Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
File: 4T3UuB8fx53U2mQo-cKgJzRX_wY.mft (raw, json)
Hash identifier: b64I9rpML/8/AIXjUnCTNjOxBm1URaCmY6jo+PPhvzg=
Subject key identifier: A5:10:90:04:FB:2A:E0:C7:D5:AE:59:4B:D3:CB:E7:0E:21:7E:56:C4
Authority key identifier: E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06
Certificate issuer: /CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06
Certificate serial: 019D9A3E67B167640EC82BDDBF5B684C9746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
Manifest number: 073B
Signing time: Fri 17 Apr 2026 07:01:14 +0000
Manifest this update: Fri 17 Apr 2026 07:01:14 +0000
Manifest next update: Sat 18 Apr 2026 07:01:14 +0000
Files and hashes: 1: 4T3UuB8fx53U2mQo-cKgJzRX_wY.crl (hash: C8iVasIzgakgZIdViUm6qoyVSp4OOnXwJAerx6zO0RY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:67:b1:67:64:0e:c8:2b:dd:bf:5b:68:4c:97:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06
Validity
Not Before: Apr 17 07:01:14 2026 GMT
Not After : Apr 18 07:01:14 2026 GMT
Subject: CN=a5109004fb2ae0c7d5ae594bd3cbe70e217e56c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:08:4a:cc:fc:8b:e6:6e:3e:31:4e:10:91:
65:e7:9e:3a:e6:4c:75:04:a8:2a:81:ad:ea:f5:aa:
81:85:59:a7:97:69:5b:34:6c:8e:06:55:06:79:f1:
74:9c:ed:3a:1f:78:73:6f:fd:37:7f:93:72:db:29:
8d:b5:35:78:b6:7d:e0:56:4b:64:c8:50:17:aa:b2:
f0:1f:d2:4f:47:de:67:99:b7:98:4c:36:0e:41:47:
7d:e6:50:5d:6e:4b:ff:99:9e:53:a3:62:a6:15:94:
94:70:a5:ea:05:6f:f2:81:71:96:5a:2b:05:a1:f2:
6c:13:49:b1:be:1b:05:3d:b8:6d:00:35:1b:96:db:
4e:8c:48:c5:82:2c:43:6d:2e:b7:37:92:1d:a4:77:
b7:2b:4c:6f:62:1b:68:99:d7:90:3b:bd:97:a9:1a:
65:c1:58:6d:98:82:da:c2:b2:97:39:ba:c6:ab:80:
0c:5f:b0:21:b4:39:32:65:9f:5a:73:cd:e0:3c:fb:
43:de:c1:27:da:d1:92:18:da:53:53:07:48:94:db:
43:bb:ea:a8:8b:67:f5:1c:0e:e8:59:53:ea:73:b9:
68:9a:d3:4d:26:74:12:cd:26:01:07:63:39:1d:77:
26:db:a2:09:50:5d:99:96:78:c5:72:d9:8f:77:b3:
fb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:10:90:04:FB:2A:E0:C7:D5:AE:59:4B:D3:CB:E7:0E:21:7E:56:C4
X509v3 Authority Key Identifier:
keyid:E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:79:fc:28:16:62:c5:aa:81:75:b3:d1:33:dc:d0:48:c3:dd:
c1:9a:ce:4d:e7:44:18:3f:1b:84:b9:14:06:60:af:d7:36:5a:
0b:39:2e:6a:af:40:98:e2:5b:f6:b3:2a:03:55:67:6b:62:12:
34:ab:b5:75:82:85:91:e1:f5:e0:25:eb:d5:db:24:2e:5b:3e:
b2:a5:88:fa:34:e9:28:99:bd:46:f5:d9:f6:f9:05:53:21:89:
ee:90:af:77:f0:31:3e:39:f1:41:0f:af:25:66:3a:80:ca:ed:
22:38:4e:d3:bd:fc:5c:c7:41:65:5d:d7:72:ca:3d:24:a9:72:
db:f4:99:59:f7:b0:99:65:86:d0:18:0c:24:fb:d1:d6:74:21:
ef:10:c7:e6:00:d3:89:de:23:00:d7:1b:54:b9:22:6d:06:4b:
55:04:db:3c:a0:08:64:bd:13:d8:44:60:84:76:59:b8:7e:c1:
39:ff:c1:17:7b:5a:e7:48:dc:cb:d4:3d:44:de:35:ad:f2:6d:
d2:37:6d:c4:87:8f:7f:42:36:5d:65:52:89:83:bb:13:1b:6a:
0f:01:b8:ec:a0:e7:8e:ba:51:62:4f:72:37:4f:c6:a8:fd:cd:
4f:1d:ff:8f:bd:d2:66:84:2d:c7:3d:89:60:ff:3d:ae:b8:5f:
1b:9e:33:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:03:06 2026 by rpki-client