Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
File: 4_GcxeONj5wdZUcXdmX4khHeyJk.mft (raw, json)
Hash identifier: WdV6sL5/UZQ07ofmsohOO89L3+/qR0qZXb2U5Nf1iWA=
Subject key identifier: 22:69:E1:2B:47:AD:82:FA:70:5E:17:5E:B9:2D:11:38:FD:B8:3D:41
Authority key identifier: E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
Certificate issuer: /CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Certificate serial: 01A0D2DEB4AE7DC6890E3CB11D4C5B58B1DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
Manifest number: 12DB
Signing time: Thu 24 Sep 2026 10:03:25 +0000
Manifest this update: Thu 24 Sep 2026 10:03:25 +0000
Manifest next update: Fri 25 Sep 2026 10:03:25 +0000
Files and hashes: 1: 4_GcxeONj5wdZUcXdmX4khHeyJk.crl (hash: C5S5Dt/JfEVvrBRp8aHleZ67Z9Th9eqqfolk5dsOfyE=)
2: 6jWcTCuvnIbvDAxZuWYVZRLhDLU.roa (hash: LkG1rsHegbWJdLC+vukY1wOXCMcnkOUFAcxz3/K326I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:b4:ae:7d:c6:89:0e:3c:b1:1d:4c:5b:58:b1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Validity
Not Before: Sep 24 10:03:25 2026 GMT
Not After : Sep 25 10:03:25 2026 GMT
Subject: CN=2269e12b47ad82fa705e175eb92d1138fdb83d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7c:71:9e:9d:d0:3e:6d:08:df:a6:73:9e:71:
f5:71:33:4c:c7:de:4f:f0:2f:dc:bf:73:7d:a0:b5:
8c:88:ab:06:e2:fc:69:f9:e6:fc:1b:3a:32:f0:c4:
d8:75:8a:7f:53:6d:87:1a:a6:68:4b:76:97:b9:a4:
41:30:1e:6c:3f:02:cd:3b:f1:1d:49:7b:56:4a:e8:
9f:db:4d:7a:37:73:f4:9a:65:4f:7a:bd:18:87:fc:
74:76:9d:b2:03:ec:f0:70:e5:84:d0:5a:7c:23:a5:
7f:c2:5d:15:3b:d3:86:b5:f2:8a:1d:60:67:87:bd:
b4:45:b1:5e:76:93:83:62:37:73:57:da:dd:50:a8:
c2:7a:19:56:33:b2:9d:d0:96:8e:3d:5b:31:d1:90:
4e:cb:78:69:b9:78:4a:19:69:75:fc:6b:34:ad:89:
18:5c:c7:30:51:bd:be:fa:7e:3c:f1:22:ef:f6:4d:
7c:0c:f2:3b:14:c5:13:5e:e2:a6:37:0f:6d:06:46:
1c:10:27:64:7c:2e:af:f2:0b:40:a2:33:25:01:56:
3b:49:bd:42:4e:84:70:9d:94:ae:6f:9b:8b:2b:fd:
06:7c:24:e8:5b:01:de:72:e9:d2:80:8d:ba:07:33:
ae:42:b9:d8:4e:df:a9:31:b6:85:2a:14:c0:14:88:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:69:E1:2B:47:AD:82:FA:70:5E:17:5E:B9:2D:11:38:FD:B8:3D:41
X509v3 Authority Key Identifier:
keyid:E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:56:4d:46:a3:86:ff:2f:c7:39:81:08:d3:ae:06:24:43:bb:
62:9a:e9:49:cb:1c:94:77:1c:3d:26:c7:9c:26:aa:80:9a:4a:
e6:f4:08:97:5a:54:a2:99:77:e3:e5:b7:9f:6a:ad:94:0e:4c:
3d:32:70:8b:f3:ac:49:d6:87:9f:d0:3d:9b:e6:69:a5:11:ac:
1f:01:24:d5:0b:57:f8:3a:63:4e:47:7f:88:c0:86:98:24:2a:
c8:84:5d:a2:06:8f:a3:7f:93:59:36:a4:82:a5:a7:32:7d:87:
28:ad:ab:26:cd:07:78:82:21:fb:7a:a3:5b:6c:d5:39:b8:f1:
1a:33:3f:22:b3:9d:3a:79:db:a5:df:49:ba:08:bb:84:d6:a9:
47:32:ec:31:48:0e:61:58:9b:4b:2d:f0:f9:c9:8a:35:aa:15:
cb:da:ec:82:86:15:9f:cd:01:4a:02:e9:73:b7:7f:c3:75:e0:
b5:93:b1:cb:c8:5c:05:c1:bc:2e:4c:54:1d:cf:39:6b:5f:ec:
65:66:aa:bb:78:9b:bc:1e:06:74:a2:01:ae:29:44:8b:49:ee:
79:1c:31:c2:d3:43:ba:6e:ef:7f:60:16:19:58:66:cf:46:d1:
f5:3b:59:13:57:3c:da:d3:c5:34:4f:6d:dd:16:b3:7e:1d:fc:
53:1f:7b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:59:39 2026 by rpki-client