Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
File: 4dl0w71P6k6f61Ep2-0gPAdcjWg.mft (raw, json)
Hash identifier: trLFu84dyyezlTg0dZoAPUq+V7aaUu2SMDHvnl03kxs=
Subject key identifier: 0A:6A:11:5D:E5:A9:EA:39:FA:B5:A8:43:1A:80:71:B4:84:5E:A5:69
Authority key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
Certificate issuer: /CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Certificate serial: 01A1DE703FA1BF0558402411857AE8342037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
Manifest number: 0DC3
Signing time: Sun 15 Nov 2026 09:01:00 +0000
Manifest this update: Sun 15 Nov 2026 09:01:00 +0000
Manifest next update: Mon 16 Nov 2026 09:01:00 +0000
Files and hashes: 1: 4dl0w71P6k6f61Ep2-0gPAdcjWg.crl (hash: blT+UWG5Kja9YOT4OiCDuqwAGmh6ICOIBl2TkwGi0uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:3f:a1:bf:05:58:40:24:11:85:7a:e8:34:20:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Validity
Not Before: Nov 15 09:01:00 2026 GMT
Not After : Nov 16 09:01:00 2026 GMT
Subject: CN=0a6a115de5a9ea39fab5a8431a8071b4845ea569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:24:01:26:d7:d9:27:f2:37:62:84:11:51:e2:
8d:5d:a9:ba:f6:f3:45:8e:7e:1f:b7:99:b8:88:31:
c3:31:25:66:67:96:87:ac:0e:65:f2:07:63:f9:6b:
0e:f1:ca:42:7f:58:83:80:be:de:3b:79:83:d6:0a:
2c:d6:67:53:73:00:86:80:cb:fe:d8:45:69:34:b8:
42:78:ec:8a:a8:56:72:a5:74:b2:17:d7:a6:80:1e:
32:d8:9d:5c:28:95:34:fa:1c:75:df:09:3c:04:22:
b8:c5:5e:3f:8a:46:29:5b:23:a1:f8:6c:03:63:8a:
5e:58:1b:0a:df:b2:7c:48:b4:4a:7f:fb:df:94:d7:
6c:8f:9e:5f:39:f3:5c:d1:db:5e:c7:c0:37:3e:d4:
4d:29:6e:64:5c:a5:9c:27:b4:7f:28:15:d0:35:66:
81:0a:1e:4f:d0:58:41:26:df:9d:53:b7:27:78:42:
6b:8c:85:f1:61:27:a7:4d:11:c0:13:0f:45:bc:85:
52:2d:31:7a:a6:84:4f:d2:8b:8a:70:f5:3f:9a:80:
e6:7a:66:46:a5:c5:41:5a:27:c3:ab:41:5c:9e:8c:
2c:8a:99:cb:a0:92:5f:df:f7:d2:ee:05:b2:15:c6:
d9:c3:9c:86:63:06:8d:a0:f8:4a:f9:f4:10:84:00:
16:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6A:11:5D:E5:A9:EA:39:FA:B5:A8:43:1A:80:71:B4:84:5E:A5:69
X509v3 Authority Key Identifier:
keyid:E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:85:20:bb:3c:fc:31:ce:89:3a:62:d4:50:4c:9a:47:f4:75:
4d:b0:0f:f7:5d:2b:35:a6:b2:d9:8b:bd:a6:d6:a4:9b:73:a8:
d4:c8:9e:da:d0:65:4d:e7:3b:a5:37:83:be:56:ac:32:f9:1d:
36:93:43:f3:61:d2:57:f4:c4:ec:f1:69:3a:db:9d:b1:d4:b6:
e4:91:c1:7f:fe:a5:d3:cd:37:ac:30:50:51:70:e0:54:27:7b:
42:f1:8d:56:90:1e:09:83:1e:4d:a2:f6:ee:9b:1f:33:04:31:
b9:96:df:32:c4:c2:18:a5:ef:da:9b:e2:4d:14:ef:0d:b8:fb:
a5:c9:84:93:b3:bc:9e:1d:a4:4a:33:96:2e:79:96:ba:c1:03:
ac:67:c4:6c:43:7f:94:d2:bb:69:e4:31:ab:25:c1:9e:7b:83:
8d:b6:c0:ed:e3:05:cd:dd:a8:c1:18:55:6e:2f:b7:35:33:b1:
10:bf:a3:46:1f:8d:54:3f:b7:29:70:eb:60:25:0b:1c:99:ef:
cc:37:d0:17:ef:9e:ab:a6:eb:29:cf:cf:43:c1:f1:a2:46:98:
b4:51:4e:57:09:a9:45:ef:48:1b:93:a3:68:99:51:25:bc:0f:
1f:ee:1c:e5:03:19:b7:80:1b:a7:66:f9:97:76:3a:6c:92:bb:
51:24:4f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:59:40 2026 by rpki-client