Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
File: 4HDNq3OhLa82gGsOFgLI2vuQk7s.mft (raw, json)
Hash identifier: NsDVvoFjV8cVDeWt2YQBP6owPSMl7lVMF1itNUdbRkE=
Subject key identifier: 73:A0:71:A7:BD:F1:91:B7:2D:05:D0:E1:42:79:E7:CD:FE:EA:91:AA
Authority key identifier: E0:70:CD:AB:73:A1:2D:AF:36:80:6B:0E:16:02:C8:DA:FB:90:93:BB
Certificate issuer: /CN=e070cdab73a12daf36806b0e1602c8dafb9093bb
Certificate serial: 01A0C7EAE95B90C2DA9F829A87B333A829DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
Manifest number: 0FB1
Signing time: Tue 22 Sep 2026 07:00:56 +0000
Manifest this update: Tue 22 Sep 2026 07:00:56 +0000
Manifest next update: Wed 23 Sep 2026 07:00:56 +0000
Files and hashes: 1: 4HDNq3OhLa82gGsOFgLI2vuQk7s.crl (hash: 6Et1Wk1oiy7KMRKR1U69FUdm9JWwHxnaJ19LhHXdmvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:e9:5b:90:c2:da:9f:82:9a:87:b3:33:a8:29:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e070cdab73a12daf36806b0e1602c8dafb9093bb
Validity
Not Before: Sep 22 07:00:56 2026 GMT
Not After : Sep 23 07:00:56 2026 GMT
Subject: CN=73a071a7bdf191b72d05d0e14279e7cdfeea91aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6b:2f:0f:62:e3:7e:cc:43:46:5c:07:68:cf:
ea:a0:95:f4:b2:59:ca:d9:74:d3:38:76:16:0c:18:
b6:d5:1c:6c:19:16:aa:07:2c:08:ff:74:c2:68:da:
7d:e9:05:73:67:8e:23:08:f6:5e:57:00:d2:d6:42:
49:2f:cc:b9:ff:c2:1b:4e:ca:29:65:ba:08:78:aa:
f5:03:a0:20:cc:08:54:12:ed:67:75:3f:63:53:a9:
1f:bc:56:11:09:4c:f4:47:74:2b:e8:a9:32:a0:6c:
e8:69:6e:fe:43:44:c3:67:7b:ab:2b:e0:3b:01:61:
19:bb:0f:8f:12:ab:37:12:88:0e:a0:b0:27:d5:05:
96:6f:0b:67:8b:d4:ec:29:b5:f4:90:6d:b7:47:73:
be:61:d5:94:3f:a6:54:35:3d:32:fe:33:d2:bf:3b:
a0:09:54:62:ad:d5:7e:4c:42:61:e9:81:52:92:27:
17:47:38:04:e6:bb:db:5b:a4:81:0b:bf:29:f5:f5:
5d:7d:15:07:cc:77:db:9c:fe:9c:5a:05:17:f1:49:
9a:e8:ec:9c:af:a7:95:cb:f9:04:3e:26:13:25:ac:
c6:30:2d:40:41:c1:dc:a0:33:86:49:84:b2:31:bf:
c9:37:cd:9b:3f:4e:be:1a:6e:2c:5a:fe:c4:0e:93:
15:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A0:71:A7:BD:F1:91:B7:2D:05:D0:E1:42:79:E7:CD:FE:EA:91:AA
X509v3 Authority Key Identifier:
keyid:E0:70:CD:AB:73:A1:2D:AF:36:80:6B:0E:16:02:C8:DA:FB:90:93:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:26:d8:7a:51:02:4f:43:83:6d:7e:a3:87:e6:01:d3:fa:b4:
fa:4f:93:80:db:1f:ba:9a:f4:ef:88:97:91:0f:23:38:6f:05:
96:ec:86:66:3e:b7:87:eb:15:33:47:d2:0f:f6:9d:cc:8d:b4:
0f:be:d9:19:f9:31:de:84:88:06:d1:6f:95:c8:69:30:f9:05:
6a:69:14:c0:40:fb:f2:7c:c0:03:37:a9:30:3c:1c:97:a8:41:
f2:43:40:93:1c:4f:54:3c:1e:9c:77:c7:d6:f0:7a:8d:25:6f:
52:57:7a:2b:da:b5:89:aa:56:da:52:25:84:14:74:e4:55:b1:
12:39:12:21:2c:61:61:3d:12:f4:ab:13:7a:de:0e:b7:04:47:
7b:e4:24:a5:c9:3a:cc:4c:83:18:f0:eb:df:60:b8:c6:eb:e6:
ce:07:54:7d:1e:83:20:60:ae:ac:93:b9:91:30:3e:ac:60:4c:
b3:c3:d6:a3:5e:58:8c:05:82:b7:95:3c:3b:b0:25:ed:cb:b1:
45:61:dd:5f:20:fe:c0:4c:7f:1d:99:5b:86:2c:c5:38:d7:40:
37:73:9a:df:c9:23:9c:5f:dc:3b:37:e9:8f:56:f6:36:14:d5:
13:4f:62:7b:a8:5b:6b:80:00:78:96:1a:4c:59:58:79:cb:52:
37:b7:85:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:28:38 2026 by rpki-client