Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
File: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft (raw, json)
Hash identifier: e01UbYjhDvVMe+Y5q8hRA3ezjsRjwmFXVuFdFt0BSaw=
Subject key identifier: B8:F0:80:78:22:C4:38:EE:F1:92:2B:79:2B:DF:5E:77:16:CE:46:25
Authority key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
Certificate issuer: /CN=e039649faa8f9de3dae91be799a27e2ca6628789
Certificate serial: 01A0D4CAD082C20C2300A7578160470E4B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
Manifest number: 1A74
Signing time: Thu 24 Sep 2026 19:00:56 +0000
Manifest this update: Thu 24 Sep 2026 19:00:56 +0000
Manifest next update: Fri 25 Sep 2026 19:00:56 +0000
Files and hashes: 1: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl (hash: ws2f76bu2/LQtccuigNM0JDxovNkrUvkG4Ny0I6xQZo=)
2: oxOUpQ0FwseclzcVvtlkSLjr_aM.roa (hash: 39PmeADT0B2o6dhGdHc5CXRqYkD6fuj6z5G5c2KqgVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:ca:d0:82:c2:0c:23:00:a7:57:81:60:47:0e:4b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e039649faa8f9de3dae91be799a27e2ca6628789
Validity
Not Before: Sep 24 19:00:56 2026 GMT
Not After : Sep 25 19:00:56 2026 GMT
Subject: CN=b8f0807822c438eef1922b792bdf5e7716ce4625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:a6:f3:22:e1:5d:64:db:f4:5a:10:01:1d:
39:cf:62:00:ee:00:4d:48:3a:bb:81:0b:f8:c9:6e:
2c:b1:5a:66:81:e5:18:67:13:35:bd:8c:d0:0f:91:
79:fc:88:5d:94:16:54:f7:b7:ce:8a:bb:a5:cc:1d:
29:29:e7:e7:82:25:77:d3:a0:81:e7:1c:fa:cc:3c:
77:20:ec:22:63:4d:1d:72:51:5a:96:7e:44:f5:23:
cf:c2:18:07:4a:9c:d2:e9:05:ca:71:e9:0b:1a:16:
81:9d:bc:c0:2c:9c:c3:a1:cb:3a:6f:80:c2:85:f5:
17:0e:26:40:85:a5:b7:a5:3c:56:86:0b:27:9c:4a:
cd:26:65:f1:ca:46:ff:23:22:fd:9a:9f:47:d6:52:
61:08:69:43:cf:80:b6:18:a0:c9:3b:ca:61:82:b3:
ea:47:86:ad:bb:ac:59:54:7b:e0:a4:06:fd:91:66:
52:83:a8:4a:aa:76:9b:a2:9d:6c:11:c3:49:24:e2:
fe:5a:f1:76:1e:62:0b:9b:1d:1f:e0:6a:e6:09:f7:
aa:ff:8b:f2:71:ab:15:33:23:d9:85:40:a4:50:84:
a0:e9:f8:3a:a2:10:a9:84:41:3c:c1:38:b5:d4:8c:
a1:06:bb:61:14:08:1c:dd:73:9e:82:bb:23:cd:4a:
97:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F0:80:78:22:C4:38:EE:F1:92:2B:79:2B:DF:5E:77:16:CE:46:25
X509v3 Authority Key Identifier:
keyid:E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:44:36:e0:3e:5e:5b:51:39:7f:ac:56:13:73:d1:f9:7d:eb:
a6:bc:33:07:7a:a3:01:87:ce:7d:09:c3:86:d9:45:e1:69:ec:
32:61:db:42:70:77:ce:7a:b0:9e:e4:17:d0:80:bd:fc:c4:89:
65:f2:a3:cb:73:9b:07:ef:e5:f2:4c:5d:44:70:3b:1a:ee:42:
0b:7d:14:80:74:ca:8f:73:4b:32:0f:ea:53:04:48:f7:a5:f0:
79:02:0a:b1:64:43:f6:08:8a:0e:4f:f6:34:53:3c:bb:38:17:
40:57:c4:5f:83:31:28:5e:de:2f:83:57:86:e2:3b:93:0d:77:
dd:a1:9b:3a:c7:3d:d8:ce:3e:46:0e:59:af:36:6f:63:d8:9f:
66:25:f8:85:8c:72:3c:e9:3f:de:aa:9e:be:8a:10:a9:6c:34:
37:75:a2:4b:34:19:e1:07:23:ac:a4:dd:2d:3e:a9:c3:5f:26:
01:0d:b1:79:53:49:bd:dd:7b:b0:9f:40:64:bf:82:d4:0e:6e:
b6:90:83:a4:bc:8c:d0:72:08:f2:ca:17:ce:fa:0e:4d:86:62:
73:47:f7:32:07:7d:64:e1:a3:e5:19:ca:2a:83:70:1b:cc:82:
3f:45:81:56:31:81:eb:e5:5c:fc:69:24:2b:57:71:f5:56:14:
88:38:1d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:42:03 2026 by rpki-client