Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
File: a4T-xJBquJAgoRa2hEbM6vbMUA8.mft (raw, json)
Hash identifier: TuR0JYuqc+gt6oyy245JJzBHdXs2MQrU3LtfuIjB2W4=
Subject key identifier: 60:54:D5:76:30:EE:39:9C:B4:A4:3F:C3:7B:B5:5E:4F:20:5E:9C:7E
Authority key identifier: 6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F
Certificate issuer: /CN=6b84fec4906ab89020a116b68446cceaf6cc500f
Certificate serial: 019CABA20D00B7458D04A23A7E329D581246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
Manifest number: 0DCE
Signing time: Sun 01 Mar 2026 23:00:49 +0000
Manifest this update: Sun 01 Mar 2026 23:00:49 +0000
Manifest next update: Mon 02 Mar 2026 23:00:49 +0000
Files and hashes: 1: a4T-xJBquJAgoRa2hEbM6vbMUA8.crl (hash: v4Wcpzc8aeiCcI/r89r4Db54361ij8jvRolxiizeAo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:0d:00:b7:45:8d:04:a2:3a:7e:32:9d:58:12:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b84fec4906ab89020a116b68446cceaf6cc500f
Validity
Not Before: Mar 1 23:00:49 2026 GMT
Not After : Mar 2 23:00:49 2026 GMT
Subject: CN=6054d57630ee399cb4a43fc37bb55e4f205e9c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:fa:e4:34:dd:49:97:9d:5b:53:3d:48:bb:
4d:dc:3d:f7:6a:10:36:a1:2c:ec:97:c4:65:8f:ea:
48:e5:30:bf:93:fb:c8:c3:40:05:2d:f5:8f:7e:8d:
6e:1c:28:9e:46:f4:65:b1:57:03:c2:63:17:3d:7e:
10:6a:fd:5e:7c:f4:4e:f3:1c:8b:93:28:75:99:eb:
3f:08:14:e9:64:26:6e:a5:8a:e0:11:b0:cb:88:8a:
7b:cb:db:37:71:1b:43:6b:c8:8f:4e:54:38:58:2a:
86:a0:db:1f:a3:9a:07:bd:9f:5c:e0:45:fa:78:ce:
1d:e7:04:27:9b:ac:9f:e5:bf:f5:4c:f9:0f:f5:87:
12:52:ec:d6:1f:7c:ef:10:0a:c9:f4:a2:56:6b:e9:
60:91:57:29:d4:f3:84:b4:86:04:57:47:66:59:de:
60:d2:da:28:d2:4c:cf:19:4d:8b:c7:3f:fc:bb:61:
ef:f4:87:64:8e:a5:5a:d6:9e:b1:7b:18:51:99:85:
aa:ff:b4:62:83:2a:7f:80:3a:64:4d:29:a5:1f:5d:
8e:d6:99:74:cb:13:79:9e:a3:aa:92:cd:70:7d:32:
2a:6b:9e:b2:b1:f1:ea:33:c4:dd:22:c2:ad:dd:6e:
50:de:d0:bc:18:6b:5f:83:36:00:e1:f8:91:a8:0f:
e0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:54:D5:76:30:EE:39:9C:B4:A4:3F:C3:7B:B5:5E:4F:20:5E:9C:7E
X509v3 Authority Key Identifier:
keyid:6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5e:6f:d9:6a:65:73:54:9c:f7:91:94:3a:0a:4a:05:fc:6d:
08:c5:2f:f9:80:ca:6f:ee:eb:f4:63:0a:9e:ed:b0:1e:c1:96:
2c:f4:f7:8c:ff:84:04:76:db:14:bc:8b:60:a7:fc:a1:65:3c:
cf:28:b1:f2:64:61:a2:98:33:22:f2:d0:57:78:12:0b:5a:ed:
85:f2:3a:53:42:2b:06:81:6a:78:c0:1b:91:cb:ce:51:05:3e:
b6:3c:16:a6:7c:ef:2f:76:67:e3:1b:9c:64:a6:63:3b:5a:f7:
02:51:27:51:ab:2f:d3:3e:7d:4d:cd:7c:01:50:bb:a2:ec:f1:
09:83:71:1b:a1:65:c9:52:e5:d2:21:58:05:be:6f:68:9b:14:
8e:4b:c4:c2:d0:5f:df:89:94:57:24:78:7f:8f:b1:08:27:fd:
32:a5:98:b5:7c:8e:8a:66:e8:d3:91:ac:e3:7d:11:2b:e1:f2:
2c:58:2b:e8:8b:b7:16:f1:4e:9d:4c:14:d2:bc:ae:a5:58:06:
0a:b9:ea:00:31:07:27:a9:52:7b:fa:df:0d:53:90:bb:b3:12:
13:15:2f:04:e7:53:a6:52:58:24:5d:47:ec:ef:c7:9e:c2:51:
e4:34:0a:7c:cc:a3:6b:cb:01:67:93:4c:aa:bf:4a:96:13:77:
ab:58:9f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:14 2026 by rpki-client