Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
File: 4dl0w71P6k6f61Ep2-0gPAdcjWg.mft (raw, json)
Hash identifier: Ay4ortK0alJioAfcd0eYySsI0HiIEsnk63QmIbFeYdw=
Subject key identifier: 87:50:12:5C:A5:81:9A:C5:00:51:D4:15:35:AF:5A:6E:4F:69:AB:6A
Authority key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
Certificate issuer: /CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Certificate serial: 019CABD98D8A1A5A421306564FDFE7AAABDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
Manifest number: 0B12
Signing time: Mon 02 Mar 2026 00:01:27 +0000
Manifest this update: Mon 02 Mar 2026 00:01:27 +0000
Manifest next update: Tue 03 Mar 2026 00:01:27 +0000
Files and hashes: 1: 4dl0w71P6k6f61Ep2-0gPAdcjWg.crl (hash: DHDKPp0TuSILCLBW9HltVvq3bURXDNBHnlycULbzhYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:8d:8a:1a:5a:42:13:06:56:4f:df:e7:aa:ab:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Validity
Not Before: Mar 2 00:01:27 2026 GMT
Not After : Mar 3 00:01:27 2026 GMT
Subject: CN=8750125ca5819ac50051d41535af5a6e4f69ab6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:da:8f:db:e2:50:4c:6e:b5:fe:c0:13:9b:e6:
0e:27:61:f4:79:01:73:1c:56:48:6c:5b:75:b3:87:
c8:a9:2b:23:0c:5f:13:bc:17:11:77:26:3f:ad:cb:
b9:47:47:e4:0a:d8:c3:f1:53:99:44:c4:6b:36:ae:
57:94:59:9b:30:fa:5e:5a:d7:5e:3d:9b:cf:8c:b0:
80:36:dd:33:4b:e0:95:92:d4:82:9e:1e:97:5c:e4:
30:6d:9a:ee:3b:88:04:d7:8f:50:88:e7:ed:bd:30:
24:27:6b:76:29:11:d2:c0:10:30:75:e7:88:a4:af:
c8:ad:b5:34:3d:39:8d:b7:e7:57:8f:4d:df:4d:61:
19:86:76:9b:d5:b1:b6:18:5e:08:3b:39:fb:d0:b7:
cf:f8:cd:fd:d3:24:37:94:68:7a:72:06:56:88:4c:
b7:69:09:c4:21:cd:af:25:ae:d4:a4:f4:83:8f:0e:
8a:0b:e8:ba:48:4c:16:25:1f:9a:d1:3e:27:0e:e0:
6b:21:0b:2a:f9:53:ff:e6:fb:91:d3:e0:96:6e:d7:
b2:81:35:56:cd:53:60:98:cf:df:56:22:0d:a6:5c:
d5:4a:3b:75:25:4b:ac:f8:5a:12:50:d9:13:34:48:
f7:4c:ae:01:27:63:bc:4c:99:df:41:da:fd:91:a1:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:50:12:5C:A5:81:9A:C5:00:51:D4:15:35:AF:5A:6E:4F:69:AB:6A
X509v3 Authority Key Identifier:
keyid:E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b5:24:b2:d6:47:d1:68:f9:f9:a5:53:39:d0:4b:7b:0e:4e:
cb:89:fb:c7:16:33:ed:c1:2a:4e:f4:c2:23:62:de:df:fb:77:
40:e4:51:c9:e9:1d:ed:33:8d:8d:fe:78:09:a4:e2:e8:36:8a:
20:41:a6:c7:9a:be:9c:ff:16:90:d2:d6:e0:f3:ec:a3:d6:2f:
80:f5:d5:87:7b:33:69:44:92:08:86:99:36:06:22:af:6e:99:
0f:58:0d:2b:e3:39:e6:9a:01:8f:b3:8a:c7:01:ca:f8:da:a1:
66:c1:db:9f:cb:e1:52:0b:eb:a9:e8:79:a2:33:47:19:17:e9:
86:78:cc:79:df:a1:4f:84:8f:c8:39:af:d2:6c:11:89:f1:34:
4c:3e:65:c6:79:fa:ed:7a:b8:67:5a:6f:cb:17:7e:95:d2:26:
d9:f1:a4:84:c9:f6:c8:06:b3:2d:eb:73:c8:99:df:4f:36:b8:
5a:82:79:6a:23:dc:27:0a:a3:19:2b:ff:41:f9:59:5e:61:7a:
ca:9f:e4:79:d8:75:9a:95:ca:f3:6f:64:48:44:e3:2b:aa:b2:
a7:5c:cd:ca:9c:d2:d1:bd:a5:f7:21:2d:30:a2:02:1b:11:46:
2b:d7:98:b4:7e:c7:03:33:91:0e:a5:ce:59:96:b0:12:93:09:
85:d4:06:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:23 2026 by rpki-client