Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
File: 4fP23EYQ9sm7qkUyERc45JO2rfA.mft (raw, json)
Hash identifier: oGgDQzOZ2hXtS5cU9rJbcnUugT2EpWH488xhSJkwTkk=
Subject key identifier: D4:22:C7:61:B0:F0:C3:3E:ED:1B:5C:2D:3A:4A:0D:E1:DB:63:11:3F
Authority key identifier: E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
Certificate issuer: /CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Certificate serial: 01A0D34A8C8EA902A9F50084BBCA56E887BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
Manifest number: 086F
Signing time: Thu 24 Sep 2026 12:01:13 +0000
Manifest this update: Thu 24 Sep 2026 12:01:13 +0000
Manifest next update: Fri 25 Sep 2026 12:01:13 +0000
Files and hashes: 1: 4fP23EYQ9sm7qkUyERc45JO2rfA.crl (hash: 1Dc4pN38tZ4q/FOkrCt4bg36TRbENc7qLlFhu4kUq3w=)
2: Ev9DIl3UcKO2QOG-vO3Xbh6afQ8.roa (hash: imyx+MqhErllzPgURUbLOjPqBlQ0hxwFitun79GI6bQ=)
3: pIH-PyJ-S7KYRBMhx3HzyVyBgpM.roa (hash: 1cLs+Wdw+wnP8h4XUUBLHG3PCH085TENzzZDNYgitoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:8c:8e:a9:02:a9:f5:00:84:bb:ca:56:e8:87:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Validity
Not Before: Sep 24 12:01:13 2026 GMT
Not After : Sep 25 12:01:13 2026 GMT
Subject: CN=d422c761b0f0c33eed1b5c2d3a4a0de1db63113f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:e8:b4:4f:1a:c2:c8:e3:cf:e8:e5:df:b2:
bc:29:42:0e:5d:0f:98:b3:dc:bc:be:6f:19:8e:5d:
82:6c:07:d1:c2:e7:7e:5c:78:f8:82:1a:36:db:09:
44:ab:af:b2:be:de:5a:de:a4:4c:49:c0:7f:32:8d:
3e:af:ac:f7:ea:fd:97:7e:28:ba:5b:86:84:97:8e:
ae:03:35:20:37:60:fa:15:2d:9b:42:c3:6f:ae:8e:
88:b1:ff:ee:74:28:f5:fb:39:37:c9:1c:2c:8b:3a:
be:1a:a9:22:af:13:86:bf:9f:85:17:50:23:91:10:
cd:ea:48:f5:76:5f:dc:b0:4d:9f:c6:61:42:53:b6:
6b:60:69:4b:cf:46:ca:97:39:2f:6d:98:b8:2f:dd:
eb:b7:17:6c:55:7c:56:67:a3:14:83:66:5c:a7:b3:
b6:73:7f:c9:4b:62:d2:ef:ce:69:f2:1d:86:4c:aa:
68:dd:6d:f4:45:f5:3d:87:f3:e6:3b:bf:cc:e6:17:
de:5f:5c:14:a9:5f:cc:01:a0:f9:a5:78:f4:5f:fd:
aa:10:74:a0:eb:2f:df:1f:83:6b:81:54:93:09:a1:
0c:5d:e4:2b:4c:4d:59:b8:83:73:92:e3:fd:d6:74:
c8:f9:19:34:d0:c7:67:36:35:5f:35:e9:aa:98:ea:
46:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:22:C7:61:B0:F0:C3:3E:ED:1B:5C:2D:3A:4A:0D:E1:DB:63:11:3F
X509v3 Authority Key Identifier:
keyid:E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:86:0b:b0:ae:e3:13:cf:da:61:5f:63:e0:79:3d:d7:70:3c:
f3:b8:d0:63:2f:28:ee:1c:83:83:db:d5:73:fb:21:9f:73:2b:
20:f3:6f:db:e7:a3:b4:d2:2e:09:97:a3:4e:e7:4c:80:d5:06:
83:4f:92:47:25:3f:5c:e0:29:d7:2f:0b:6b:d1:ee:01:99:f8:
42:40:4b:58:f9:b0:92:4c:d7:a2:94:e1:23:91:2b:15:af:db:
66:b1:fc:87:a9:64:91:0e:cb:20:95:d6:13:33:cd:3c:1b:e7:
1e:d7:14:7b:d9:aa:fa:d1:59:e4:80:7e:c1:73:26:a3:64:14:
69:dc:92:6a:0d:26:6c:f7:a8:7f:77:1b:ac:40:bd:41:d4:28:
b1:68:5d:dd:47:7a:16:4f:3e:aa:81:0e:a2:cd:ac:8d:9b:ee:
30:3a:cb:9e:2d:ba:de:a9:0e:5d:41:49:c2:ee:f9:b5:cc:83:
df:ec:36:28:2f:a2:f3:8e:99:91:64:a6:a0:6c:73:90:a9:51:
9a:6a:3c:20:1b:e7:ff:ef:bf:06:36:68:76:de:09:10:94:cf:
09:52:fe:c0:73:4f:04:5f:38:1b:40:da:60:b1:5b:3a:a2:ec:
30:ec:7f:9d:42:4e:17:5d:df:e7:32:8e:dd:3b:6d:80:1f:62:
0a:28:5a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:53:42 2026 by rpki-client