
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
File: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft (raw, json)
Hash identifier: bPcK7xfms0KLFrOOZ8IRw/MeJALKGLpoeZJoaUppHWM=
Subject key identifier: B7:E4:F2:AE:52:46:C9:BF:EC:0C:A5:AA:38:51:CF:8F:5B:CB:89:FA
Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
Certificate issuer: /CN=e214eb35a35fd488860703b7990b8170af17912f
Certificate serial: 01A0E43EBE763274A097932A624232311631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
Manifest number: 0CB4
Signing time: Sun 27 Sep 2026 19:01:52 +0000
Manifest this update: Sun 27 Sep 2026 19:01:52 +0000
Manifest next update: Mon 28 Sep 2026 19:01:52 +0000
Files and hashes: 1: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl (hash: Wg5QZ021jO+CcuINOMRCb+mgyiKQ/KnGlS0LlApCaJg=)
2: OPFTuLGWkU6mUdnCpgOtMP0wcEc.roa (hash: mYTV++dJNwiiA96b08GGaua3APnQu69gvPcnLc6GiRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3e:be:76:32:74:a0:97:93:2a:62:42:32:31:16:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f
Validity
Not Before: Sep 27 19:01:52 2026 GMT
Not After : Sep 28 19:01:52 2026 GMT
Subject: CN=b7e4f2ae5246c9bfec0ca5aa3851cf8f5bcb89fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a8:86:a5:3a:a7:69:3e:16:ef:e9:59:f2:e1:
98:dd:61:60:2d:ca:1a:62:3e:ff:b3:c1:62:5b:35:
2c:0b:d8:77:b3:2d:e7:25:4d:51:c9:95:20:ba:d7:
fd:87:d2:7f:9d:10:98:cc:4b:0c:a8:55:9f:57:ff:
33:08:0e:a3:3e:40:01:64:c5:10:49:9c:9d:b1:26:
b3:d3:3d:40:68:ef:03:fc:75:c9:1b:eb:1f:d5:86:
19:79:8b:77:6a:13:9d:e4:f1:b7:1b:a1:0f:3e:84:
28:cf:87:af:dd:59:8d:bb:a7:96:d7:12:a3:40:16:
ed:47:2e:77:39:ea:c1:19:48:a6:f3:dc:02:ec:2c:
ad:ad:1c:e2:0a:12:af:d3:3c:b1:53:9c:a1:56:44:
8a:4a:31:c4:4d:48:aa:b5:40:6d:08:cc:46:bb:43:
cf:24:5a:fd:70:c3:9d:41:0f:39:b4:e9:f4:e3:b7:
29:7e:6c:51:b2:e2:18:30:59:e4:6a:60:58:7d:e2:
76:f4:49:9a:f2:77:81:30:8e:28:6a:8a:54:6d:0e:
f4:5a:5f:0e:82:34:e5:e1:70:2d:67:01:88:8c:c7:
e9:80:b1:38:38:5f:38:39:4c:69:80:56:03:df:ca:
d1:b0:15:c2:0c:00:71:fd:a2:98:92:af:4f:9a:b6:
78:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E4:F2:AE:52:46:C9:BF:EC:0C:A5:AA:38:51:CF:8F:5B:CB:89:FA
X509v3 Authority Key Identifier:
keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:14:73:e6:14:94:d5:33:68:4a:82:aa:8c:8f:ea:77:6f:cd:
62:3e:00:b8:0b:25:92:c6:c9:6e:cf:05:88:b9:6a:b3:6b:e7:
0a:f2:79:e0:93:a9:d2:9c:43:31:f4:e9:68:68:b1:18:37:68:
50:b6:85:c7:ba:b1:d0:fd:61:fd:10:53:cd:b2:07:95:56:fc:
03:d0:ba:a2:42:5b:52:3c:5a:10:1c:45:07:2c:ea:e6:79:ba:
1d:8d:27:30:79:6a:df:9e:d4:d4:83:55:69:7e:b3:0b:2b:49:
2b:d4:53:4b:7a:5a:e4:93:c6:1b:93:28:c4:35:d0:79:c2:8e:
9f:e8:60:50:e3:7d:13:e4:b3:50:a1:19:90:00:86:53:c1:90:
c8:95:42:4d:43:19:40:9e:55:de:03:3c:ab:47:24:e1:33:65:
bb:7d:79:1f:0f:22:00:50:96:df:4e:8e:05:48:b6:11:be:e4:
2f:e6:da:97:94:f3:06:ee:17:65:14:d0:c3:e5:af:e1:53:15:
18:8d:1f:9c:d8:a1:c0:9d:a4:54:64:70:bd:6b:68:85:97:5e:
78:48:89:f2:d5:17:fb:e7:57:30:ce:1d:f1:2d:66:af:37:c4:
db:14:1e:69:e6:9c:4a:4c:19:19:5f:0a:31:6c:c4:56:61:48:
df:ac:7b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:58:57 2026 by rpki-client