Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
File: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft (raw, json)
Hash identifier: /j4b7Mj/pYo+3xbmK2ntEnUJoOwldXMIvFrhWVGVoxU=
Subject key identifier: 38:84:B1:D0:FD:A6:23:AA:5C:33:E9:18:2A:64:30:F9:61:C1:17:75
Authority key identifier: E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
Certificate issuer: /CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Certificate serial: 01A0CDB5694027034C8A288DFED12949CF32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
Manifest number: 1A66
Signing time: Wed 23 Sep 2026 10:00:13 +0000
Manifest this update: Wed 23 Sep 2026 10:00:13 +0000
Manifest next update: Thu 24 Sep 2026 10:00:13 +0000
Files and hashes: 1: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl (hash: aSMhoqYvXLIE/yiQzlLKBCwBwRbzxzx2gJ/pOkRbJfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:69:40:27:03:4c:8a:28:8d:fe:d1:29:49:cf:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Validity
Not Before: Sep 23 10:00:13 2026 GMT
Not After : Sep 24 10:00:13 2026 GMT
Subject: CN=3884b1d0fda623aa5c33e9182a6430f961c11775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:36:5c:91:5b:ac:36:49:58:e0:b4:cb:3c:
37:58:68:80:27:d8:68:68:9c:17:38:61:d7:b4:4e:
70:c0:e9:83:5d:4e:05:f9:27:ff:a5:71:a5:a0:8d:
85:35:b9:fb:30:f0:db:98:bb:b0:54:5e:14:75:02:
66:5c:36:1b:5d:f3:6a:fb:e8:9e:54:51:38:35:2f:
18:89:3b:a0:c0:de:4b:b3:a6:2d:9e:d3:89:7e:14:
14:5f:18:b2:a8:10:98:ab:b9:49:0c:81:14:9a:be:
d3:85:3f:b6:bb:ca:0c:d0:e1:1d:4e:88:36:6f:fe:
2b:b9:52:e1:d0:d3:47:c5:07:8b:82:94:4a:fb:8a:
c7:15:cb:d1:d0:0b:1f:d9:53:08:87:ff:44:ad:90:
38:1b:d2:75:bf:24:b7:e6:92:71:f4:50:55:99:a4:
99:55:2a:32:15:ea:10:b1:6b:2c:35:2a:69:e1:55:
75:63:45:45:d8:cd:e2:2b:fd:35:4b:04:bd:d2:3e:
4a:39:d6:4f:02:1f:61:97:61:7a:2f:35:95:b9:30:
96:18:48:99:75:05:77:4f:72:c3:a8:71:71:46:61:
e3:51:b3:3c:f5:4f:84:3c:bd:d0:4d:44:a7:30:27:
91:74:73:8f:0a:e4:f2:0f:db:bb:04:9e:ec:9a:b3:
a3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:84:B1:D0:FD:A6:23:AA:5C:33:E9:18:2A:64:30:F9:61:C1:17:75
X509v3 Authority Key Identifier:
keyid:E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ca:fd:04:6a:58:bd:c8:47:dc:8a:74:61:8f:83:4d:9c:3d:
fc:12:32:d5:ed:6c:37:5a:8f:bb:95:9c:e0:f4:87:e7:f3:05:
8f:d9:6e:53:89:08:7f:b9:55:6b:20:d6:1e:a2:3d:38:91:89:
4d:2b:c3:a7:69:90:ca:29:10:ad:a7:84:03:bf:25:d6:bd:1d:
a2:a7:5b:7d:42:be:52:84:a1:6d:81:f6:cd:e6:0b:ca:0e:65:
c8:3b:ef:34:fa:4f:83:74:f3:6c:5b:c7:91:75:1c:32:e1:70:
c7:c6:73:82:84:7d:94:f5:e3:5f:22:77:22:64:a0:80:4a:2d:
0d:6f:a9:7e:c2:fc:9e:07:24:80:85:6c:ed:cb:f9:ed:0d:d7:
7c:5e:45:4a:46:d4:14:e0:da:bc:30:d5:50:34:1d:bb:07:de:
50:72:da:66:cc:b6:33:7f:eb:03:af:0a:8d:e6:9a:a9:79:47:
82:28:b0:d4:20:c5:f5:20:54:8e:03:44:81:66:68:e3:4f:91:
fa:9d:a1:ef:8d:c7:51:19:87:1a:3b:7d:f7:34:3d:9f:16:b4:
80:61:77:67:49:13:65:b5:f9:22:ac:c7:32:6a:92:17:43:b9:
48:ba:da:78:6f:e4:6f:52:0a:64:35:d2:b5:11:5e:af:f4:71:
b4:93:95:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:59:52 2026 by rpki-client