Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
File: 4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json)
Hash identifier: DyQvNhURXoiY6TfOsSEs9pCWosJcULfOeIj/Wj9kec4=
Subject key identifier: A3:0E:2E:2B:36:D5:95:37:C5:C1:D6:97:AC:20:21:01:CF:97:94:77
Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
Certificate issuer: /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Certificate serial: 01A0CD47C2728476DD64E14F185E3ABDAF1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
Manifest number: 0DC5
Signing time: Wed 23 Sep 2026 08:00:26 +0000
Manifest this update: Wed 23 Sep 2026 08:00:26 +0000
Manifest next update: Thu 24 Sep 2026 08:00:26 +0000
Files and hashes: 1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: JEKn8S8I0hPXKNoJP6bnSYHbzhvC/Bs7msDGUpduQiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:c2:72:84:76:dd:64:e1:4f:18:5e:3a:bd:af:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Validity
Not Before: Sep 23 08:00:26 2026 GMT
Not After : Sep 24 08:00:26 2026 GMT
Subject: CN=a30e2e2b36d59537c5c1d697ac202101cf979477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:08:73:c8:ca:06:2e:c2:54:00:90:87:7c:5b:
e1:dc:4d:34:ab:ce:b8:5e:af:c6:d8:e8:bc:f9:c3:
94:f1:48:f3:78:f2:23:a3:cf:42:03:d1:22:5e:1b:
c7:8f:b6:c5:02:98:fb:dd:7d:80:c1:21:da:3b:cf:
a1:79:f9:c4:bc:bd:bc:a2:1e:76:e3:05:89:9f:f0:
ec:c9:7b:5c:69:49:44:9a:a6:2e:ea:f7:b5:9a:c2:
fa:09:bd:9a:76:dc:57:a1:6c:9c:5f:43:63:60:1b:
87:a9:51:b0:c9:37:b5:bb:b2:5d:76:d1:96:0d:e0:
86:d2:48:fe:96:cb:82:d0:fa:bc:7d:d7:2f:66:cd:
ea:eb:ec:cf:ef:2a:bd:1d:db:d1:26:ca:a2:80:1e:
8d:df:e3:62:b6:01:1f:45:30:d6:e0:d9:15:02:49:
03:86:5a:01:80:2d:c9:67:6f:dc:00:95:85:44:6a:
97:15:4f:d4:ce:58:2a:cd:ce:d9:45:a8:1e:ee:11:
5c:bd:77:4e:5b:75:ab:83:af:38:65:32:ea:96:5d:
57:32:74:f8:4e:92:05:2b:27:fa:7d:dd:71:4a:18:
40:d3:72:e2:99:74:c9:fa:f0:e1:2f:ea:90:bc:83:
5e:07:93:96:e2:06:3a:94:69:6b:11:22:9f:e2:d8:
a5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0E:2E:2B:36:D5:95:37:C5:C1:D6:97:AC:20:21:01:CF:97:94:77
X509v3 Authority Key Identifier:
keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8a:45:85:98:c7:8d:e8:58:29:47:a9:52:8e:60:0e:1f:8e:
9c:e0:7c:3d:1a:ac:8e:ba:93:ff:06:22:35:5e:58:f8:16:2c:
9a:03:81:17:60:f9:02:51:76:57:34:6e:cc:8f:f7:c8:bb:f1:
3c:88:36:5e:7e:24:ff:c0:26:f1:75:df:42:29:c3:fd:c4:7b:
7c:53:3f:29:5f:6e:79:6b:8c:2b:e4:8a:95:ed:90:dc:0a:e1:
9d:48:15:42:80:c0:57:c7:21:f7:08:77:3d:52:a6:47:73:2e:
0e:57:c1:50:c5:df:3c:87:10:17:b6:58:b9:a2:ec:1c:e6:88:
5e:54:78:13:17:f5:2d:c5:1e:75:80:8a:2d:d8:29:80:9b:b6:
c8:9d:9e:af:df:6d:42:be:8c:64:52:93:f6:cf:14:3d:1f:7d:
11:cc:f5:f1:ec:00:1c:50:8e:3b:06:9a:fa:71:30:b1:04:4a:
d1:df:40:dc:dd:aa:21:aa:70:73:41:6f:ce:55:89:ac:0e:1f:
95:fe:8a:9b:48:f9:6e:bc:85:df:b7:fa:93:fa:7b:93:42:18:
99:d0:ef:94:f5:aa:74:5c:35:64:4e:53:9c:f6:44:8b:71:c4:
ff:fd:3f:82:02:11:ac:71:85:75:5c:50:76:2a:89:44:2f:6d:
c5:06:6c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:14:56 2026 by rpki-client