Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
File: 4oNEKXdeZVXldCSSKGJUsdqfGQM.mft (raw, json)
Hash identifier: pzIoKw/MAMwr1+/11yGb3J8mdP0Vp6y6lCiHiuNr908=
Subject key identifier: 60:EA:4D:36:AB:05:57:1C:41:7D:7C:AA:86:D3:1D:F9:CE:D8:ED:3F
Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Certificate issuer: /CN=e2834429775e6555e5742492286254b1da9f1903
Certificate serial: 01A0CD478E7F2FCBD86366B7927D96F2BF34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
Manifest number: 1325
Signing time: Wed 23 Sep 2026 08:00:13 +0000
Manifest this update: Wed 23 Sep 2026 08:00:13 +0000
Manifest next update: Thu 24 Sep 2026 08:00:13 +0000
Files and hashes: 1: 4oNEKXdeZVXldCSSKGJUsdqfGQM.crl (hash: dxDykXhrIMGdgRjqetkUnE6kkY8ZsTRyiyawBCL7wsU=)
2: uTD6khWcd31ZzRZAtfj7o4AtIHw.roa (hash: 69oOJR8ncC7sjtYVQ8SZHCT4Cq2KZtCn6uWehRleXPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:8e:7f:2f:cb:d8:63:66:b7:92:7d:96:f2:bf:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2834429775e6555e5742492286254b1da9f1903
Validity
Not Before: Sep 23 08:00:13 2026 GMT
Not After : Sep 24 08:00:13 2026 GMT
Subject: CN=60ea4d36ab05571c417d7caa86d31df9ced8ed3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f2:b9:e2:e1:a6:3e:c2:14:e5:f5:b8:84:79:
bd:85:cf:a1:90:f5:81:f1:da:eb:75:9f:0c:d7:5d:
49:cb:a3:e8:da:72:ba:ff:64:30:49:34:5c:9b:d7:
12:8d:d1:9c:19:dc:cf:1e:7b:27:b1:4a:aa:e1:88:
04:37:2b:02:91:00:bd:fe:c0:fe:b1:5e:b1:05:16:
48:16:06:97:3c:bb:f1:0f:34:a7:94:4b:4f:f2:94:
16:d9:04:4e:c7:f9:c7:7b:0d:7f:6d:d8:40:26:1d:
6a:9b:dd:47:6d:a9:3b:eb:81:d3:1d:ae:a9:50:b9:
39:04:be:30:1f:f6:d7:74:0a:cc:cf:1c:d0:2d:a6:
3a:b9:ac:79:f5:f3:2d:02:e7:0a:d2:4a:59:d5:d3:
8c:9b:84:46:a2:86:c9:87:52:d0:75:57:99:a5:6c:
07:11:00:54:4f:4f:19:35:4a:02:02:67:9d:50:06:
99:e2:75:d5:8c:0d:6e:31:2a:d2:61:7b:39:11:0c:
bd:e4:98:18:51:75:bb:6d:5a:a9:ff:1a:6d:43:16:
e7:b8:ad:8c:b8:9a:32:ac:5a:67:37:8c:84:11:df:
d1:4b:be:d7:c7:02:dc:34:41:91:db:a6:41:4b:ca:
52:80:1e:2d:14:aa:2d:3a:7f:7e:96:2e:84:61:58:
23:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EA:4D:36:AB:05:57:1C:41:7D:7C:AA:86:D3:1D:F9:CE:D8:ED:3F
X509v3 Authority Key Identifier:
keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:4e:37:48:51:7d:34:56:fd:49:4d:42:a4:41:db:49:43:73:
b3:3b:47:3f:53:80:1b:c0:35:d1:3d:31:63:60:28:77:86:28:
d9:8b:0e:ff:03:ea:3f:2f:c6:bd:e8:bd:a9:17:15:62:a5:18:
f9:af:f7:a9:10:2f:f3:2c:81:c6:2b:60:28:61:53:fc:f3:ac:
d9:17:35:6f:a0:3b:40:b3:b0:8f:6d:4c:1b:6a:61:0b:5f:2f:
5c:be:04:48:3a:35:04:29:62:c8:e5:6c:17:70:5d:be:2b:36:
8a:ae:a6:42:fb:70:65:4c:d8:e8:28:10:35:cd:ab:1f:0c:86:
ce:c8:ef:8c:8f:d3:ba:17:84:18:83:de:eb:44:17:b8:9a:98:
a4:a3:a9:3b:44:01:12:c0:13:37:68:de:3c:5e:ee:5e:6b:ee:
b1:4a:68:81:41:14:e6:65:56:18:e7:7a:a7:3e:4d:af:09:17:
fe:17:5f:6e:4d:04:e4:e1:11:73:1d:a6:e7:25:e8:8d:80:b0:
4a:1d:86:b0:10:cf:22:97:90:d7:67:57:67:11:6e:c8:7d:b8:
36:8b:cc:bb:22:e2:ae:56:c1:8a:29:1e:8c:58:a9:e4:76:47:
26:98:e9:00:bd:82:06:54:85:e7:b6:ee:11:2a:26:da:c7:d3:
6a:48:12:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:15:52 2026 by rpki-client