Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
File: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft (raw, json)
Hash identifier: r/9hLVxcYBsVuWNdnMY9WVP/1ypsHhdYgOce8M1f4Ko=
Subject key identifier: CE:2B:7F:58:14:4F:FC:E4:37:21:64:9F:2A:27:7C:83:78:27:F0:80
Authority key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
Certificate issuer: /CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Certificate serial: 01A0E061BF1467E90EF1BD712610C07CD2BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
Manifest number: 1908
Signing time: Sun 27 Sep 2026 01:01:37 +0000
Manifest this update: Sun 27 Sep 2026 01:01:37 +0000
Manifest next update: Mon 28 Sep 2026 01:01:37 +0000
Files and hashes: 1: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl (hash: rnFNLeLpKiExj4b3f90MWTmnywsHBN667VWEkhqp0Zs=)
2: r2j9KB_d9qlo6DM4VIzlnk-FGnA.roa (hash: EzpW7vs8EG39ibzlPvK/9rhPpBxeklGzxbYhWxFufes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:bf:14:67:e9:0e:f1:bd:71:26:10:c0:7c:d2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Validity
Not Before: Sep 27 01:01:37 2026 GMT
Not After : Sep 28 01:01:37 2026 GMT
Subject: CN=ce2b7f58144ffce43721649f2a277c837827f080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:fc:c9:db:8a:00:69:0d:0f:41:a0:61:36:
49:82:cb:57:23:27:95:39:77:d6:01:04:21:02:3d:
0d:a6:2b:e8:a4:57:45:18:60:90:11:75:e5:be:3e:
62:19:b9:ac:84:08:a8:d2:be:9c:2b:2a:20:88:d5:
74:bb:af:fc:6a:ad:fe:f8:7f:20:af:ab:15:2f:d1:
49:62:7b:4b:17:79:a4:b8:b4:14:ed:05:54:ba:27:
5d:bc:58:c8:29:9a:b1:60:9b:28:0f:6c:6c:a2:94:
74:9b:80:b0:be:0d:88:b8:95:01:f7:a1:6d:71:8a:
d0:80:36:12:37:ee:f9:dc:26:b6:1a:cd:13:af:85:
55:53:30:3d:a6:ad:81:07:7f:1b:70:b1:a9:6c:d1:
88:81:f1:31:e8:8d:a1:d0:aa:bd:0a:91:04:53:3d:
24:17:29:c7:f8:5a:13:40:1f:f2:00:21:21:db:22:
fa:ee:e4:41:2b:ec:39:7f:bf:46:16:f1:ec:04:a6:
f0:60:ee:74:a4:0c:61:dc:3e:9b:29:31:2e:6c:b8:
14:3c:df:fb:2c:0c:05:68:c1:38:c5:e7:76:a4:09:
0a:73:02:4d:df:50:85:eb:f5:4d:0c:5b:fb:f2:09:
64:c6:fd:e9:c1:1d:3e:41:04:44:0f:8b:72:62:2e:
34:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2B:7F:58:14:4F:FC:E4:37:21:64:9F:2A:27:7C:83:78:27:F0:80
X509v3 Authority Key Identifier:
keyid:E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:3c:d9:59:25:bf:df:bb:61:21:fc:38:1e:42:2a:2c:18:e2:
4c:28:5d:0d:d9:52:01:fd:68:bd:06:e6:67:44:1e:c3:0d:b9:
82:95:ff:99:ef:6b:67:18:db:65:fc:78:cf:cf:f3:c6:ae:38:
a8:df:88:2d:3a:f4:cc:42:e5:8d:1a:b4:2a:53:bc:a3:aa:eb:
b5:fe:5d:a8:27:7e:ed:df:c6:e5:ab:a5:fa:a8:04:3c:f6:88:
46:6b:33:d7:47:f2:44:ff:c4:14:67:c6:8c:49:e6:64:67:91:
5b:ab:4e:2b:07:1c:66:2e:0e:02:ce:40:f5:50:ec:84:4a:0d:
2a:70:33:4a:27:b6:07:6b:90:27:e3:42:fc:d1:23:47:03:85:
8f:97:99:4b:85:84:ed:ee:59:6a:a4:dd:eb:72:7e:46:70:72:
6f:8a:90:ef:a9:a3:08:6b:23:06:60:4d:7f:22:d5:e9:b2:3f:
e1:76:e9:1f:55:9f:b4:93:0c:bb:9c:d0:0f:d8:52:92:b6:41:
a2:95:32:dd:a0:68:74:c3:43:c1:41:88:c9:42:a5:8f:51:30:
90:63:2c:71:be:88:b3:71:11:35:22:31:1e:bc:bb:6f:cd:44:
6e:dd:6c:1d:cb:58:7a:93:aa:4f:c3:32:c0:33:eb:29:9b:8c:
a1:2f:4f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:50:44 2026 by rpki-client