Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
File: 4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft (raw, json)
Hash identifier: U8liyg1dT4M5Vv6Kd/WmCCDCF8li3VdC7kVJqQaosG4=
Subject key identifier: 36:A9:32:B5:EB:07:1A:55:F3:80:04:A2:F6:73:4F:19:82:47:1C:E8
Authority key identifier: E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78
Certificate issuer: /CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
Certificate serial: 01A0C66A3F020E7D4E5D53BCC99DDBD43C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
Manifest number: 11E7
Signing time: Tue 22 Sep 2026 00:00:46 +0000
Manifest this update: Tue 22 Sep 2026 00:00:46 +0000
Manifest next update: Wed 23 Sep 2026 00:00:46 +0000
Files and hashes: 1: 4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl (hash: HCEidIk6DiIv3xghGWjySS4s5/X+Vr9ZFzmlkwstr3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:3f:02:0e:7d:4e:5d:53:bc:c9:9d:db:d4:3c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
Validity
Not Before: Sep 22 00:00:46 2026 GMT
Not After : Sep 23 00:00:46 2026 GMT
Subject: CN=36a932b5eb071a55f38004a2f6734f1982471ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1b:c9:27:45:d8:01:b0:bd:3c:16:e2:d4:6f:
54:17:5d:44:10:34:c2:84:f8:cf:06:bd:35:2c:ef:
09:dd:c4:b8:b5:a4:66:f6:52:36:4e:48:b2:f1:6e:
17:0e:34:91:75:f4:b9:68:ac:34:4d:1c:8f:3a:a8:
28:e4:64:3a:99:43:5d:b7:fb:81:e4:15:60:d4:a2:
79:93:ff:79:f2:b8:07:77:c3:70:95:c7:f3:0e:e0:
70:37:37:36:ed:ca:25:ee:70:3c:a5:5a:6a:34:7f:
a8:88:97:02:c4:77:dd:4b:59:98:25:50:44:81:7a:
60:f2:44:c4:32:ef:a7:61:b4:13:fa:60:11:8b:b6:
c1:9e:bb:b3:96:21:af:c6:23:fa:35:d8:a5:2d:ae:
eb:c7:53:f0:85:cc:bd:25:39:b3:22:0f:fe:80:c0:
c3:e1:41:28:15:26:af:2a:f5:b9:36:30:e1:dd:4c:
b6:29:e9:51:f6:6b:3a:79:a5:d4:5f:91:ae:45:af:
9b:c5:ea:a2:73:ba:6a:38:71:7f:5f:ea:f5:8a:94:
c8:21:fd:b7:c8:ee:45:69:bf:cc:91:da:21:68:ef:
87:ae:95:6a:60:0d:a2:1b:1b:31:fa:f7:e0:91:3c:
f3:fb:71:00:59:42:2d:d7:1e:99:a6:89:cf:a7:62:
20:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A9:32:B5:EB:07:1A:55:F3:80:04:A2:F6:73:4F:19:82:47:1C:E8
X509v3 Authority Key Identifier:
keyid:E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:4b:03:1b:5e:78:3c:fb:2f:96:eb:c9:15:8a:a7:ef:ea:c7:
00:28:f3:a7:7c:97:9c:52:2a:e9:3e:99:87:a3:be:3d:ea:3a:
08:4c:b0:0b:73:e1:ac:19:ae:75:d1:7d:0c:8f:ef:21:6a:7a:
d8:1e:e8:0b:2b:27:24:1f:53:4d:8a:6c:cc:1d:db:15:aa:96:
93:9b:4a:9a:27:2e:61:21:cd:e6:d1:ac:4a:9b:e0:ee:45:dd:
16:69:bc:6f:65:4e:93:71:a0:6c:9d:90:1a:c5:f3:2f:6b:20:
91:20:a7:a2:c4:d9:24:a8:56:49:2d:5d:70:e4:56:2d:85:95:
53:46:e0:9f:81:d5:ee:f8:76:bf:3a:52:12:ed:c9:10:64:01:
a9:a5:1a:6d:9a:c1:f8:78:34:ee:d2:8f:b1:93:2c:c3:2c:44:
02:24:a1:e7:74:db:95:5c:a5:37:39:be:41:52:e2:7e:c2:fe:
09:12:31:23:bb:72:33:41:76:2e:d1:e9:f9:8c:38:44:3a:82:
87:6d:0a:83:9f:9a:89:2e:eb:da:7d:7c:09:06:76:c5:83:04:
b9:77:25:ef:79:1a:77:8c:5a:a0:75:52:54:5c:8d:d0:45:02:
d5:10:21:b5:6f:e9:e2:e6:97:86:3a:bc:85:af:1c:aa:35:d9:
c8:76:fd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:28:14 2026 by rpki-client