Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
File: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft (raw, json)
Hash identifier: LAGALJ65vw5MMCnmI4ERsGQeAaiUP3PFojDQ3NdYaRs=
Subject key identifier: 8D:9B:F9:BB:2E:1E:91:C3:B1:6A:DE:E3:63:6E:EF:5F:4F:DD:68:62
Authority key identifier: E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
Certificate issuer: /CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Certificate serial: 019CAC7E2A1899E94F842859CB055C90E919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
Manifest number: 09C9
Signing time: Mon 02 Mar 2026 03:01:15 +0000
Manifest this update: Mon 02 Mar 2026 03:01:15 +0000
Manifest next update: Tue 03 Mar 2026 03:01:15 +0000
Files and hashes: 1: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl (hash: GHYYrlfTH71DbJqIYTiwkyod3nL0j3yy4DOzEtH/QPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:2a:18:99:e9:4f:84:28:59:cb:05:5c:90:e9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Validity
Not Before: Mar 2 03:01:15 2026 GMT
Not After : Mar 3 03:01:15 2026 GMT
Subject: CN=8d9bf9bb2e1e91c3b16adee3636eef5f4fdd6862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:36:cd:76:5a:b7:11:34:16:1a:e7:30:2c:84:
3f:64:e4:81:9c:49:95:17:6b:ca:3b:e9:77:d2:f4:
bb:ae:56:64:fa:b9:ad:0a:7e:ed:0c:67:45:a7:71:
30:21:38:b7:4b:4b:b8:5a:ee:9c:b6:a2:11:93:db:
a4:aa:09:2b:ad:3b:ac:62:cd:ba:2e:ff:a7:95:05:
f4:c9:b3:ee:7b:61:24:42:61:53:1e:61:34:e2:8b:
24:45:59:df:94:05:e6:e8:4b:e7:db:de:e2:30:0e:
9c:1b:08:4d:34:4f:7c:87:ce:7e:1c:b1:0e:fd:99:
13:2e:93:e5:4b:8a:a0:33:5d:88:df:27:23:00:9c:
7a:8b:4b:85:ca:03:18:55:98:cf:1c:cd:b5:d0:e2:
48:09:02:8f:10:28:c1:3d:5b:0f:38:d4:f7:b1:36:
7f:34:a2:ed:db:6f:9a:9e:fe:f2:4c:1d:db:03:99:
ba:fe:e3:bd:55:cd:cd:6c:eb:b0:be:a9:ae:1e:0d:
c9:6e:14:8d:1c:8d:16:a4:e5:5b:42:52:54:06:d9:
58:11:0e:f3:36:3d:45:3b:2f:68:45:f8:70:65:f6:
83:3e:2c:a6:26:e2:96:ba:61:7d:fd:be:b6:05:f4:
fa:34:fa:b4:61:43:18:ec:21:03:22:cf:f4:ad:ee:
ca:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9B:F9:BB:2E:1E:91:C3:B1:6A:DE:E3:63:6E:EF:5F:4F:DD:68:62
X509v3 Authority Key Identifier:
keyid:E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:89:bb:57:26:2d:06:06:15:23:c3:64:de:3f:fd:d9:43:6e:
37:07:bc:50:10:aa:14:39:fb:af:21:81:41:03:9b:16:8f:2a:
a7:6f:24:52:ae:7d:b4:a9:b2:19:92:ea:30:3a:68:52:fd:de:
b0:c5:70:29:45:7d:9b:a8:f2:bb:92:c8:3c:32:0d:05:fb:d7:
7a:ef:e8:ec:5a:4a:e1:82:e6:08:21:d0:be:74:9e:3a:15:87:
a8:15:05:45:6e:67:f5:56:b7:30:9c:02:23:a7:46:a0:33:ae:
3f:09:85:41:9b:ae:13:d1:09:a1:12:ae:05:ee:ea:f8:0c:91:
3d:40:5f:57:43:87:9c:18:52:f6:11:01:8a:e0:3a:5e:e3:9b:
31:74:dd:4c:1c:71:86:cc:a7:25:7b:fd:5c:b9:59:b2:23:86:
b9:d3:c6:6e:1c:53:bf:7f:ad:95:1d:43:2b:17:da:24:52:46:
ed:f1:36:ab:51:d1:3f:4a:e6:65:95:ce:e8:a4:79:59:e2:55:
fc:32:ac:e5:9b:c2:e5:69:bc:ef:45:2c:85:ef:d1:b5:2d:1f:
41:eb:38:80:15:e7:fc:89:a2:46:f4:69:a0:4e:4a:76:08:ae:
4e:11:ee:cf:b1:f5:ec:46:bf:e3:41:5f:62:c9:3e:26:63:1e:
2f:95:5d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:04:12 2026 by rpki-client