Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/5721bf-fea1-462a-b824-62419f7dc8ed/1/4NlHs-5skpyONL_R-g3IfGkQNp0.mft
File: 4NlHs-5skpyONL_R-g3IfGkQNp0.mft (raw, json)
Hash identifier: 70o9dOnJw5rgaE5CFShzK381PI2HaBBVV0DamO3zaTk=
Subject key identifier: 90:45:8D:35:32:11:DD:90:7D:29:F3:5D:B4:C7:37:56:A5:86:2C:1B
Authority key identifier: E0:D9:47:B3:EE:6C:92:9C:8E:34:BF:D1:FA:0D:C8:7C:69:10:36:9D
Certificate issuer: /CN=e0d947b3ee6c929c8e34bfd1fa0dc87c6910369d
Certificate serial: 01A0D0B6AEE8C4D0A0F85C54BAF5C36BC19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NlHs-5skpyONL_R-g3IfGkQNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5721bf-fea1-462a-b824-62419f7dc8ed/1/4NlHs-5skpyONL_R-g3IfGkQNp0.mft
Manifest number: 2D
Signing time: Thu 24 Sep 2026 00:00:28 +0000
Manifest this update: Thu 24 Sep 2026 00:00:28 +0000
Manifest next update: Fri 25 Sep 2026 00:00:28 +0000
Files and hashes: 1: 4NlHs-5skpyONL_R-g3IfGkQNp0.crl (hash: Q6XHW57jXBNWo9149Pgc58XUDW6Neig0ZUDoXbX8LTA=)
2: ngLMmxH0mPtVIvwYWTm6j10aGug.roa (hash: 5O9pM5+qJGLp748CK2y1c41DjZSF+u/cMKka4rHjVh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5721bf-fea1-462a-b824-62419f7dc8ed/1/4NlHs-5skpyONL_R-g3IfGkQNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5721bf-fea1-462a-b824-62419f7dc8ed/1/4NlHs-5skpyONL_R-g3IfGkQNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NlHs-5skpyONL_R-g3IfGkQNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:ae:e8:c4:d0:a0:f8:5c:54:ba:f5:c3:6b:c1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d947b3ee6c929c8e34bfd1fa0dc87c6910369d
Validity
Not Before: Sep 24 00:00:28 2026 GMT
Not After : Sep 25 00:00:28 2026 GMT
Subject: CN=90458d353211dd907d29f35db4c73756a5862c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:83:24:cc:cc:82:ed:81:f7:f4:ef:95:6f:60:
c9:46:6f:9c:f7:7a:31:e6:67:8d:95:fd:8e:4c:e2:
e7:db:6e:06:d7:47:24:09:0a:54:a8:99:28:6b:74:
97:ef:8b:df:5e:92:13:0c:cd:41:ac:1e:f8:cd:f6:
ee:ee:81:b5:b9:a9:4a:10:f5:3d:41:bc:0b:5a:fd:
ec:d5:9a:bf:a6:61:bb:6b:3a:ac:58:df:f8:7a:c8:
6c:0b:e4:33:99:2b:b4:9f:c9:d0:0c:f2:b0:1c:52:
eb:8e:de:6f:91:b2:e2:ee:a0:47:d8:f7:d9:64:9b:
49:a1:5e:6c:c4:1a:1d:7d:33:55:e9:1a:0b:56:b1:
96:1b:a6:04:51:d0:b8:c0:b8:75:eb:e4:f1:0f:9e:
59:09:b5:05:5f:b2:ff:79:30:f7:98:ec:e4:fc:7e:
d5:82:ba:09:e3:b9:2d:a6:b6:d5:e2:5e:b4:0d:72:
5b:b2:e0:5b:f5:fb:e7:fd:5d:01:ea:d1:44:2a:e9:
00:f4:6b:6d:48:a7:74:f1:c9:fb:f0:9c:a1:a3:88:
20:ab:e8:e3:c6:ee:a4:fa:62:58:f0:13:be:c0:6c:
4c:9f:a1:d2:5c:33:cb:05:00:e4:86:c5:6b:5b:39:
b0:f0:b5:e0:89:e2:02:72:77:7f:bc:ea:3d:68:2e:
fa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:45:8D:35:32:11:DD:90:7D:29:F3:5D:B4:C7:37:56:A5:86:2C:1B
X509v3 Authority Key Identifier:
keyid:E0:D9:47:B3:EE:6C:92:9C:8E:34:BF:D1:FA:0D:C8:7C:69:10:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NlHs-5skpyONL_R-g3IfGkQNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5721bf-fea1-462a-b824-62419f7dc8ed/1/4NlHs-5skpyONL_R-g3IfGkQNp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5721bf-fea1-462a-b824-62419f7dc8ed/1/4NlHs-5skpyONL_R-g3IfGkQNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:10:e9:b7:da:81:f1:c6:46:a6:f7:e2:7a:7f:bf:8c:23:28:
c4:50:07:5a:f4:8b:ba:8f:73:0e:96:75:84:ef:fd:a8:33:d0:
02:9d:44:9b:2c:6f:5d:07:1d:d1:2f:81:08:b6:76:b7:a3:2a:
15:d2:7f:a8:07:9f:75:3c:b9:8f:0b:89:11:e5:8b:41:07:99:
e2:f9:38:62:fc:9c:c0:67:1c:ee:c0:ce:66:94:12:d3:8d:ed:
64:3c:b5:a7:5d:80:75:eb:7f:c5:9d:9f:bb:1f:9a:c2:a0:ba:
73:71:f6:ef:b6:f0:97:65:33:7d:34:e8:b3:89:9f:9b:28:be:
d5:9a:b3:c6:67:d0:bd:b0:57:ca:f4:55:46:ac:1c:e2:2d:15:
99:90:6d:1f:5c:a2:52:05:ec:fa:92:d5:b8:7b:a6:64:8f:ef:
32:e3:c5:48:86:fa:f9:6e:23:38:7a:bb:8c:4c:27:cb:bf:1f:
29:7b:88:a3:b3:98:99:41:3f:0c:eb:e0:24:90:4d:e2:d3:d5:
3f:ae:54:64:a8:9a:90:d3:d7:58:79:8f:49:a8:36:12:b9:c4:
da:fb:7c:5a:59:b5:01:16:a4:cc:8f:29:5f:2d:47:1f:03:1b:
f7:f9:3c:5e:27:fa:b7:11:2f:2f:e2:18:72:e9:f5:b1:4c:38:
ed:de:59:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:11:39 2026 by rpki-client