Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
File: 861SH4OIdIPIybDG895f1e1Whck.mft (raw, json)
Hash identifier: jqWw2Jg8l4+ONUkNH/8Vr5qWghlrg9bDr74bj4XcKNc=
Subject key identifier: C8:6E:85:B4:DA:ED:93:20:4E:7F:35:CB:4D:BB:FD:8F:31:EE:CF:3B
Authority key identifier: F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9
Certificate issuer: /CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9
Certificate serial: 01A0C40DC9FCCB824BB69A45E7FC4097A047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
Manifest number: 0FEF
Signing time: Mon 21 Sep 2026 13:00:32 +0000
Manifest this update: Mon 21 Sep 2026 13:00:32 +0000
Manifest next update: Tue 22 Sep 2026 13:00:32 +0000
Files and hashes: 1: 861SH4OIdIPIybDG895f1e1Whck.crl (hash: 7j03r+g6DXxTXozOCdHHwwY8bn2mifon7vkcPMvOLRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:c9:fc:cb:82:4b:b6:9a:45:e7:fc:40:97:a0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9
Validity
Not Before: Sep 21 13:00:32 2026 GMT
Not After : Sep 22 13:00:32 2026 GMT
Subject: CN=c86e85b4daed93204e7f35cb4dbbfd8f31eecf3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:d3:54:b9:3c:9f:8d:fc:fe:5f:ed:3c:8d:
2b:a1:43:73:d4:4d:94:f5:8c:7d:7a:77:3b:54:1b:
d9:36:03:de:69:6c:84:e3:b4:46:35:57:28:be:b0:
82:8c:ef:ab:81:32:3b:37:ec:bb:03:f2:60:73:03:
6e:1d:d7:ac:2a:b6:ad:dd:4e:f2:5d:e0:09:af:19:
f7:74:7b:a1:dc:64:9d:7c:d9:77:27:3c:40:77:f6:
cc:da:f6:ee:e2:34:e7:02:2c:c4:89:1d:52:c6:16:
c4:c9:ac:9e:ae:a9:c4:bb:f5:c0:12:46:f2:f5:e2:
ec:9f:49:79:fd:c7:60:7b:ea:05:4b:91:95:cd:43:
88:84:cb:f1:16:35:56:5b:15:c8:94:53:68:5d:cf:
1e:e4:49:f0:3c:84:87:54:5f:6c:72:eb:e3:bc:7c:
03:7e:5e:93:94:0b:ab:d7:3c:ba:0e:15:f3:62:af:
62:2f:60:d9:8c:f5:23:18:4c:6a:ec:e6:f1:5d:03:
b2:48:7e:39:67:9c:12:f1:1c:d3:49:f3:b0:86:fc:
2e:bc:59:59:de:34:aa:d6:35:c3:94:86:db:7b:54:
92:d4:36:7b:4b:54:c6:9b:3b:71:e9:5c:0f:94:74:
4d:e9:62:39:f4:78:55:ca:c0:72:f3:de:9f:10:70:
bf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6E:85:B4:DA:ED:93:20:4E:7F:35:CB:4D:BB:FD:8F:31:EE:CF:3B
X509v3 Authority Key Identifier:
keyid:F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:35:96:79:e6:0c:2b:a6:d2:b5:3a:f0:95:9c:76:3e:10:be:
38:30:b3:d8:18:3f:5a:c5:cd:e9:ab:6d:94:e8:e3:2e:f0:ff:
1f:88:95:0f:de:9d:3c:f8:e5:80:a3:ff:b4:19:43:07:66:aa:
24:a8:e7:13:34:b8:f5:87:d6:23:82:a8:af:0e:83:41:cf:b2:
f7:f9:60:d8:fd:01:72:68:1d:3b:f2:fe:09:41:d0:13:90:f4:
4d:63:31:1f:98:97:79:01:4b:a8:3c:79:69:83:48:09:b9:25:
7c:0a:dc:34:39:a2:2e:0b:67:38:31:51:09:17:eb:40:1d:0c:
a5:46:8e:93:c8:d7:d5:6a:43:25:7e:32:34:65:ac:82:cc:b3:
0c:90:bd:16:c1:c4:a4:0e:99:4d:f7:54:69:f1:2b:c7:bd:db:
04:67:e1:d3:7f:16:1a:72:35:e3:cd:03:92:da:0e:68:2f:da:
f2:be:fe:23:18:1c:2c:7c:e8:36:8b:57:76:02:0b:28:27:76:
7b:11:85:e1:7b:1e:f6:78:bc:62:e4:cc:20:1b:fb:0e:a7:23:
51:20:3c:ef:01:01:88:1e:f4:47:18:25:18:3a:f4:de:25:43:
28:0c:b9:85:b3:3e:81:79:69:f1:26:b9:d1:b3:3a:f4:b3:38:
f8:b9:d6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:29:43 2026 by rpki-client