Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/067e7e-9337-4275-938c-3423cacefc93/1/4BiCRMvb9IR_QR3v-kCcodsYQbk.mft
File: 4BiCRMvb9IR_QR3v-kCcodsYQbk.mft (raw, json)
Hash identifier: tn8as8lTfcXTtWLpOsOhvCIMke1GxyQTDESasgDWoTM=
Subject key identifier: DC:26:57:72:FE:44:3D:A8:1E:54:9D:21:D0:1B:83:05:73:27:22:7D
Authority key identifier: E0:18:82:44:CB:DB:F4:84:7F:41:1D:EF:FA:40:9C:A1:DB:18:41:B9
Certificate issuer: /CN=e0188244cbdbf4847f411deffa409ca1db1841b9
Certificate serial: 01A1336B983AF17F42C0434B7B0BFEB5B865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BiCRMvb9IR_QR3v-kCcodsYQbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/067e7e-9337-4275-938c-3423cacefc93/1/4BiCRMvb9IR_QR3v-kCcodsYQbk.mft
Manifest number: 7B
Signing time: Tue 13 Oct 2026 04:00:51 +0000
Manifest this update: Tue 13 Oct 2026 04:00:51 +0000
Manifest next update: Wed 14 Oct 2026 04:00:51 +0000
Files and hashes: 1: 4BiCRMvb9IR_QR3v-kCcodsYQbk.crl (hash: na1ESHmPRA1/wNKDc9S1rvf4uDs/O0qx3JR1vPHxo8Q=)
2: AO8goRbzV7PBCtbzwtt1-y0Y_cE.asa (hash: dom8RHI6jzPo201yvdJYcI+G83hClL+fbPQN0nSSOgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/067e7e-9337-4275-938c-3423cacefc93/1/4BiCRMvb9IR_QR3v-kCcodsYQbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/067e7e-9337-4275-938c-3423cacefc93/1/4BiCRMvb9IR_QR3v-kCcodsYQbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BiCRMvb9IR_QR3v-kCcodsYQbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:6b:98:3a:f1:7f:42:c0:43:4b:7b:0b:fe:b5:b8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0188244cbdbf4847f411deffa409ca1db1841b9
Validity
Not Before: Oct 13 04:00:51 2026 GMT
Not After : Oct 14 04:00:51 2026 GMT
Subject: CN=dc265772fe443da81e549d21d01b83057327227d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2f:1a:b9:55:8c:c1:50:be:8d:a6:50:3e:ca:
fa:72:6a:bf:d1:29:9d:f2:fe:81:a8:18:a0:75:05:
77:4e:c6:14:09:e8:d6:37:ee:09:ba:ac:f5:42:a9:
63:be:ed:46:80:f8:73:79:ba:fe:07:c9:a6:f4:36:
6f:8c:bf:56:63:09:31:48:2c:4b:cf:3f:ff:b9:a2:
82:09:00:ca:01:f1:e7:cd:23:72:c4:ff:36:e5:fc:
89:1f:d5:9c:f0:bd:9d:68:57:82:74:3d:95:e4:4a:
2f:76:b3:6e:52:23:19:8a:35:a9:86:ea:8c:e8:a7:
c2:5b:45:41:42:ad:38:f9:8e:a5:59:97:eb:78:5a:
5f:47:79:83:ea:d7:ab:e8:cd:d4:8c:e7:5f:ba:04:
75:25:54:77:a1:81:52:51:32:a7:1b:29:af:71:38:
66:c3:c8:0e:70:ee:09:65:0a:a6:94:24:bf:25:e5:
93:54:d8:b8:36:85:38:5c:d0:26:e9:3f:37:28:32:
3a:d7:15:da:6e:2d:e9:df:0f:e0:76:b1:5a:cd:e5:
d3:58:ff:4c:fa:d3:75:c1:f4:5b:d1:a6:af:d7:5c:
a4:2f:05:cb:f7:e7:3a:09:90:8a:ab:ba:08:84:82:
38:d8:60:96:ae:1d:f4:fe:7b:a1:53:53:f5:7b:2b:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:26:57:72:FE:44:3D:A8:1E:54:9D:21:D0:1B:83:05:73:27:22:7D
X509v3 Authority Key Identifier:
keyid:E0:18:82:44:CB:DB:F4:84:7F:41:1D:EF:FA:40:9C:A1:DB:18:41:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BiCRMvb9IR_QR3v-kCcodsYQbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/067e7e-9337-4275-938c-3423cacefc93/1/4BiCRMvb9IR_QR3v-kCcodsYQbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/067e7e-9337-4275-938c-3423cacefc93/1/4BiCRMvb9IR_QR3v-kCcodsYQbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:cb:12:aa:ca:a0:dd:f5:54:c5:ab:ba:0a:6c:30:9d:a6:d5:
bd:2a:5f:3d:5a:66:f6:53:0e:c1:a7:de:13:92:c4:cf:c9:bf:
aa:3d:39:61:67:81:f2:a8:d4:ed:76:89:10:6c:b8:af:98:94:
c7:97:b1:6e:c8:66:5a:2a:6e:07:7b:4c:0e:91:98:2e:e5:08:
2f:24:43:0e:3f:eb:67:b8:93:5c:71:25:3d:67:7f:83:54:91:
72:f9:bc:61:fa:fb:f2:18:48:ca:b5:6c:6d:a0:42:6d:84:d2:
9a:78:87:b3:e1:f1:90:9a:37:1d:ee:a5:18:88:fd:5b:b8:53:
f1:2f:97:6c:1a:9f:3b:9c:1a:5b:c4:bc:71:27:ab:30:85:ff:
e6:29:9e:9a:52:41:0f:da:f3:eb:17:87:79:e4:ac:7f:c6:fc:
09:d8:48:36:09:69:a1:02:b1:3a:10:f3:fc:59:40:95:e3:51:
74:a0:9d:e2:a9:f6:aa:80:90:f2:79:5f:54:7f:77:69:d1:f9:
aa:06:9f:bd:11:3d:45:1b:a6:f9:e9:23:30:2e:48:0c:28:28:
38:03:46:54:ac:2e:30:8d:48:f0:6b:07:9a:f9:ff:9a:18:3a:
a1:fc:fe:b1:e2:37:e9:45:99:33:b1:4c:e4:22:c8:c3:22:1e:
73:86:93:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:45:33 2026 by rpki-client