Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
File: 4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json)
Hash identifier: bP9hy9OCHz/kOMdopHKKHUAJ2+a6Plwz4vP4Gd7f2B8=
Subject key identifier: 05:0D:E8:AF:C9:B5:EC:D5:5D:14:8B:E3:83:6D:F5:76:96:EB:92:C8
Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
Certificate issuer: /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Certificate serial: 019CAAFCE91ABF4B93B829258F40EE97C083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
Manifest number: 0BA1
Signing time: Sun 01 Mar 2026 20:00:27 +0000
Manifest this update: Sun 01 Mar 2026 20:00:27 +0000
Manifest next update: Mon 02 Mar 2026 20:00:27 +0000
Files and hashes: 1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: aHZHMT5kGPPaQbr+ovwnxlPI2VHUrBzKwHaoMR6bzFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:e9:1a:bf:4b:93:b8:29:25:8f:40:ee:97:c0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Validity
Not Before: Mar 1 20:00:27 2026 GMT
Not After : Mar 2 20:00:27 2026 GMT
Subject: CN=050de8afc9b5ecd55d148be3836df57696eb92c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ff:a9:a4:3d:85:98:22:9a:a1:1c:6e:57:c0:
18:49:b5:07:c8:07:2a:9a:8c:1f:66:f2:d6:84:2e:
ce:9f:48:d8:3d:7b:98:89:4f:97:b6:bd:8d:7e:43:
bd:72:10:7b:dd:58:0a:34:b5:39:6c:13:58:dc:12:
f7:00:7f:d1:af:b7:a3:87:f0:d8:22:42:71:d7:36:
b3:e3:7a:63:ec:6a:32:1a:7f:05:99:eb:9f:58:b3:
e5:98:17:05:46:03:d1:e8:d8:8e:84:35:db:56:e8:
76:f6:e7:ea:25:5c:3d:82:81:d6:bd:7c:09:53:29:
cd:8e:fa:15:29:ac:5b:94:42:aa:fe:cd:21:77:b8:
cb:f4:d9:47:00:00:ec:ad:08:e0:d8:0c:22:05:d0:
10:df:0c:41:28:36:2c:db:11:fe:73:21:be:1f:a9:
69:c5:26:3d:d7:f2:04:e2:c6:95:d6:f7:d6:4c:f6:
43:18:2f:97:33:5e:c0:29:99:b8:19:51:30:e6:e8:
98:fb:ec:e1:99:97:a9:ad:c7:32:32:a2:83:60:85:
45:40:11:0b:53:a9:89:60:45:f9:b6:ed:39:39:70:
9d:6f:4e:05:de:df:f0:81:c8:86:4a:e2:5e:cf:9b:
0c:33:7d:ae:3d:4b:6d:55:1e:cb:f6:07:c2:3e:be:
ac:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0D:E8:AF:C9:B5:EC:D5:5D:14:8B:E3:83:6D:F5:76:96:EB:92:C8
X509v3 Authority Key Identifier:
keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:40:18:75:b3:d2:eb:91:a0:b9:56:f3:db:62:ab:b3:12:45:
29:67:e0:dc:51:54:0e:50:f8:43:42:67:0e:68:5c:32:96:6b:
5c:9d:2f:2f:55:a7:ff:f4:33:7f:5c:b6:14:db:66:1b:2c:2f:
2a:d0:54:cd:b7:c5:89:f2:c1:8f:f5:52:b0:fa:08:e8:bc:5d:
c3:9f:cb:88:5d:c1:d4:32:8c:5b:f4:08:9f:10:ee:bb:ee:8a:
e5:94:66:70:b9:1b:01:5e:51:ed:e5:fb:a2:f2:74:19:9e:70:
bc:53:f2:cf:a6:2d:43:a9:ca:c3:c8:c3:d9:82:c3:32:4d:f7:
42:a7:3c:8d:18:95:ec:62:92:8d:8f:37:30:58:e0:1c:8d:16:
fe:9e:ee:03:1d:84:ef:7f:73:47:ee:67:b6:d6:e2:11:e5:4e:
36:3d:be:08:c6:ca:d8:b0:6c:bd:7c:8f:e6:6e:ae:5e:b3:71:
16:d3:eb:85:9c:ee:9d:6c:34:6f:f7:75:e1:f4:7d:26:10:5f:
7d:7a:2b:90:0a:24:28:5b:b1:92:49:7f:2e:0e:d6:5b:31:e1:
c8:e5:a5:5c:91:f9:d2:1a:c6:c4:4e:ff:95:ca:2c:f1:e4:4f:
90:46:15:61:6b:59:02:5f:c6:ab:85:0e:83:cb:7f:9d:60:48:
88:60:09:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:57 2026 by rpki-client