Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
File: 4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft (raw, json)
Hash identifier: yqYF7ag4KoyX/rcvUL9AiQpBBnZ7+2jyMJu48tx6ITA=
Subject key identifier: 9D:75:E3:27:8C:E0:AE:A6:B1:29:22:55:E1:3A:31:F4:27:A2:9A:5B
Authority key identifier: E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60
Certificate issuer: /CN=e33779b8388d001fdcbddc48ace227f009850660
Certificate serial: 01A10D70B248AC0DE432C825F4490F63544E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
Manifest number: 1A86
Signing time: Mon 05 Oct 2026 19:00:51 +0000
Manifest this update: Mon 05 Oct 2026 19:00:51 +0000
Manifest next update: Tue 06 Oct 2026 19:00:51 +0000
Files and hashes: 1: 4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl (hash: zztPB5ev1DivXpwIBy+iroUKd7CzmoE+GiqbD7NHNqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:70:b2:48:ac:0d:e4:32:c8:25:f4:49:0f:63:54:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33779b8388d001fdcbddc48ace227f009850660
Validity
Not Before: Oct 5 19:00:51 2026 GMT
Not After : Oct 6 19:00:51 2026 GMT
Subject: CN=9d75e3278ce0aea6b1292255e13a31f427a29a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fd:97:21:e0:1b:6f:39:66:2b:50:5d:41:37:
85:ce:41:24:b2:d8:0a:41:12:82:fa:b7:a8:72:49:
81:08:9f:1c:85:e1:90:a9:51:86:f5:8c:ff:e1:54:
7d:e5:9b:3f:eb:5c:3f:a3:72:74:d5:f9:1f:6d:7c:
5d:9e:b0:44:41:8a:99:2e:51:40:33:6f:cf:43:79:
95:88:83:81:70:12:8a:7d:fb:e1:bd:c1:ae:8a:8d:
e9:9d:be:12:f1:ce:dd:f7:d5:3f:0f:d8:35:b1:20:
0e:1a:da:80:82:98:15:96:47:f4:89:06:40:7b:75:
b3:d6:7c:aa:4f:82:0a:0d:10:13:4b:5d:55:1c:83:
e1:0c:5f:be:73:03:ce:e3:38:bf:9e:b7:7d:06:46:
2e:a4:49:ce:98:01:75:61:63:fd:14:94:f3:66:d0:
00:57:dc:0d:14:37:20:fb:c2:1c:3e:ca:c6:f2:8c:
75:a9:55:99:da:35:33:6b:4d:e9:66:76:2e:54:6a:
7d:89:be:72:6b:5e:14:b2:00:35:07:92:95:9b:26:
28:47:49:c9:1b:d4:46:9b:a4:f3:0e:c6:9c:dd:06:
1e:6a:8a:0f:7d:e9:3d:eb:3f:8b:66:de:5a:3d:ed:
56:ed:94:ae:97:64:94:70:d6:33:07:10:10:b6:ca:
92:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:75:E3:27:8C:E0:AE:A6:B1:29:22:55:E1:3A:31:F4:27:A2:9A:5B
X509v3 Authority Key Identifier:
keyid:E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a5:8f:a6:f2:0f:15:21:2b:cf:62:de:f1:26:97:99:9b:2e:
1c:a0:54:69:27:00:ad:78:cf:7d:11:cd:fd:cd:b6:0a:a5:ab:
d9:c2:db:d8:61:ed:ac:da:66:86:d1:b0:4c:2e:74:05:f5:e9:
a1:91:e9:45:30:76:7f:b8:11:5f:e7:3a:e3:58:21:d1:a5:80:
83:cd:45:aa:57:f5:91:9a:d5:aa:68:69:ab:23:a1:e7:98:0f:
03:7a:76:14:6d:43:9a:90:86:5f:f2:0f:e3:76:42:e5:56:ce:
2e:7a:b5:66:17:d0:60:3f:45:43:30:d6:93:eb:52:21:71:3b:
52:70:24:ec:02:a4:92:a7:08:ca:32:be:7d:b9:7a:ee:61:26:
ce:70:16:18:e4:8d:79:bf:2c:a3:f5:87:f3:4d:be:e9:a2:69:
0c:cb:a8:ac:b3:2b:87:5f:ab:64:bf:32:f7:cb:b3:13:08:76:
de:84:b8:ba:28:c1:03:78:e4:84:80:47:0b:45:94:ae:6c:45:
fb:05:bc:bf:e9:7d:71:48:fb:74:3b:6a:ef:bd:a9:7f:87:83:
30:ff:e8:29:46:80:1b:0b:c9:50:c1:1c:08:71:c8:e7:f0:04:
f9:97:78:4b:21:73:f3:da:c7:f3:76:5e:bb:c9:67:c3:c2:fc:
e0:7e:27:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:21:56 2026 by rpki-client