Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
File: 4_NSlr0mUtdWucSi8KzS_dp5CXw.mft (raw, json)
Hash identifier: 4jo0Kt0rNAeSwn5yN27N0pW3a2OiKtCnqQLdJ+j2uak=
Subject key identifier: 50:9B:CA:FD:9E:38:57:07:C4:3F:44:50:F9:34:B7:60:36:B9:32:96
Authority key identifier: E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
Certificate issuer: /CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Certificate serial: 01A1C065FD85C45063F675FBB76B810B47FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
Manifest number: 09DC
Signing time: Mon 09 Nov 2026 13:01:11 +0000
Manifest this update: Mon 09 Nov 2026 13:01:11 +0000
Manifest next update: Tue 10 Nov 2026 13:01:11 +0000
Files and hashes: 1: 4_NSlr0mUtdWucSi8KzS_dp5CXw.crl (hash: kFKudTB/Jwlsp6cmEqzsl4T2Ivy/3ymp4tEbsfXnVBE=)
2: Zmnbw83gHONa8BX-buTVuMmHAsM.asa (hash: XyTVvJ3X+ERyhtywLTdj7Ns+K7vLedrBzy7rkidscZI=)
3: kJBFWcdH75SmtIn8uA9jCwfUX4o.roa (hash: ysJ0LU5rMa1kB1xrN2ppHOMAzf664V0YwglsAj8KzHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:65:fd:85:c4:50:63:f6:75:fb:b7:6b:81:0b:47:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Validity
Not Before: Nov 9 13:01:11 2026 GMT
Not After : Nov 10 13:01:11 2026 GMT
Subject: CN=509bcafd9e385707c43f4450f934b76036b93296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:72:0f:73:51:a2:79:25:34:db:ad:08:04:
9d:52:b2:b5:09:ce:60:af:8a:4e:7c:c8:65:e4:86:
e1:62:a4:9a:d3:97:17:84:53:d7:ce:96:4c:35:02:
7d:d9:cb:15:30:77:55:d7:9e:62:34:24:2e:a5:67:
77:74:b9:2c:c2:6e:6a:5d:13:f5:c7:26:b1:bf:45:
45:56:81:26:90:2e:d2:65:6c:e7:3b:eb:f0:46:a6:
0c:55:4e:3c:ef:82:88:52:9f:3b:b1:f7:2b:d0:d1:
4b:bb:6f:74:50:a3:af:c6:08:16:22:40:7e:41:84:
1a:26:43:cb:ca:65:9b:e4:b9:5b:46:f8:4c:3f:b4:
5d:4b:e1:e3:e6:25:b4:c2:0d:69:81:1a:c4:3e:72:
bf:5b:64:25:69:df:f8:4e:d7:4b:0a:f0:f8:dc:87:
94:10:3f:d5:40:0c:70:79:30:80:31:b8:48:32:97:
94:4b:19:69:32:7c:fe:b0:d2:3f:f5:e3:3d:4f:4b:
a1:4d:68:be:12:c1:70:e0:9c:b4:e5:36:f4:9e:48:
89:04:73:06:09:f2:3b:46:c8:e3:c8:6a:56:86:c3:
e4:ab:5f:9a:43:4b:71:95:c0:5b:98:6b:1a:55:ea:
e3:cb:dc:1e:75:4d:44:b7:28:25:8c:2b:d2:11:d4:
e9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9B:CA:FD:9E:38:57:07:C4:3F:44:50:F9:34:B7:60:36:B9:32:96
X509v3 Authority Key Identifier:
keyid:E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7f:67:66:8b:10:42:11:2e:22:a3:4c:3e:d8:81:dd:f4:99:
a3:23:8f:db:97:00:ec:25:e9:c5:e7:fe:e7:76:16:ef:92:fa:
13:35:6f:05:f2:7d:9c:78:a5:f5:1b:98:4e:9c:ba:c0:d5:f1:
9a:17:48:fa:93:91:39:32:b3:df:fa:89:26:71:51:31:bb:d1:
76:95:86:19:9e:a7:e3:e6:9c:7d:69:11:ac:7e:9d:84:ef:8a:
5d:ee:e0:cf:66:94:4a:8b:f3:af:4e:32:6c:a5:a1:f1:af:c7:
48:ba:ba:b1:2e:0f:0c:c2:87:e7:85:26:f2:9c:90:a1:29:97:
68:29:2d:b2:53:33:70:52:b7:ee:5a:1c:d6:a5:99:98:fd:c2:
f2:ef:82:87:38:a6:7f:01:ae:50:62:6b:d2:d9:50:65:60:67:
fe:4f:32:24:2b:49:e1:bd:e5:d6:56:ff:1d:e9:77:c0:27:ff:
8d:f9:60:6b:7e:2c:d6:5a:b4:cd:c0:78:6f:a1:15:f5:4b:2f:
0e:97:32:9d:89:06:82:2a:6e:a7:15:70:80:ea:de:e4:3a:aa:
a0:a0:5c:bb:5a:d2:bf:11:84:51:66:37:f8:90:f3:80:c7:f1:
f3:0f:e3:ed:9f:9e:76:cb:0e:58:74:df:08:f2:2f:29:2c:e1:
f6:b6:da:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 01:18:12 2026 by rpki-client