Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
File: 4dl0w71P6k6f61Ep2-0gPAdcjWg.mft (raw, json)
Hash identifier: 3nbPu2/hzW5hFoO+V5B3NB+N6CKoi+1f7/GGe5K9tso=
Subject key identifier: 0A:02:4F:E2:6F:BD:60:7B:F2:86:64:FE:0B:E0:E4:F8:15:19:7B:FF
Authority key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
Certificate issuer: /CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Certificate serial: 01A0C28D5EF7E782BAE9F613A8ACF1415769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
Manifest number: 0D30
Signing time: Mon 21 Sep 2026 06:00:39 +0000
Manifest this update: Mon 21 Sep 2026 06:00:39 +0000
Manifest next update: Tue 22 Sep 2026 06:00:39 +0000
Files and hashes: 1: 4dl0w71P6k6f61Ep2-0gPAdcjWg.crl (hash: p12SKKYiV+e8DNQNAzAMk2rT0TBzhfJ/idYUx1CqWfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:5e:f7:e7:82:ba:e9:f6:13:a8:ac:f1:41:57:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Validity
Not Before: Sep 21 06:00:39 2026 GMT
Not After : Sep 22 06:00:39 2026 GMT
Subject: CN=0a024fe26fbd607bf28664fe0be0e4f815197bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:40:d1:f6:cd:8a:e3:a0:43:fa:56:26:4f:
f3:13:49:08:77:e0:0c:d8:15:cd:22:6b:8b:2d:1f:
96:34:44:fa:02:58:a4:f5:d0:62:06:42:4c:8a:c0:
d3:fb:35:e1:e5:bb:82:69:f7:7d:c7:3e:22:af:45:
42:a3:b8:c4:f9:28:5f:28:a6:fc:b0:64:30:5f:98:
5b:48:d6:58:88:3b:ed:5b:5d:d7:de:4b:9c:b7:21:
14:79:d3:e4:fb:c3:93:e0:7c:b6:05:b3:a7:62:29:
e6:3e:68:63:d4:db:e7:e0:b4:fa:75:c4:f1:c9:9b:
af:91:52:c0:2f:f7:29:77:c7:ce:e6:7f:af:53:b2:
89:cc:ab:75:ca:85:66:da:ca:d8:8b:d9:aa:ab:1d:
c9:c7:fd:30:52:69:91:65:ee:19:b6:fe:37:0e:3c:
64:c3:77:d5:05:d2:9a:f6:5c:ce:11:ed:f9:71:a9:
9f:2a:b1:f3:7c:29:23:0d:3c:18:65:f8:b5:09:7e:
87:95:76:92:ed:ce:67:8b:f0:fb:5e:a4:74:3a:35:
7f:a1:f5:b1:ce:6a:70:05:fa:4a:dd:d2:44:e5:43:
02:8e:24:f2:db:41:5c:15:20:59:64:7a:c3:3e:fb:
a1:88:d9:99:d2:81:a7:0a:45:a4:01:51:4e:41:af:
3d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:02:4F:E2:6F:BD:60:7B:F2:86:64:FE:0B:E0:E4:F8:15:19:7B:FF
X509v3 Authority Key Identifier:
keyid:E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b6:d3:4e:4e:3f:ed:05:1b:36:f9:24:96:6a:51:88:97:c7:
08:00:a0:a9:54:1a:42:11:8e:7f:4c:c1:ae:dd:19:69:2e:b0:
74:1a:b4:36:36:63:43:f8:ec:67:25:6b:9e:d0:77:5d:8e:da:
50:4c:1a:37:39:61:b2:ff:35:6e:4a:3a:2a:89:41:25:86:4e:
63:f6:86:48:3a:85:92:e8:7c:90:46:1d:d6:7b:fd:16:3b:fd:
dc:8f:4e:1d:bb:8e:84:33:28:8c:da:ea:0f:4f:b7:7a:26:90:
9c:e7:3a:13:08:bd:ae:01:33:1a:66:17:b3:e2:91:9b:33:08:
de:c0:e9:4a:e0:84:e8:bf:43:21:46:30:a3:55:eb:d5:3c:f3:
7a:eb:89:6d:94:37:e4:57:f9:ef:b6:2b:d3:bc:1f:ed:9a:dc:
61:ba:58:ec:cf:37:62:96:93:1b:24:b2:92:e4:4b:09:fe:8a:
35:04:ec:89:8d:27:ec:be:d4:04:ec:11:7e:ac:d5:c0:11:42:
f1:4e:e1:29:d1:52:9d:5f:dd:fb:28:2b:1d:27:6f:a9:a2:7e:
5d:a8:d7:ac:6b:67:9c:51:ff:89:b0:3d:0b:b2:6b:13:fe:94:
c6:14:cb:c6:9b:54:f0:19:a5:f6:27:3d:67:2e:72:08:e7:a0:
59:dc:61:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:31:26 2026 by rpki-client