Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
File: 4T3UuB8fx53U2mQo-cKgJzRX_wY.mft (raw, json)
Hash identifier: NMPxArTVM2ne2pDqm/4DhUgbv/FwX921Dl13vWHd0jI=
Subject key identifier: DD:7C:33:94:20:70:AF:50:07:3A:29:0D:9D:CA:10:CB:AF:4D:7F:20
Authority key identifier: E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06
Certificate issuer: /CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06
Certificate serial: 01A0E81C9FAAAE7D9E4B316A98AAD88C1216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
Manifest number: 08F1
Signing time: Mon 28 Sep 2026 13:03:05 +0000
Manifest this update: Mon 28 Sep 2026 13:03:05 +0000
Manifest next update: Tue 29 Sep 2026 13:03:05 +0000
Files and hashes: 1: 4T3UuB8fx53U2mQo-cKgJzRX_wY.crl (hash: qIPbrpYLqaNONVYHrJpprtwGhiM0IvZ8LKSTOaijJNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:9f:aa:ae:7d:9e:4b:31:6a:98:aa:d8:8c:12:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06
Validity
Not Before: Sep 28 13:03:05 2026 GMT
Not After : Sep 29 13:03:05 2026 GMT
Subject: CN=dd7c33942070af50073a290d9dca10cbaf4d7f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:b6:f7:b9:78:84:8b:0b:ce:81:79:bc:5f:
e6:8d:a5:b6:aa:34:63:d2:cf:4d:33:d4:74:ad:d8:
b0:33:bd:b8:ea:c2:70:9d:93:b4:52:0d:58:57:7f:
d2:05:43:96:61:da:08:79:cb:12:eb:b3:86:90:22:
bf:ad:08:01:d5:66:9a:df:b2:33:c1:f4:11:b3:fe:
23:a3:dc:11:e1:2e:de:ee:8b:27:7a:5e:58:2c:c7:
a8:a8:53:1d:e7:fe:bc:db:8c:1e:a2:a3:2d:16:11:
d1:86:5c:a8:45:a5:d1:d5:e8:c3:6d:1f:73:7b:50:
b3:11:6a:02:41:5f:35:f4:d0:dc:fa:a3:6a:bc:c0:
0e:5e:4d:40:2f:c7:12:d3:73:7f:ae:39:44:0e:06:
a3:fb:a0:f2:ed:16:3a:89:96:57:0b:36:60:67:c7:
36:b7:39:43:ec:7d:61:ac:20:ac:65:94:9c:63:9b:
6d:75:48:0a:f3:b9:f8:22:45:20:01:96:97:8d:03:
dd:77:e3:24:2f:5e:6b:78:25:8a:5c:43:55:4d:06:
5a:4d:ac:79:fa:df:98:53:29:23:c6:a2:00:e8:dc:
c6:53:f9:b9:27:22:5a:69:ae:1c:cb:aa:e8:37:a6:
91:17:e3:89:4b:42:7d:fd:06:f2:cb:03:cc:62:25:
21:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7C:33:94:20:70:AF:50:07:3A:29:0D:9D:CA:10:CB:AF:4D:7F:20
X509v3 Authority Key Identifier:
keyid:E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3f:a7:28:42:ae:03:9a:64:64:8e:f8:82:0a:0e:8c:60:c5:
5f:21:97:fe:e3:b6:ac:9e:5f:ab:b7:e0:f4:d8:7c:8e:df:9a:
4a:a5:69:cd:dd:01:d0:c4:0a:59:ba:78:f6:75:89:3b:0d:84:
6c:db:03:32:9b:a2:1c:8b:8d:32:79:11:9f:9e:7a:35:29:39:
e1:09:b1:a1:19:68:30:c8:70:d2:a9:97:9b:a9:4f:7f:ab:b2:
43:1b:f0:b2:19:2d:e9:ae:15:6f:bd:f6:7e:7c:07:f3:24:a1:
58:c1:55:7f:22:8c:2a:46:1b:e8:f3:8d:ab:3a:b1:af:e2:e1:
cf:22:c2:47:67:e3:c6:be:a0:d1:09:59:3d:76:d6:f1:6a:48:
af:91:1b:62:30:c6:9a:d8:a6:5a:1b:c2:15:0f:26:51:15:35:
5f:d6:08:7e:ab:ff:b4:07:ea:72:a9:f1:be:12:01:83:9d:74:
6a:c6:73:c0:73:26:b6:e0:b4:3b:2e:3f:f1:d2:f9:62:24:b4:
c6:82:36:3f:31:b0:20:de:99:da:79:d5:50:67:63:e5:e2:1f:
79:3c:76:f2:56:93:34:30:3c:73:cd:12:90:ce:22:65:f0:c1:
6e:30:30:55:61:13:14:61:39:c0:3e:f8:b3:d2:86:b6:3d:2e:
c6:44:65:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:13:46 2026 by rpki-client