Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
File: 4SFHcEtsZk3PIjSS7mHV5fkXxek.mft (raw, json)
Hash identifier: 6bKeJbRI+Fi6w57ySzKOF2YzEH4ySBcIJft4nkU2OVo=
Subject key identifier: 74:8D:5F:6E:7A:7E:39:7A:C4:04:E2:EA:9D:77:C9:E2:72:8B:B1:91
Authority key identifier: E1:21:47:70:4B:6C:66:4D:CF:22:34:92:EE:61:D5:E5:F9:17:C5:E9
Certificate issuer: /CN=e12147704b6c664dcf223492ee61d5e5f917c5e9
Certificate serial: 019CAA21731F233FA377512344C292DA9BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
Manifest number: 0583
Signing time: Sun 01 Mar 2026 16:00:44 +0000
Manifest this update: Sun 01 Mar 2026 16:00:44 +0000
Manifest next update: Mon 02 Mar 2026 16:00:44 +0000
Files and hashes: 1: 4SFHcEtsZk3PIjSS7mHV5fkXxek.crl (hash: d5trqWVJp5nL+NjcYytOLZOn6Jb5+2C/27cR0L4P3/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:73:1f:23:3f:a3:77:51:23:44:c2:92:da:9b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12147704b6c664dcf223492ee61d5e5f917c5e9
Validity
Not Before: Mar 1 16:00:44 2026 GMT
Not After : Mar 2 16:00:44 2026 GMT
Subject: CN=748d5f6e7a7e397ac404e2ea9d77c9e2728bb191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b3:ed:73:06:7c:8e:f6:01:9f:91:c3:32:17:
71:20:2b:58:32:07:91:df:b7:eb:96:29:bd:b6:f4:
c0:b3:00:06:0f:27:7b:2e:10:1d:16:60:64:ed:29:
6e:07:fd:a6:5e:b5:12:c4:ab:92:89:9a:43:29:e2:
02:1a:e0:6b:ad:b6:1e:53:a1:8e:31:12:63:92:8d:
9b:62:77:f2:eb:76:47:f0:ff:8a:c7:3c:29:45:af:
8e:8d:52:35:dc:52:02:03:5a:f3:e5:33:ab:6d:79:
a3:5e:08:f8:13:c9:07:96:b3:d9:0c:b3:37:b7:c5:
71:93:a3:7a:67:08:69:c5:a6:b1:46:66:05:57:10:
b1:28:b4:df:b9:79:63:60:17:57:7d:92:a8:23:93:
cb:b8:80:a2:05:32:3c:47:d9:c0:c1:4d:26:dc:ea:
e1:0b:8a:21:52:4e:f9:fa:c2:b9:3a:5f:16:83:17:
eb:72:35:c4:12:fb:01:10:b6:fb:b2:cd:da:ee:22:
e0:05:ad:e6:f7:81:d7:a0:37:56:9e:0b:47:c7:51:
5e:58:48:90:3f:04:fd:1d:0c:85:38:05:d4:64:bf:
84:25:f6:41:b6:72:75:33:d9:6c:84:70:82:c7:df:
fc:44:64:02:ab:3c:0f:f4:9f:e9:19:99:e4:a3:69:
82:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8D:5F:6E:7A:7E:39:7A:C4:04:E2:EA:9D:77:C9:E2:72:8B:B1:91
X509v3 Authority Key Identifier:
keyid:E1:21:47:70:4B:6C:66:4D:CF:22:34:92:EE:61:D5:E5:F9:17:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:02:ca:7f:c4:91:d5:66:60:1f:1d:46:74:86:b3:03:fe:10:
9b:2e:32:28:ec:ee:27:75:cd:56:8b:a1:f4:fe:d3:15:26:06:
af:b0:4c:39:04:ce:85:f2:b5:e0:bf:ed:ce:10:b7:50:04:03:
25:85:1d:76:c1:25:f3:eb:02:6d:81:91:b2:1f:2a:ae:db:aa:
bb:e7:d6:e4:8d:fe:7d:0c:33:24:d1:b5:78:d7:b7:90:a2:9a:
05:c5:21:92:fa:66:5f:05:8d:c2:98:cd:d6:3b:6d:5a:95:91:
fc:a8:12:00:a1:da:bc:09:12:0d:77:63:26:3a:db:47:9d:e4:
df:a2:4d:a0:b7:91:8d:3e:ec:2d:a2:74:23:9c:a0:80:86:72:
70:12:80:a2:82:44:5b:70:31:e6:88:3d:b1:0a:34:a9:25:cc:
47:93:47:6e:c1:7d:90:67:72:4c:ff:03:cf:57:1d:d9:37:fc:
8e:ae:81:e9:fe:a4:94:f2:5c:6b:e1:54:b6:0f:d6:8e:87:b7:
45:42:3b:f4:bc:de:c5:f8:13:a4:ea:0c:c1:bc:dc:2e:06:0e:
8d:53:b1:99:33:76:31:8d:d0:2e:c0:a6:fb:a8:41:e4:ad:72:
ad:7a:b1:c6:2d:76:d2:58:9f:f2:c8:e4:98:c3:93:e3:de:c7:
c1:fb:94:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:49:48 2026 by rpki-client