Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
File: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft (raw, json)
Hash identifier: WsKrA5DR7DDRzQoQ6TTKr6cNTAoCD/mM78kc3YO8wdU=
Subject key identifier: 58:99:D6:06:DD:95:51:2D:7D:C2:6F:8E:D2:C7:C6:A6:8B:48:C9:1E
Authority key identifier: E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
Certificate issuer: /CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Certificate serial: 01A0C3327818405587FAAAC693F507891D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
Manifest number: 138D
Signing time: Mon 21 Sep 2026 09:00:59 +0000
Manifest this update: Mon 21 Sep 2026 09:00:59 +0000
Manifest next update: Tue 22 Sep 2026 09:00:59 +0000
Files and hashes: 1: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl (hash: XqKsdpsr3d+cPSY7fr1JuLeX62717LwY3wqGWtiemDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:78:18:40:55:87:fa:aa:c6:93:f5:07:89:1d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Validity
Not Before: Sep 21 09:00:59 2026 GMT
Not After : Sep 22 09:00:59 2026 GMT
Subject: CN=5899d606dd95512d7dc26f8ed2c7c6a68b48c91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:de:8d:bf:c1:32:13:72:9b:75:33:df:ea:
54:88:93:6b:17:49:9d:2a:ab:ec:92:56:0b:51:6d:
d3:10:1b:96:f5:94:68:50:2e:ad:74:7f:f3:71:10:
bf:19:83:4c:ac:1b:d6:8a:a2:36:f4:fe:7c:26:54:
58:b2:3e:27:e0:d8:23:3c:d1:56:d8:40:2a:39:14:
0e:11:7d:84:a8:9d:e2:4a:b4:ef:20:42:97:ab:82:
9d:aa:b0:60:f8:0f:0c:a3:d1:f2:2f:4a:1f:a6:77:
a0:5d:48:34:44:27:08:7e:f3:27:cc:51:7f:07:60:
f8:87:69:6b:7f:5e:7c:75:5d:80:63:f2:69:03:14:
c8:d6:76:6d:99:25:56:bc:5a:fd:28:b5:14:97:df:
a2:54:00:75:4f:5a:76:57:b7:51:3e:8e:05:ee:87:
1a:e5:06:eb:ce:d4:48:3f:0f:0a:0f:84:14:a0:6e:
28:cf:2e:31:68:71:2e:bf:79:65:70:bd:25:de:4f:
d5:65:27:d9:2d:46:5d:4e:f0:3b:e6:af:d8:cf:f4:
28:d7:9e:b8:a7:19:7a:4b:7f:8d:a5:19:b1:79:cf:
14:9a:c5:32:9a:68:32:4f:bc:90:ea:46:bc:f6:fa:
e4:b0:51:e0:c6:19:c9:63:c9:8f:6f:3f:e0:a7:fa:
c6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:99:D6:06:DD:95:51:2D:7D:C2:6F:8E:D2:C7:C6:A6:8B:48:C9:1E
X509v3 Authority Key Identifier:
keyid:E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:8b:30:89:7d:b9:01:a4:ba:c4:3c:2d:1e:a8:8d:1a:95:48:
69:7a:8d:c2:b0:f8:8b:3e:5a:57:25:ef:6a:fc:d4:30:63:28:
f3:c1:ef:86:c7:a0:cb:62:cd:ab:58:6f:6c:31:e7:5c:09:6c:
79:16:9f:74:c1:cd:c8:e6:53:e6:b2:61:0d:7a:bf:cb:27:55:
35:7e:56:39:f3:5b:83:9e:f1:a3:25:b9:89:96:c8:c1:38:46:
25:68:c7:12:ec:98:e7:3d:2e:19:23:84:6d:f3:85:8b:ea:59:
9a:bc:83:f4:fc:1f:f1:e9:73:be:ea:53:49:7c:ab:fa:d3:b0:
80:65:3c:b7:68:2d:67:d1:f0:d5:73:b4:84:db:d0:f8:0d:38:
96:df:2b:a7:a9:54:37:ae:75:27:58:d6:05:ec:38:63:3d:bb:
52:80:2b:09:30:be:c1:31:a2:d4:e1:17:7f:d3:3c:72:1f:5d:
be:25:c6:92:b1:9b:7c:e1:f3:fb:34:03:9c:5d:db:7f:60:a2:
e7:c4:0f:67:08:ea:93:9e:4c:d5:34:ab:8e:0f:cd:f8:89:77:
db:b0:49:e0:45:be:6c:30:62:dc:2c:2a:bb:26:f1:05:29:c1:
2e:1b:11:a1:5d:f6:d1:6b:6a:ce:38:00:aa:a9:43:4e:0b:e9:
72:c8:63:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:37:32 2026 by rpki-client