Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
File: 4OkqeIpBBX0ndk8W87HSo-9jRdY.mft (raw, json)
Hash identifier: p8x+W7xyqeKmH3gBtJCXIFGHT0xovwoYgCLyrTrKfMA=
Subject key identifier: 54:71:BF:F1:D5:42:99:65:F1:F2:56:9A:98:21:6E:4C:61:46:9F:B1
Authority key identifier: E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
Certificate issuer: /CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Certificate serial: 01A0E2BDAD13320C1227C3FECC3AE943D71A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
Manifest number: 1A75
Signing time: Sun 27 Sep 2026 12:01:16 +0000
Manifest this update: Sun 27 Sep 2026 12:01:16 +0000
Manifest next update: Mon 28 Sep 2026 12:01:16 +0000
Files and hashes: 1: 4OkqeIpBBX0ndk8W87HSo-9jRdY.crl (hash: 5SIP3bXxvclkRACZws+TdaEv7vAO6LeFD3lvaJLRZIE=)
2: Dv6DzYWC8QD9B_MZto_ESNK4j6k.roa (hash: punip1kHRpKApQYHrsUHwLPlb8qszTQ5w8o2U1ESN+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:bd:ad:13:32:0c:12:27:c3:fe:cc:3a:e9:43:d7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Validity
Not Before: Sep 27 12:01:16 2026 GMT
Not After : Sep 28 12:01:16 2026 GMT
Subject: CN=5471bff1d5429965f1f2569a98216e4c61469fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d8:48:82:d3:a8:ef:63:63:70:3c:11:2b:b6:
09:9e:3e:50:15:52:f5:21:09:45:b7:d6:27:34:75:
81:57:87:e1:8d:2f:86:9f:c6:98:92:f4:0d:83:6d:
03:e1:dd:21:0f:16:79:b2:ca:8c:f4:5b:d8:cc:ff:
11:90:9a:01:a3:7a:0e:43:c5:7c:49:4b:dc:bf:7c:
85:5e:f7:a1:9b:af:8c:18:dd:80:ac:ec:a8:8a:ea:
c7:18:e7:08:d2:a6:82:63:16:bb:a0:c8:d6:49:15:
cb:6e:c5:12:b0:1e:5a:e9:8c:81:19:b4:24:c1:1f:
fc:b6:ea:e2:6c:7f:7a:dd:b2:7b:2a:f7:fa:5e:f9:
8f:29:d8:fc:a6:50:35:83:2d:d2:79:37:92:e8:dd:
4e:85:e0:47:9f:42:5d:1f:94:d4:cb:96:a3:87:27:
6e:b0:81:a2:4d:e3:18:f4:77:f9:6d:35:d3:de:1e:
82:77:89:9b:7b:cc:75:15:2b:ed:06:e4:d5:13:e4:
53:5f:e8:bd:7d:c3:3a:30:fe:a3:8b:9b:88:16:c1:
e5:5a:68:1a:37:32:ec:2d:15:4e:d9:2b:b1:a4:9e:
10:0e:e5:b2:a4:1e:2c:55:c3:0a:2b:52:2f:b2:65:
5a:5b:08:33:6c:53:41:40:c9:c0:a2:51:99:20:0a:
f3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:71:BF:F1:D5:42:99:65:F1:F2:56:9A:98:21:6E:4C:61:46:9F:B1
X509v3 Authority Key Identifier:
keyid:E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9d:cb:51:c4:56:6a:a5:3c:c5:f3:69:96:19:c7:71:3a:19:
60:f1:7c:5e:60:09:56:27:76:0b:46:14:06:68:c1:46:d3:05:
cb:d4:cd:17:15:6a:ab:09:f3:ea:c5:1f:47:53:50:00:d7:ab:
5e:9b:c8:53:0e:46:57:f6:4b:00:15:d0:f5:35:5b:bc:6a:7b:
0e:3a:5d:fa:c5:07:21:c7:e4:56:b7:19:5e:88:a1:1b:f1:21:
f9:82:5e:44:1d:f2:7b:f9:c6:05:a5:e0:47:77:7a:57:12:94:
2b:42:bf:d5:54:d5:bb:07:59:c7:79:6b:02:d8:0a:89:90:fb:
54:68:4c:fc:df:f4:17:89:d9:73:26:d3:f3:5d:64:8b:b9:63:
56:4c:de:02:6a:47:62:9a:ab:10:f5:30:dd:6d:0a:da:37:58:
29:6e:5b:6a:43:ba:f3:38:e6:bd:60:ce:dd:81:90:97:82:5c:
3e:6a:f9:df:04:4e:7b:66:ef:15:0e:3f:17:b4:ef:e2:b2:89:
dc:45:c9:c4:f7:c9:04:bb:60:e8:54:0b:84:33:93:b2:2d:4a:
94:84:75:9e:42:47:34:c7:f5:b9:f1:b8:c7:00:8b:e8:9d:c6:
98:5e:25:18:50:7f:63:df:a9:f7:f3:f5:46:e9:65:de:49:d1:
5b:58:b1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:28:54 2026 by rpki-client