Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
File: 4dl0w71P6k6f61Ep2-0gPAdcjWg.mft (raw, json)
Hash identifier: JTxLDU9ma6lo0ttcTs6sl/l3O4HGsvr9cNdsD7fwVmg=
Subject key identifier: 66:AB:A0:04:AD:AA:6A:E3:7B:51:BB:B2:4F:C4:BB:4C:6D:D7:42:F0
Authority key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
Certificate issuer: /CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Certificate serial: 019D99628AEECD4FE30ED6223EBF294259EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
Manifest number: 0B8D
Signing time: Fri 17 Apr 2026 03:01:05 +0000
Manifest this update: Fri 17 Apr 2026 03:01:05 +0000
Manifest next update: Sat 18 Apr 2026 03:01:05 +0000
Files and hashes: 1: 4dl0w71P6k6f61Ep2-0gPAdcjWg.crl (hash: 1Wd2f3PDzT/3mgf5SG25q+4/e0aUoCEzMIbIoGID5tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:8a:ee:cd:4f:e3:0e:d6:22:3e:bf:29:42:59:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Validity
Not Before: Apr 17 03:01:05 2026 GMT
Not After : Apr 18 03:01:05 2026 GMT
Subject: CN=66aba004adaa6ae37b51bbb24fc4bb4c6dd742f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:04:9a:3d:75:a2:87:86:4e:d7:1b:9e:33:25:
bd:39:8c:e2:4e:00:5d:ee:b3:6a:ff:9a:f2:39:37:
1d:4c:cc:c1:84:8d:8f:6a:9b:08:18:1b:2d:13:76:
93:3d:55:d8:14:76:c9:a6:34:62:f8:03:cb:eb:89:
9d:1e:32:5e:af:8e:5f:f4:0d:15:90:39:a0:dd:0c:
99:6d:80:6c:f7:52:25:1d:e0:b4:46:e5:ca:6a:74:
86:54:da:91:73:cf:66:d7:fd:47:69:aa:53:f7:62:
3d:36:4d:e3:4a:5b:3d:f4:ce:5a:af:66:9e:c0:70:
92:1e:b1:0b:30:f3:05:ce:3e:1a:8c:b8:b9:89:a4:
7e:6d:b9:9e:21:49:0d:09:b8:53:e1:1f:b8:48:84:
a7:00:2d:bb:a5:fb:2e:71:46:d7:87:91:b5:b8:38:
a6:32:5b:ae:ec:cf:f4:d3:74:21:c6:56:d9:00:10:
73:c4:b0:8c:5d:6e:9f:f0:2b:d6:15:16:0c:7b:38:
f6:25:45:19:29:9f:26:c8:e4:56:5a:26:15:38:02:
b7:92:23:a6:e1:da:02:5e:cc:87:07:40:95:f5:9e:
7c:6f:24:fa:a0:7a:b5:19:ec:c1:bc:d1:b1:bc:0e:
45:77:7f:0b:90:4a:8d:fb:8d:59:6d:42:e6:90:22:
d3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AB:A0:04:AD:AA:6A:E3:7B:51:BB:B2:4F:C4:BB:4C:6D:D7:42:F0
X509v3 Authority Key Identifier:
keyid:E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b9:29:0e:22:fa:df:20:28:78:37:6d:49:5b:44:13:32:0e:
a2:00:d7:16:32:40:84:e5:d9:f3:53:50:ba:ba:da:5b:cf:d6:
85:e9:75:53:ef:de:59:7f:5d:72:1b:4f:0f:a1:c3:ab:a0:05:
22:4f:a3:db:61:5f:fc:3b:85:84:e1:03:9c:9d:49:5a:18:1d:
e4:25:fd:6e:c1:db:dc:f5:b7:a4:a7:03:20:42:c9:6a:be:79:
4b:63:7e:e3:28:15:6f:0b:91:47:e2:3e:64:59:e1:6a:5e:05:
0a:17:da:d7:14:92:ed:6b:76:8d:6e:09:5f:76:15:5e:81:38:
25:4b:e0:24:db:9a:7b:f5:6b:39:a9:44:e6:52:ec:c9:5d:12:
0f:3c:96:f0:52:61:1e:df:bf:2a:80:99:11:b5:29:c6:90:58:
c7:74:5e:e3:ae:a8:52:a4:dc:f4:ab:b8:b0:4d:67:17:3a:f7:
f7:2a:af:a9:c4:a4:af:fc:e7:df:90:19:b0:f5:94:35:7d:06:
19:d0:ab:93:dc:90:89:ca:33:7f:2b:ac:89:84:d5:7d:78:16:
9b:ac:64:5f:d6:b1:ab:92:70:2e:19:92:6d:f4:84:62:ad:f2:
7a:50:47:2a:d1:f8:ab:8e:c1:86:ba:dc:38:0e:50:a1:b3:81:
27:7f:91:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:17 2026 by rpki-client