Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
File: P4_xyWZv4ZXySqH-jDRdecSOe8A.mft (raw, json)
Hash identifier: mfj+DREkEMbdemJZtAFA+CijK77KIpR3T0zjg66V59w=
Subject key identifier: EC:7F:93:70:47:A9:9B:E5:FF:D0:F8:22:F9:8A:4D:52:86:B4:22:AB
Authority key identifier: 3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
Certificate issuer: /CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Certificate serial: 019D984FB780C50EFD75450C1782599F0B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
Manifest number: 0CAC
Signing time: Thu 16 Apr 2026 22:00:54 +0000
Manifest this update: Thu 16 Apr 2026 22:00:54 +0000
Manifest next update: Fri 17 Apr 2026 22:00:54 +0000
Files and hashes: 1: P4_xyWZv4ZXySqH-jDRdecSOe8A.crl (hash: uqJoxBffOJw3Q0R0+HKZwyDW74KDbAlVbK8kuUDMpv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:b7:80:c5:0e:fd:75:45:0c:17:82:59:9f:0b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Validity
Not Before: Apr 16 22:00:54 2026 GMT
Not After : Apr 17 22:00:54 2026 GMT
Subject: CN=ec7f937047a99be5ffd0f822f98a4d5286b422ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e0:b0:47:1a:96:b0:76:64:ce:f3:96:eb:3d:
74:6e:0a:a2:91:0e:3b:71:07:e4:49:2f:54:25:b7:
53:e8:ee:25:1a:1a:1d:0d:d2:4c:3c:63:d8:65:83:
17:69:d1:89:47:39:ac:cd:ad:5e:c7:e3:ce:36:38:
ad:57:c0:2e:80:ab:9a:1f:4b:f4:17:8e:4c:63:8b:
a2:f0:db:98:79:c2:f4:ab:b8:2a:82:9e:27:39:28:
39:2c:e7:63:b3:4e:d8:41:24:71:75:6a:68:db:9c:
26:e1:bc:3e:9f:03:99:bc:76:de:94:f1:a3:58:04:
bd:33:07:fe:b2:e7:9f:8d:dd:62:0e:92:ed:56:6f:
db:f6:1e:c9:d0:2d:b1:c3:d5:52:bd:a3:b6:32:03:
9a:0b:d0:2c:9c:43:ca:00:51:d8:72:b9:ab:94:65:
ca:96:e8:93:2a:53:b5:15:9f:7b:cc:ea:81:8a:0a:
4f:0b:b7:1a:d7:24:a7:76:90:dd:18:6d:7b:44:39:
b6:5c:34:7b:02:03:54:71:34:94:3b:61:c2:d3:a5:
c0:b0:28:46:b5:e0:1a:a4:a2:0e:fb:47:23:75:7c:
e4:d2:b0:56:93:9c:9c:ce:cd:d4:9d:5e:eb:59:0e:
07:40:97:3d:e9:45:ed:18:8b:9a:18:26:1d:73:3d:
ce:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7F:93:70:47:A9:9B:E5:FF:D0:F8:22:F9:8A:4D:52:86:B4:22:AB
X509v3 Authority Key Identifier:
keyid:3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8f:1f:82:d1:2f:ee:07:65:ce:67:77:32:f5:fc:ce:10:bb:
53:ba:ef:1e:8f:6e:f5:f6:36:ef:4c:9e:ff:86:14:03:dc:61:
ef:6b:b6:30:24:24:61:0a:c9:ef:93:56:c6:e2:39:5b:89:e5:
ac:2a:c7:0e:c2:75:49:06:31:f4:53:63:0d:fd:9d:93:f1:dd:
23:43:d3:0a:cd:e6:09:a3:83:b6:7f:df:cf:e9:46:e2:8c:71:
d2:6d:7f:68:64:0f:bd:27:41:cd:92:9c:db:d4:6a:61:3b:5b:
5c:d3:f1:a8:fc:4c:41:f1:4c:06:bf:65:05:f8:ed:50:82:31:
cf:0b:78:3f:62:ac:76:c6:20:41:87:7a:13:6d:e8:47:ba:03:
26:d8:75:9c:42:72:a0:8c:c5:2d:1c:c9:00:ad:20:7c:36:5e:
6d:cc:1a:e1:30:c4:db:07:ed:a3:e5:30:92:b2:78:9e:7a:b3:
b6:a3:1b:f8:ed:d6:06:6f:d4:e3:0f:09:5a:40:9e:0e:70:23:
2f:af:28:36:da:bf:bb:35:58:a3:bf:fd:af:d5:81:28:73:50:
1e:2f:68:86:aa:db:69:5a:71:5c:66:16:4b:11:1d:1d:c7:22:
37:bc:32:8f:1d:2f:a5:65:f7:db:c9:de:8e:67:d1:fe:8e:09:
68:f9:bd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:12 2026 by rpki-client