Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
File: 4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft (raw, json)
Hash identifier: Q7IEzogCSf9ZldeXRTM9z+dU8iN7RpnEXvisXiMW/zo=
Subject key identifier: 75:9C:75:3E:7E:E6:7F:4F:24:B9:D0:50:17:F0:5D:F5:EE:88:43:95
Authority key identifier: E0:C4:3C:A4:C4:9C:F6:52:D6:0C:CD:F3:66:E6:01:15:0D:0F:00:B9
Certificate issuer: /CN=e0c43ca4c49cf652d60ccdf366e601150d0f00b9
Certificate serial: 01A0D5027A139B2A86488AE5E55B84247636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
Manifest number: 0947
Signing time: Thu 24 Sep 2026 20:01:44 +0000
Manifest this update: Thu 24 Sep 2026 20:01:44 +0000
Manifest next update: Fri 25 Sep 2026 20:01:44 +0000
Files and hashes: 1: 4MQ8pMSc9lLWDM3zZuYBFQ0PALk.crl (hash: rQ6q+ubY+8NWiA6tYlmfZAsvqXVK38KnEZuCdq1dgLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:7a:13:9b:2a:86:48:8a:e5:e5:5b:84:24:76:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c43ca4c49cf652d60ccdf366e601150d0f00b9
Validity
Not Before: Sep 24 20:01:44 2026 GMT
Not After : Sep 25 20:01:44 2026 GMT
Subject: CN=759c753e7ee67f4f24b9d05017f05df5ee884395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:fb:4f:c0:65:24:2b:39:60:05:8b:b6:b8:
7a:f0:cc:f4:5a:a9:15:af:f5:d3:ea:2f:ac:6f:7d:
3d:e1:d0:27:f4:50:7c:38:88:1d:e9:8b:c7:2d:20:
1c:b0:91:35:7d:81:bf:13:2f:06:02:0b:7f:95:7f:
47:6e:c3:bd:ab:70:07:50:82:9b:2b:ba:76:d3:29:
b9:ef:ef:57:f3:d3:4c:18:55:18:d0:9b:fb:ee:e2:
73:08:38:6d:41:c3:6c:e5:5c:42:eb:07:44:30:da:
af:70:03:fc:da:3d:60:c6:83:54:1f:85:1b:e8:b1:
6b:71:51:13:08:fb:e4:d4:59:5f:80:fd:cb:bb:80:
b5:63:6a:c2:8d:cd:96:81:00:70:6b:62:d0:c6:57:
4a:96:fe:86:76:84:e9:3e:00:2f:5a:1c:f9:4a:1c:
30:cb:6a:30:67:0d:d2:92:54:f8:f3:b3:80:79:f9:
b4:0e:8e:5f:0e:6c:3a:5f:a7:6a:a4:78:71:ca:49:
aa:f3:c4:2f:61:92:3c:e8:6c:3e:23:48:84:3a:9e:
17:4e:5e:70:28:d6:74:88:d4:5b:63:63:8f:df:67:
dc:fa:ed:3c:66:5a:08:36:95:ef:f1:0a:da:78:95:
25:84:59:cc:36:ca:55:2d:7b:1e:89:e6:58:b0:57:
f0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9C:75:3E:7E:E6:7F:4F:24:B9:D0:50:17:F0:5D:F5:EE:88:43:95
X509v3 Authority Key Identifier:
keyid:E0:C4:3C:A4:C4:9C:F6:52:D6:0C:CD:F3:66:E6:01:15:0D:0F:00:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e6:d2:0d:99:a2:1b:cb:a2:64:df:f6:04:e5:3f:c5:77:84:
bd:af:9a:6f:e1:b2:ae:3e:66:8c:7b:60:16:ed:5d:a3:64:c7:
ae:81:38:1f:6d:5a:57:62:56:4d:8e:49:fb:ba:27:bd:0b:e1:
4f:05:6c:76:be:7a:d4:5d:1d:00:b0:1b:17:36:a4:ce:64:7b:
1c:d0:92:47:b7:4a:f3:96:fa:66:91:d1:b7:eb:eb:75:7b:82:
25:e1:e4:10:1a:c4:cd:59:34:53:e9:5d:93:14:3e:42:08:59:
bb:58:88:42:d7:73:b2:7f:56:21:f3:14:dd:1c:bb:96:ee:11:
54:18:c9:36:64:08:b4:1b:62:45:ca:33:95:95:98:0d:c0:2b:
0e:d6:d8:e7:4b:5f:aa:29:4c:d3:c3:b6:f1:10:f3:d9:99:ee:
6c:6b:64:ba:99:fc:a0:2b:7c:5f:e5:bc:93:c7:a7:a1:1f:bc:
c0:d9:bc:4f:a4:1b:ca:a3:ea:0d:be:0d:d4:d2:cf:be:82:26:
6e:ba:e6:05:f2:58:77:25:79:f5:c0:bb:96:3a:df:7c:fb:72:
89:0d:9b:14:f0:5b:9d:d5:8d:9b:14:d7:b1:75:15:76:4e:94:
00:79:d6:7e:ee:ff:30:ee:a6:a2:1d:2b:71:74:e7:d8:c7:28:
2a:2d:21:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:40:00 2026 by rpki-client