Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/4tjFhzGeOswh3wozQeUSXjdNuiI.mft
File: 4tjFhzGeOswh3wozQeUSXjdNuiI.mft (raw, json)
Hash identifier: u5lIMDZA1tuSKQeRN8hEkBLOavgXPE5yD8Wo9CsNOJI=
Subject key identifier: 5B:B9:0B:2F:A0:98:73:76:60:2D:F2:3C:20:29:CC:4E:D9:29:53:F1
Authority key identifier: E2:D8:C5:87:31:9E:3A:CC:21:DF:0A:33:41:E5:12:5E:37:4D:BA:22
Certificate issuer: /CN=e2d8c587319e3acc21df0a3341e5125e374dba22
Certificate serial: 01A0CA4785FCDD6229ED5E8B7BF5DCF4540E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tjFhzGeOswh3wozQeUSXjdNuiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/4tjFhzGeOswh3wozQeUSXjdNuiI.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:01:19 +0000
Manifest this update: Tue 22 Sep 2026 18:01:19 +0000
Manifest next update: Wed 23 Sep 2026 18:01:19 +0000
Files and hashes: 1: 4tjFhzGeOswh3wozQeUSXjdNuiI.crl (hash: Qrh9aU6OofpSW9gD6IM+eQw902AvbCfC47JPkjg/nwM=)
2: zbeKXEtBHivuXewjvv-PutuCHTI.roa (hash: cARCYTy36klUolDqP5aOrJ3kV5YBXwe6iec5qzqNP8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/4tjFhzGeOswh3wozQeUSXjdNuiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/4tjFhzGeOswh3wozQeUSXjdNuiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tjFhzGeOswh3wozQeUSXjdNuiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:85:fc:dd:62:29:ed:5e:8b:7b:f5:dc:f4:54:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d8c587319e3acc21df0a3341e5125e374dba22
Validity
Not Before: Sep 22 18:01:19 2026 GMT
Not After : Sep 23 18:01:19 2026 GMT
Subject: CN=5bb90b2fa0987376602df23c2029cc4ed92953f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:ff:2e:c2:c9:70:54:2d:8b:23:e7:91:d0:
19:fc:25:36:1f:d2:21:00:aa:b3:ae:71:4e:b6:77:
40:88:f7:ad:7f:14:14:f3:fd:f0:80:14:06:01:05:
c9:72:df:09:81:c4:7f:e2:1d:77:57:51:de:19:2c:
4a:7f:5c:72:c4:f4:04:9b:83:d0:2b:98:bc:52:da:
1b:b1:4a:83:2d:fc:f3:96:af:fb:a0:98:62:22:b3:
19:2b:e8:3d:f7:c7:a6:dc:29:6f:dd:c2:91:cc:8b:
fb:b3:5c:5b:b4:7c:93:21:09:98:9f:a5:49:3b:f3:
b6:bb:fe:e0:3c:ca:74:f8:74:52:5c:69:11:4a:06:
3e:32:b7:d0:f6:58:1f:e9:6c:c7:b6:d5:bf:a4:a3:
e4:b7:5a:f4:27:49:6f:63:02:5f:04:57:ac:cf:f1:
7d:4f:d7:1e:d1:2c:5e:4c:95:10:d3:06:11:7b:f4:
01:ca:62:77:8d:3d:e9:14:fa:61:d2:4c:73:37:35:
94:7c:b1:74:2b:9c:a3:0c:1c:4a:40:4e:71:8b:b7:
87:f5:b7:93:a4:a1:0d:80:6e:63:61:6c:8f:80:da:
4f:20:dc:39:ef:f7:9b:08:4d:d0:0c:cf:ea:8e:c2:
d5:a4:43:d6:bb:dd:25:bc:3c:bb:9b:f7:88:0c:d9:
20:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B9:0B:2F:A0:98:73:76:60:2D:F2:3C:20:29:CC:4E:D9:29:53:F1
X509v3 Authority Key Identifier:
keyid:E2:D8:C5:87:31:9E:3A:CC:21:DF:0A:33:41:E5:12:5E:37:4D:BA:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tjFhzGeOswh3wozQeUSXjdNuiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/4tjFhzGeOswh3wozQeUSXjdNuiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/4tjFhzGeOswh3wozQeUSXjdNuiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:1c:3c:8c:7f:8b:5e:15:8f:15:a4:18:40:69:8e:7a:89:ab:
2b:d6:43:6b:a7:44:51:a1:86:52:de:74:94:7e:84:75:74:36:
cf:4a:ea:ca:56:49:0e:6f:53:79:06:58:90:b8:9e:c0:c5:12:
d5:94:f3:b0:be:b5:8d:6d:df:1e:ac:8a:e3:bd:5b:19:43:de:
0b:5f:3b:00:fe:b5:eb:21:fc:21:56:70:b1:be:fa:e5:85:1d:
ae:ce:b0:ba:c0:a8:87:b5:ca:3c:58:4f:0d:2f:30:52:51:55:
43:c1:b3:ad:b4:39:b5:7d:cc:08:82:c1:84:c3:1b:af:a5:17:
26:b8:76:d1:5e:5c:00:d8:98:4f:6d:45:cb:61:16:66:0c:74:
be:93:d4:0e:30:4a:2a:0c:7b:5c:4e:68:24:62:af:52:d7:dc:
10:f8:5f:ad:ee:60:d1:13:f9:10:98:b5:3e:f4:38:bf:e8:a4:
06:55:42:22:84:de:40:84:9a:c1:af:b6:2c:48:7d:ee:bb:eb:
a6:2f:68:a1:be:fd:9e:bc:f6:92:76:aa:ca:cd:b7:6e:53:09:
cb:1f:2d:c0:4c:96:22:94:30:31:5c:61:06:da:95:bb:70:e5:
60:25:2f:cc:f0:87:9b:df:81:50:4b:2f:59:b2:f8:a1:d0:aa:
2b:06:9e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:45:12 2026 by rpki-client