Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
File: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft (raw, json)
Hash identifier: lGU45HWycx5JPVd8WhQQzwv2FiVRZR4wHU+XWikG70o=
Subject key identifier: 18:0D:70:D5:33:54:63:64:D2:B2:DA:85:D3:C3:CA:83:E0:DD:B6:21
Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
Certificate issuer: /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Certificate serial: 01A0D3F00EA02C1DECBCBDF3A5D704F885A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 15:01:59 +0000
Manifest this update: Thu 24 Sep 2026 15:01:59 +0000
Manifest next update: Fri 25 Sep 2026 15:01:59 +0000
Files and hashes: 1: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl (hash: xGyHjG8holxpHBFh1gx/IxHoJNHiJnnfj7wiLUzeohA=)
2: Ut_nk45-PrVxes0DMrlE6POGcXc.roa (hash: oo94Gr3/o7iKPPOqsqmwUWcuIt1lQW+gn6zRbGd06vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:0e:a0:2c:1d:ec:bc:bd:f3:a5:d7:04:f8:85:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Validity
Not Before: Sep 24 15:01:59 2026 GMT
Not After : Sep 25 15:01:59 2026 GMT
Subject: CN=180d70d533546364d2b2da85d3c3ca83e0ddb621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c4:e5:42:0d:e6:1a:f7:3f:ed:25:77:db:47:
f5:a5:8d:cc:88:f8:61:49:5f:0f:9d:0c:6a:15:1f:
c3:43:b0:9e:68:e6:6d:4a:11:74:f7:47:8d:73:0e:
9a:47:e5:f4:70:af:24:8f:e1:f8:bf:60:25:60:c7:
bf:80:06:c1:45:d9:d0:c2:9b:36:05:fc:6c:8c:28:
20:b6:ab:fc:d9:13:7a:52:49:49:3d:1c:87:32:e5:
c8:d6:2c:f0:05:3e:7c:38:fa:89:ab:3a:97:46:ba:
79:e5:d9:cb:94:0d:cb:3f:b6:ca:a2:9e:ff:bf:28:
88:62:70:a1:ee:94:7c:32:54:ef:29:5b:ac:96:d6:
88:f5:95:c0:41:35:90:35:14:e8:d6:a9:1a:89:ad:
00:c2:5a:a8:46:62:c0:04:76:c0:76:31:36:15:15:
0c:b3:cd:0f:fb:a1:0b:03:fb:d6:42:79:9d:9f:7d:
35:c7:84:6b:fe:c0:9a:2b:ff:f8:bd:af:e4:ad:92:
1e:76:ec:a7:1e:20:f0:e8:46:bf:5a:c3:bc:b5:2a:
3f:c6:55:1c:3f:96:a4:73:d2:14:8e:d9:19:f0:ae:
ad:0c:89:0c:fb:9a:23:ff:5c:3b:74:79:56:cc:d7:
39:14:7c:ce:70:42:42:1d:2d:71:d2:67:32:28:ea:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0D:70:D5:33:54:63:64:D2:B2:DA:85:D3:C3:CA:83:E0:DD:B6:21
X509v3 Authority Key Identifier:
keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c4:09:37:b7:b4:88:ac:f3:17:a8:e1:ee:86:7e:12:49:7c:
14:54:7e:fb:c0:db:5a:bc:da:f1:04:4c:ec:1a:b5:ee:5d:35:
af:33:40:39:63:78:13:4a:5f:d6:67:6f:c6:fc:13:36:41:2c:
ee:ab:2d:41:a1:64:f7:c9:cb:17:aa:7c:03:10:83:b1:31:6e:
64:7a:92:19:45:19:a5:48:3c:85:e1:63:57:3f:e1:93:b5:a2:
ce:d8:7b:71:ea:cd:4b:6c:7f:c7:fe:e9:07:6c:ca:f0:d4:7b:
37:88:ef:6c:04:4d:66:58:6c:58:30:fa:a5:2e:48:67:36:52:
fb:e5:6e:4d:38:79:54:b1:dc:aa:7b:88:80:6b:93:63:c0:e5:
fa:37:72:2b:4e:29:08:b0:49:fa:ac:6f:26:ab:a8:52:24:c7:
d9:34:9b:06:b2:fd:31:a2:1c:4b:53:02:e0:76:35:15:c4:5a:
ef:4a:e8:b8:fb:89:1e:f2:a9:a5:19:c0:89:c9:0c:b1:db:36:
42:5c:ad:4e:85:9c:56:4b:7d:c2:4e:69:1a:1d:5b:5f:ae:20:
ee:f8:0c:4d:d1:d2:1d:6f:6c:15:99:d3:76:63:4f:26:fd:41:
e1:93:1c:24:27:ed:a8:6b:60:f1:22:af:73:86:6d:37:5c:9a:
90:19:eb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:47:56 2026 by rpki-client