Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
File: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft (raw, json)
Hash identifier: IVgB8E1JROSe+GkOZw4wtXuQdr/8LSdMy0eXDr6Mn5g=
Subject key identifier: BA:E0:4C:75:34:84:86:F1:E3:DA:E7:6E:18:88:AA:A0:74:74:9A:79
Authority key identifier: E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
Certificate issuer: /CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Certificate serial: 01A1C02E5CB4FA72376C4EF794DC18305EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
Manifest number: 1410
Signing time: Mon 09 Nov 2026 12:00:26 +0000
Manifest this update: Mon 09 Nov 2026 12:00:26 +0000
Manifest next update: Tue 10 Nov 2026 12:00:26 +0000
Files and hashes: 1: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl (hash: wePMHK8qJ7/v2HDnfvzgXpPAhf3lF7Q9wwhkq5dH3j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:2e:5c:b4:fa:72:37:6c:4e:f7:94:dc:18:30:5e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Validity
Not Before: Nov 9 12:00:26 2026 GMT
Not After : Nov 10 12:00:26 2026 GMT
Subject: CN=bae04c75348486f1e3dae76e1888aaa074749a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:b6:b7:3d:79:b4:ee:14:2a:40:55:c0:4a:
f5:fb:65:60:c4:1f:d6:d1:35:f1:12:83:ec:85:d0:
6c:26:2f:4f:39:7b:45:f7:bd:cb:6d:5e:73:b0:65:
b5:a2:38:50:f2:6b:c4:50:b9:f0:39:7d:c0:d9:22:
24:0d:38:07:c2:f8:c9:da:9a:d3:f4:db:c9:1f:f8:
e7:09:84:b7:3e:d7:65:57:7e:78:07:d2:c4:55:91:
e8:db:c1:6e:67:99:ab:89:aa:23:fb:0b:b9:4d:1e:
d3:85:12:e2:23:84:e3:4e:6e:3c:c0:73:14:40:a0:
72:ae:91:8d:9f:22:01:6f:bd:45:aa:bf:e3:77:a5:
50:c3:a2:7d:92:d7:b6:db:61:f1:0a:84:0a:da:50:
18:3a:ac:e9:a3:42:53:06:44:23:cc:09:75:c6:e6:
8d:50:04:3d:c2:1b:0b:4d:de:0c:ca:e2:1a:18:a7:
8d:4c:67:d4:34:02:20:ab:81:a7:d8:54:58:eb:c3:
8c:d8:09:40:55:e8:a7:a1:6e:ff:1c:1d:6a:fb:39:
03:47:16:e8:02:5b:38:a4:cc:9f:68:13:a7:f5:0d:
fc:e4:0e:3f:90:b4:18:a8:80:21:73:df:d5:c7:65:
71:e9:db:16:3f:30:7d:15:26:db:cd:99:73:b3:c3:
2d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E0:4C:75:34:84:86:F1:E3:DA:E7:6E:18:88:AA:A0:74:74:9A:79
X509v3 Authority Key Identifier:
keyid:E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7e:6e:64:2c:d2:46:cb:d5:1a:2c:02:eb:7b:de:03:f7:21:
cf:15:f7:7d:11:74:e1:11:30:28:62:07:70:12:dc:79:78:6a:
53:32:f8:90:9f:8b:67:87:dd:00:95:84:95:a5:22:48:3e:1e:
ca:c7:b3:b4:50:94:d3:ac:c2:63:ef:99:3b:4f:fc:66:ce:30:
e3:03:3e:03:14:6d:c6:82:ff:f7:b7:5d:cc:85:94:db:09:f4:
a1:9d:f9:a7:c8:e5:ac:4e:e3:fb:b7:50:dd:10:b1:94:71:c2:
db:d4:56:46:46:5f:89:6c:1b:b1:e9:84:34:37:40:21:05:6c:
df:5d:48:78:b0:b6:a5:b2:d2:6a:6a:26:04:c9:a8:94:a4:2c:
53:bd:dd:cd:d7:db:e8:96:78:5d:11:15:eb:c8:f4:e2:3e:c8:
30:5e:f1:5b:be:0b:32:00:47:ab:90:fe:82:67:d0:e8:87:3d:
6e:20:b5:b3:a7:ff:80:64:97:b3:ba:8e:4d:c9:da:ba:c6:56:
ef:f8:c6:8b:5d:28:8e:2b:a4:62:a5:31:e8:9d:f7:b9:54:11:
5d:f9:83:a1:11:f4:8d:d3:5f:ee:77:48:87:29:fb:e9:f9:15:
0d:6a:1e:f3:f3:81:1e:6c:5c:a9:e2:af:e5:2d:ef:ee:a2:ef:
86:3e:f6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 22:45:05 2026 by rpki-client