b6:a4:66:62:ef:e5:9e:7b:27:2b:c0:05:
00:78:f3:7a:40:0e:e2:4d:e2:a7:6f:43:be:b6:99:47:a3:9d:
68:9d:90:62:11:35:d0:af:3a:ed:ea:24:b8:51:6a:09:d3:04:
c7:c8:40:1c:96:23:50:c3:23:1a:dd:bd:f7:a8:c6:12:70:0b:
5d:5b:5d:05:c4:ec:04:45:c1:0c:7c:a7:ec:f7:f6:48:d1:5b:
7c:ec:95:dc:16:4e:83:aa:cd:47:ca:08:3b:68:8f:4d:b9:7f:
3a:3f:4f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:22 2026 by rpki-client