Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
File: 861SH4OIdIPIybDG895f1e1Whck.mft (raw, json)
Hash identifier: CMV36jlJhMw0GPYrzaZaRPUwCTKlHNOcZxmTodEfQ48=
Subject key identifier: FE:87:91:E6:98:AF:51:84:34:6A:63:30:FA:0A:3F:96:70:A1:6A:B4
Authority key identifier: F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9
Certificate issuer: /CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9
Certificate serial: 019EBE7FA46A3ADA6D9529371D31A9884838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
Manifest number: 0EE3
Signing time: Sat 13 Jun 2026 01:01:36 +0000
Manifest this update: Sat 13 Jun 2026 01:01:36 +0000
Manifest next update: Sun 14 Jun 2026 01:01:36 +0000
Files and hashes: 1: 861SH4OIdIPIybDG895f1e1Whck.crl (hash: AADlpgPCBlB0bWFjgNoH+aPadL0ieZcLDS2AMDwPxSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:a4:6a:3a:da:6d:95:29:37:1d:31:a9:88:48:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9
Validity
Not Before: Jun 13 01:01:36 2026 GMT
Not After : Jun 14 01:01:36 2026 GMT
Subject: CN=fe8791e698af5184346a6330fa0a3f9670a16ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:06:9c:f5:7d:92:2d:33:4b:68:c7:82:da:
a0:dd:92:e0:84:b7:f9:c6:6e:10:52:1b:ec:38:f8:
f4:ae:4a:76:c3:be:ad:a5:52:15:6b:dd:93:f3:de:
7f:da:e2:de:af:67:45:b4:c3:37:5a:c6:41:75:5c:
1e:8f:85:f0:f9:75:04:0d:5f:6d:74:a6:62:9f:0f:
e2:06:c6:87:09:58:53:8a:8c:2c:52:33:42:08:ea:
48:a7:48:28:09:8e:89:21:b1:b7:a5:5a:a5:04:d8:
3f:16:01:b9:d1:a4:4d:5b:57:a6:16:e2:9e:53:2b:
d1:a3:b3:54:32:e3:80:e3:fa:be:7b:77:c6:75:bd:
fc:5a:2c:98:c2:43:ae:3c:da:19:51:ba:9f:d6:d7:
dd:1c:de:14:e8:66:37:98:c8:fd:9b:c9:62:a9:85:
f0:03:14:09:02:6e:22:9d:0d:90:21:d7:cf:bf:78:
58:8e:3b:7b:68:bb:af:b4:c2:5e:d7:62:72:6a:e1:
dd:5f:e7:3a:8f:e6:7d:38:d6:83:4d:7d:97:d6:21:
9b:b2:65:0b:cf:ab:82:45:71:a5:64:3b:0a:b4:69:
35:15:60:02:a0:84:9e:81:fe:cd:f4:de:50:20:3d:
4f:01:b4:e2:56:43:70:a7:35:e0:cc:bd:15:c7:c4:
56:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:87:91:E6:98:AF:51:84:34:6A:63:30:FA:0A:3F:96:70:A1:6A:B4
X509v3 Authority Key Identifier:
keyid:F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a0:bf:48:77:e9:b2:c9:11:43:b8:dd:f7:bb:13:fa:f9:0e:
3b:80:18:60:c1:44:ee:9f:6f:62:ff:71:28:ff:74:c2:60:12:
39:10:f4:bd:ae:0d:62:97:9d:ac:c6:c3:64:20:71:fa:a1:98:
b0:f5:09:6e:63:ba:38:2b:e0:ed:e8:d7:e4:0e:c3:99:77:b7:
52:e5:b7:18:64:a1:3f:94:0c:b5:3f:39:90:a7:31:89:b9:cd:
6d:e3:3d:2e:ea:69:f5:9d:29:ce:61:1c:83:c2:d0:04:4d:69:
fe:e6:5e:13:61:9c:e5:0b:7b:10:fa:29:de:1d:ce:be:0f:ed:
5a:3b:8e:ac:00:e8:21:8e:2e:ce:7d:83:50:59:df:9f:cf:33:
71:eb:88:f3:6c:cb:a1:20:15:76:45:be:bf:e2:f6:8a:9e:07:
7f:cb:f7:84:f9:79:2e:fa:54:6b:a2:99:81:b2:03:36:ae:cd:
b7:bc:8e:93:77:4b:c5:6d:93:fb:90:ad:fb:b9:0d:b2:c9:41:
40:79:49:eb:4b:1f:4c:4f:0c:e9:89:72:15:de:69:f6:9e:16:
21:cd:9a:36:15:1b:c2:f8:22:d3:91:32:b2:ae:c5:5b:ef:9b:
27:aa:f2:95:50:8a:93:07:a0:fd:9d:7a:76:77:51:25:7f:0d:
31:e9:3f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:28:51 2026 by rpki-client