Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
File: 4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json)
Hash identifier: hBrS5V5n/S6XtJTAqzvVgArQMq9SQblMFmyQpUxreHY=
Subject key identifier: 4C:E4:7F:BB:C1:A1:52:06:7B:B7:01:E6:B0:A6:7B:D2:72:24:56:3F
Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057
Certificate serial: 01A0D2009A57B847ABFC5510E1411224F251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
Manifest number: 1A00
Signing time: Thu 24 Sep 2026 06:00:49 +0000
Manifest this update: Thu 24 Sep 2026 06:00:49 +0000
Manifest next update: Fri 25 Sep 2026 06:00:49 +0000
Files and hashes: 1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: sGR6ihgQGTHiqTSdXG15lAUVv21QH78Q0WvH3H1DxG4=)
2: Z-KRt-a6fFf_5XtERzEP16Ujm4E.roa (hash: UsGPZBKjWrTYFqihznPKPakXtZqMZXtabA/JlRVq59s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:9a:57:b8:47:ab:fc:55:10:e1:41:12:24:f2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ea593464858e293952345cf4e97792c8811057
Validity
Not Before: Sep 24 06:00:49 2026 GMT
Not After : Sep 25 06:00:49 2026 GMT
Subject: CN=4ce47fbbc1a152067bb701e6b0a67bd27224563f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5b:45:88:74:d0:c3:88:bd:60:9d:1b:b1:d2:
ef:6a:69:18:65:b5:00:3e:f9:ee:1e:d7:66:f1:bc:
07:3a:55:fb:82:f6:f3:49:d2:83:ae:41:6c:ea:81:
8a:68:73:07:b7:1f:9d:60:91:9e:48:5c:4c:8a:84:
9b:51:a5:f6:9d:34:5b:6a:0c:51:f6:48:fe:26:27:
66:e2:35:4b:37:4c:9e:08:ed:ac:12:cf:55:76:a1:
c4:19:f1:78:18:c0:ac:79:77:4a:9c:84:bb:28:91:
20:0c:85:ec:c5:62:b6:34:50:9c:b2:6a:fc:da:46:
1f:ae:32:7d:07:0e:81:7d:c2:3f:bc:78:53:65:94:
41:2e:bf:3d:f9:e9:32:37:16:70:db:c9:54:d6:03:
f0:52:fe:a2:b7:ba:05:12:ac:3f:50:78:c1:54:2a:
6b:72:1e:92:47:33:67:b8:1f:76:f8:c5:3f:1b:81:
68:be:ac:1a:2f:4c:8e:68:48:bf:11:0c:6c:4d:d2:
2c:22:79:87:53:37:fc:e2:ca:ba:ac:4d:ae:3d:ed:
e7:6d:8a:15:5f:82:2e:0e:6a:ad:2c:7b:dc:5d:91:
30:49:d9:01:0e:66:63:97:b4:5d:91:dd:8b:29:ce:
68:3d:42:13:f3:18:77:68:d7:15:b4:82:90:c5:3a:
f6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E4:7F:BB:C1:A1:52:06:7B:B7:01:E6:B0:A6:7B:D2:72:24:56:3F
X509v3 Authority Key Identifier:
keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7a:40:37:a3:e1:1f:c4:27:36:e2:d3:c7:22:ec:02:93:6e:
7e:c3:26:03:7a:08:04:c0:c9:2c:f5:1d:30:d5:1c:80:72:71:
d8:d9:0b:53:0b:c9:65:71:59:57:72:4b:2c:37:a2:1b:71:42:
d4:cc:a4:f1:9b:4c:6d:2c:a0:a1:5b:41:a9:f4:d4:b7:1c:b0:
b2:0f:c7:3a:30:03:03:4d:6f:6a:19:b8:e9:80:b3:98:4e:58:
3f:fb:9a:17:7f:19:de:9f:69:02:be:2e:13:9a:45:76:01:8e:
42:17:f8:ba:3b:10:c0:86:40:29:d7:cb:50:8d:b0:ef:69:63:
60:b7:e4:a5:66:31:5a:af:75:f3:6c:66:5d:3e:c1:6c:ec:ed:
43:1e:97:c0:30:7c:9c:04:77:59:f2:9c:24:35:bd:e2:83:26:
85:0d:2b:d4:b8:89:0f:a1:14:4d:01:95:6d:04:ce:df:f4:7a:
96:51:a6:7a:5a:bb:3e:b7:3c:4c:d8:83:a9:98:9f:fd:60:ea:
10:1f:63:11:cf:0b:2d:7b:a7:8c:cd:bd:bb:74:9b:d7:77:25:
fd:64:c3:c0:28:39:14:92:9b:1d:89:75:32:58:d2:b1:f5:99:
c1:4f:5e:9f:66:50:9f:e3:5e:77:63:c8:d5:6f:1c:71:ed:c0:
27:01:95:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:22:48 2026 by rpki-client