
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
File: m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft (raw, json)
Hash identifier: plphZYv2HSSL4QnVVlpIUcYYwn1KJfw+Z4gS+lRDjs8=
Subject key identifier: 2C:34:16:C6:4B:9B:F8:A8:BB:C7:CE:06:94:28:04:09:DF:79:30:B0
Authority key identifier: 9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
Certificate issuer: /CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
Certificate serial: 019D99D07A7C7C0BBFF99A8D8AC60BF89CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
Manifest number: 0B27
Signing time: Fri 17 Apr 2026 05:01:09 +0000
Manifest this update: Fri 17 Apr 2026 05:01:09 +0000
Manifest next update: Sat 18 Apr 2026 05:01:09 +0000
Files and hashes: 1: m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl (hash: Dqm6Q9NPcG1qIXJ/FW5F+Dg2SFKmA+NlzK6JPhmpI2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:7a:7c:7c:0b:bf:f9:9a:8d:8a:c6:0b:f8:9c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
Validity
Not Before: Apr 17 05:01:09 2026 GMT
Not After : Apr 18 05:01:09 2026 GMT
Subject: CN=2c3416c64b9bf8a8bbc7ce0694280409df7930b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:78:fb:58:a3:2d:12:38:ca:bb:a6:bf:f0:b5:
11:66:49:56:ac:63:5b:bc:c2:bf:14:64:be:69:82:
90:cd:e0:b0:55:70:8b:4c:3b:90:9c:c2:96:a1:1a:
b4:5f:68:6c:2e:f6:36:24:85:33:3b:53:c5:6e:9e:
60:8a:78:ed:2c:f5:3a:a8:cb:9e:ce:ca:9b:d7:94:
73:d3:80:ab:0a:9d:dd:be:e3:44:1e:36:f4:3c:15:
74:d0:24:95:a9:0f:e0:8d:99:84:c4:12:9c:2d:70:
81:07:30:b4:7a:ce:ce:ce:62:62:eb:06:44:ef:30:
41:24:93:11:ef:8e:21:b8:c8:91:38:dc:d8:de:48:
26:55:89:b3:89:37:36:77:31:1b:79:d3:dd:b0:38:
64:09:53:50:d9:20:1d:14:52:3b:72:d6:11:c7:db:
cb:0d:3c:aa:c9:6e:62:bd:2f:ff:9b:4a:ba:37:ac:
4f:6f:4d:71:4b:04:36:aa:1c:00:5e:67:2a:d8:d9:
5e:5b:66:09:5f:fb:08:29:21:19:81:90:90:fa:8a:
5b:3a:72:31:4a:c8:b6:af:54:d4:21:2d:8e:5a:94:
0a:00:c9:cc:3f:24:db:94:8c:b6:17:b7:5b:41:d8:
67:3d:f6:05:65:fe:98:3f:a1:c9:ea:45:d9:88:4f:
8f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:34:16:C6:4B:9B:F8:A8:BB:C7:CE:06:94:28:04:09:DF:79:30:B0
X509v3 Authority Key Identifier:
keyid:9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:64:30:d8:9f:67:4e:83:50:a7:76:f0:09:12:c5:d6:dc:96:
e0:72:8e:5a:17:17:45:b1:ae:f4:0f:f9:93:d5:6a:c2:8e:ba:
f2:37:62:2b:27:c9:f8:65:67:eb:37:46:41:59:78:78:ff:e7:
5e:9a:12:8e:47:2a:2e:41:12:1c:44:9f:5a:93:79:26:76:6e:
13:68:f0:b5:c5:df:73:c2:3b:12:2d:31:43:81:91:ce:4c:72:
69:f6:15:fc:f5:71:4b:e6:d9:67:26:f8:a1:03:c9:d3:a0:ca:
d7:82:bc:8f:7c:ea:2f:58:9f:1d:10:d6:72:b4:68:d2:4e:11:
e4:f0:e3:f9:c5:a8:4c:2f:5b:cb:11:27:87:3d:44:01:a0:bf:
a5:c8:75:d4:da:1f:91:e7:ba:b6:2f:1b:33:8f:e0:f3:19:ee:
04:d5:2d:51:19:d8:1e:65:7c:11:28:a6:7d:b8:23:c6:1b:2f:
e8:fc:6c:31:29:5a:68:cc:f5:21:ba:b6:b5:34:51:44:ee:75:
24:4f:c2:3e:73:f0:ca:5b:31:1f:37:76:c5:d7:ef:fe:38:c8:
3f:ac:da:c0:39:d0:07:07:ec:17:6e:54:4c:e3:6b:4b:b3:74:
cf:81:ad:cd:93:4e:58:7a:22:13:2c:e6:d7:d9:c7:a1:cc:fe:
94:86:2c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:12 2026 by rpki-client