Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
File: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft (raw, json)
Hash identifier: 6j95W1Kfd2xV7Tix6vy/745/42Kk6sIFM4YinC+Flro=
Subject key identifier: DD:78:80:3D:75:2C:B5:7D:5A:51:76:B6:51:CF:D2:E5:CC:83:F1:86
Authority key identifier: E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
Certificate issuer: /CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Certificate serial: 019D9D3EE0B99E477B442AACA6DAA4C33E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
Manifest number: 0FA8
Signing time: Fri 17 Apr 2026 21:00:36 +0000
Manifest this update: Fri 17 Apr 2026 21:00:36 +0000
Manifest next update: Sat 18 Apr 2026 21:00:36 +0000
Files and hashes: 1: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl (hash: 71Mg7srCxGRBcFEbowa1xTT5KuERPzrUlamQcX+uWnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:e0:b9:9e:47:7b:44:2a:ac:a6:da:a4:c3:3e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Validity
Not Before: Apr 17 21:00:36 2026 GMT
Not After : Apr 18 21:00:36 2026 GMT
Subject: CN=dd78803d752cb57d5a5176b651cfd2e5cc83f186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:cc:14:07:6b:00:e8:ef:b3:29:a4:52:10:
56:56:c4:68:23:03:fa:3a:9b:f2:f0:fa:c4:18:8e:
f5:54:8d:e2:52:73:15:a9:02:2b:62:4e:a5:6b:6c:
4f:b3:78:df:39:b1:79:6c:97:6e:d1:02:00:19:a5:
37:ad:18:7a:b3:d3:07:0f:62:43:9d:28:6d:df:6a:
92:c7:5e:9d:36:ad:f2:ee:c5:fc:fc:d2:b8:a2:20:
8f:c5:b6:3a:51:d8:94:82:82:c2:f4:fa:c4:c6:13:
61:4e:fc:6b:79:ae:f1:b5:f4:32:c0:01:16:ea:09:
21:f7:35:7c:fd:7e:b7:7b:fb:3a:ac:25:64:61:46:
36:03:31:26:6b:5e:2f:e2:20:a1:37:d2:50:cb:f2:
5b:69:3e:b5:62:d2:9a:a3:53:58:72:fc:19:44:4e:
fe:4b:f2:dd:ab:68:14:c0:f6:50:cf:6e:0c:56:1d:
fd:2d:9a:a5:dc:52:9b:6c:8e:93:02:88:16:61:af:
81:53:67:3c:20:da:71:41:bf:7d:1a:71:5e:ca:b0:
3c:a4:f4:13:aa:26:48:f6:90:40:66:27:46:16:c8:
d6:f6:fa:da:c0:f7:2c:c2:fa:29:d1:bd:24:05:b8:
77:7c:c1:ff:d0:10:8f:a5:ac:fa:d5:6c:fd:b6:84:
6a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:78:80:3D:75:2C:B5:7D:5A:51:76:B6:51:CF:D2:E5:CC:83:F1:86
X509v3 Authority Key Identifier:
keyid:E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7d:af:45:c1:50:70:1a:4a:c6:b9:f6:d6:0f:f7:07:29:52:
23:89:6d:41:42:3f:12:f7:1a:6f:41:5e:5e:1c:6c:b8:52:ae:
f4:e8:55:40:69:6a:44:d9:99:e5:43:9a:fd:46:b9:bc:de:11:
17:f4:da:ea:1f:68:8b:71:b7:21:a9:af:b6:7e:4a:96:07:4f:
b0:89:a4:5d:86:ce:98:0c:74:ce:21:d3:9f:47:e8:dd:4f:4f:
79:36:95:99:82:ce:6c:bf:90:4d:b7:e5:45:02:4f:76:e1:79:
4d:55:57:b2:3a:cc:88:21:f9:c8:8f:63:3d:f9:be:1c:85:15:
13:cb:c1:96:f0:fc:15:7c:3c:cd:3b:a4:11:b6:ab:3e:5e:cc:
3a:c1:7d:0d:75:72:30:57:2b:a7:e5:25:71:a8:95:5f:15:91:
f6:94:8e:59:ab:3c:f3:9c:cd:52:20:e9:36:45:aa:65:de:c6:
ff:93:a3:0d:60:36:ad:87:c4:cf:b1:41:e9:4c:64:9d:17:34:
ac:e9:30:6f:2e:0c:6b:eb:15:c7:3f:e7:13:a8:0f:8b:d9:f7:
80:50:e1:d8:75:d6:aa:d7:9d:81:d7:e7:f4:b2:86:57:1f:41:
85:94:0a:52:e6:7b:c0:f5:0b:48:94:04:b5:17:26:b7:87:9b:
7d:d9:23:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:03:43 2026 by rpki-client