Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
File: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft (raw, json)
Hash identifier: BsMdh7/nazkukRMTi1UeK0TSjjsjUQ6xJMcgYShYg/0=
Subject key identifier: E1:EC:32:BC:36:75:29:61:20:55:AE:7B:47:29:9D:DE:65:FE:35:E3
Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Certificate issuer: /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Certificate serial: 01A0BDD53AD5991746722F6E5B026B3014F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
Manifest number: 0DDA
Signing time: Sun 20 Sep 2026 08:01:03 +0000
Manifest this update: Sun 20 Sep 2026 08:01:03 +0000
Manifest next update: Mon 21 Sep 2026 08:01:03 +0000
Files and hashes: 1: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl (hash: zJlRMcTfMFN0oWQpJcEzzzEVkLTUeAXm/HtdNKperkM=)
2: Lb4QYGzxLdlZHywuLvkaZr8MbV8.asa (hash: djJmDLE7dgkUswvUuZUlXxmQuuCob6by6G/MEdD7z7s=)
3: s-PKc_tu2wV4rS8DFKDtN3pEWOo.roa (hash: RIeIk6mysjr3waBR5H6D0lD1jhhyLuowL03Fip2BNmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d5:3a:d5:99:17:46:72:2f:6e:5b:02:6b:30:14:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Validity
Not Before: Sep 20 08:01:03 2026 GMT
Not After : Sep 21 08:01:03 2026 GMT
Subject: CN=e1ec32bc367529612055ae7b47299dde65fe35e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:29:56:92:e7:fb:04:2b:14:fc:cb:44:a4:
c6:1f:ff:57:cf:55:51:5a:b5:91:4f:07:26:29:ab:
68:4a:9d:3a:90:9b:e3:5c:aa:85:a3:0d:ff:e4:53:
39:db:c7:84:3f:78:1c:97:02:1b:1b:15:6c:85:86:
16:86:9f:23:dd:44:6a:fd:09:06:f2:66:71:d9:bf:
90:f8:63:d0:99:d3:17:ca:2c:a8:fa:50:8c:df:d9:
67:ad:18:37:1d:d1:5e:ec:35:57:a6:d0:40:b8:33:
c0:69:16:13:92:ef:58:f8:b3:9e:1a:b9:88:44:5a:
b4:11:4d:cc:0e:e1:3b:3f:f5:60:e1:f4:24:70:bc:
cf:d7:bd:6f:7f:64:55:7f:01:86:30:fa:b5:5c:7d:
d1:39:16:9f:9b:2d:60:17:d1:46:89:b4:10:26:06:
72:b0:f9:ac:02:7a:37:26:ae:0c:ee:53:16:5b:30:
e7:46:c1:44:5a:e9:3d:43:9d:1f:39:3f:a4:1d:d8:
d8:8e:e6:8e:ac:34:8b:c9:9d:e2:da:a7:46:0e:a3:
36:ce:18:6f:4d:d4:02:7d:d8:99:51:c1:ee:46:fa:
50:f9:4f:ed:15:05:e1:63:cd:9d:e9:ed:c8:d7:d2:
cd:d4:89:cc:b5:57:2d:1b:77:3d:74:c1:9d:25:f8:
92:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EC:32:BC:36:75:29:61:20:55:AE:7B:47:29:9D:DE:65:FE:35:E3
X509v3 Authority Key Identifier:
keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:20:02:ef:0f:11:b1:45:c8:b7:da:43:1f:07:ce:a6:e3:94:
2b:a7:53:9a:eb:72:d0:31:7b:b4:aa:c0:7a:99:bf:12:7b:9f:
9d:60:6c:1c:fb:4a:f3:f9:2e:0b:fd:ef:00:d7:27:dd:f1:a2:
7e:0a:53:58:f6:fc:80:04:3a:fd:eb:ac:8c:81:bd:32:cb:64:
6d:7d:c1:70:da:aa:4d:9b:4f:d0:ff:fd:94:81:20:8f:e5:5b:
bb:04:4f:27:6c:25:3e:97:e5:88:ae:61:a9:76:5c:4f:3f:0e:
8f:d2:2d:6d:91:04:14:cc:9b:5a:14:b4:d0:16:5d:38:c0:b5:
6d:2d:92:ed:9f:d0:8e:28:1c:8c:c0:db:26:bc:c5:1a:26:d5:
f4:b1:aa:63:cc:4e:a1:a2:87:3d:06:df:b6:4e:6c:de:15:7f:
75:64:77:d6:5b:26:8f:18:84:c2:a8:27:e3:60:c7:a2:2f:95:
d9:e4:32:c9:5f:18:b1:0a:29:94:ab:fd:e0:c1:9c:5a:7c:36:
37:c1:5b:b7:ba:25:b1:53:8e:55:10:e2:af:63:c2:70:5d:d9:
c8:a6:e5:53:e2:3a:be:f9:de:dd:12:d6:e7:ac:ac:70:04:15:
73:62:14:b7:c0:5a:56:b2:82:91:7c:60:d3:f0:ca:0b:41:cb:
1e:5f:9f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:44:05 2026 by rpki-client