Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/df0a71-989f-4052-8b38-27f31b7027bd/1/4DX4gvpu7yUgC2p9c3jChZJtjJ4.mft
File: 4DX4gvpu7yUgC2p9c3jChZJtjJ4.mft (raw, json)
Hash identifier: p968BB62morkaCWSilAn66uizMdzi3Zqga5wBpgmpFI=
Subject key identifier: C0:27:A7:6E:2F:77:AC:31:B6:FC:E5:F5:BD:EB:4F:92:82:BD:66:12
Authority key identifier: E0:35:F8:82:FA:6E:EF:25:20:0B:6A:7D:73:78:C2:85:92:6D:8C:9E
Certificate issuer: /CN=e035f882fa6eef25200b6a7d7378c285926d8c9e
Certificate serial: 01A0D872CE06C61FC38F0783D31E69FC21AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4DX4gvpu7yUgC2p9c3jChZJtjJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0a71-989f-4052-8b38-27f31b7027bd/1/4DX4gvpu7yUgC2p9c3jChZJtjJ4.mft
Manifest number: 018F
Signing time: Fri 25 Sep 2026 12:03:17 +0000
Manifest this update: Fri 25 Sep 2026 12:03:17 +0000
Manifest next update: Sat 26 Sep 2026 12:03:17 +0000
Files and hashes: 1: 4DX4gvpu7yUgC2p9c3jChZJtjJ4.crl (hash: z3maurar0S8+0c4mSRMf80xP56YW9REBGbT6Y9xbMxA=)
2: xulwkrdTClCIo8JTMQSPEZiJ5xM.roa (hash: zBwBsovIkxRJ5sWGqQLeI9gfF8IlVwdOJj27qMN+l8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0a71-989f-4052-8b38-27f31b7027bd/1/4DX4gvpu7yUgC2p9c3jChZJtjJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/df0a71-989f-4052-8b38-27f31b7027bd/1/4DX4gvpu7yUgC2p9c3jChZJtjJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4DX4gvpu7yUgC2p9c3jChZJtjJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 12:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:ce:06:c6:1f:c3:8f:07:83:d3:1e:69:fc:21:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e035f882fa6eef25200b6a7d7378c285926d8c9e
Validity
Not Before: Sep 25 12:03:17 2026 GMT
Not After : Sep 26 12:03:17 2026 GMT
Subject: CN=c027a76e2f77ac31b6fce5f5bdeb4f9282bd6612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:57:20:84:84:33:58:54:34:0f:81:3c:7e:bd:
bc:32:cb:7e:7c:15:81:aa:50:16:8f:1f:29:26:ec:
78:9f:35:b7:e9:f4:a6:03:3e:3c:81:ca:46:2f:d5:
f9:14:af:a8:84:a6:a7:48:fb:c7:69:c3:bf:24:50:
3c:0a:ec:a3:8e:1c:85:ff:ab:9b:52:9e:1a:a7:ae:
4e:0d:93:c8:8e:39:3c:48:78:7d:d3:62:51:9d:a9:
62:6d:08:f1:f6:48:8b:6e:06:86:1d:57:a7:b7:91:
1f:8a:7a:59:4c:0a:8c:cf:bb:1e:21:ed:ba:b1:73:
a9:5c:03:b2:b6:73:ee:e4:f9:96:06:e7:55:84:bb:
93:09:2c:d7:99:08:30:bc:18:d7:c7:10:bb:17:7b:
e8:a8:b8:db:18:ca:ed:52:28:bb:bf:b0:72:cc:24:
06:68:0e:0e:33:be:60:59:bb:26:67:48:df:ef:55:
a2:a9:06:d6:99:ad:f9:b7:1c:55:d2:47:7e:52:a2:
1f:9d:14:13:e5:a5:36:e0:83:79:b3:05:c3:68:31:
f3:6f:38:84:7a:6d:b7:b3:93:f4:a8:a9:de:77:bf:
07:9d:97:ec:ea:ec:ca:00:9b:2e:27:c4:cf:73:ab:
b0:a5:9b:b4:a3:25:25:58:39:27:56:1c:61:ac:ae:
9d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:27:A7:6E:2F:77:AC:31:B6:FC:E5:F5:BD:EB:4F:92:82:BD:66:12
X509v3 Authority Key Identifier:
keyid:E0:35:F8:82:FA:6E:EF:25:20:0B:6A:7D:73:78:C2:85:92:6D:8C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DX4gvpu7yUgC2p9c3jChZJtjJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0a71-989f-4052-8b38-27f31b7027bd/1/4DX4gvpu7yUgC2p9c3jChZJtjJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0a71-989f-4052-8b38-27f31b7027bd/1/4DX4gvpu7yUgC2p9c3jChZJtjJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ce:2b:bd:a3:76:d3:43:68:5e:62:42:a6:32:9b:da:3b:7c:
f2:55:c8:2b:51:19:85:b8:7d:b3:bb:b9:15:31:36:d8:52:90:
87:32:bd:81:49:e4:22:2f:87:f9:76:27:08:d1:9c:95:25:89:
e0:15:f4:22:3f:a9:e9:4f:20:b0:08:89:e3:ed:1b:77:65:7b:
69:15:7d:2a:bd:18:08:d2:b5:a7:f8:70:f2:12:6a:15:a1:e8:
d0:bb:eb:ca:9d:5d:fc:ed:32:3b:b7:cd:45:83:8d:fa:53:9d:
eb:10:35:d1:b7:ef:f1:60:ae:bb:8e:51:b2:5b:e1:49:79:1c:
01:8a:89:20:23:10:1f:77:02:cd:3c:f2:a3:9e:eb:01:7e:92:
84:7d:7e:9b:d9:61:e2:fd:5d:29:6e:7d:2a:77:a8:04:ee:7e:
9b:d3:32:70:5e:2f:05:ea:28:7a:08:e5:8d:c3:b4:29:6d:77:
e5:b0:aa:e0:ce:f8:1a:2d:f9:2a:81:a7:66:e8:5b:2c:8b:c0:
97:9c:20:50:d0:42:3c:a7:ce:1e:70:d2:2f:cf:14:ae:5d:3b:
46:54:0a:29:22:9e:61:71:aa:e7:a6:6e:38:79:86:08:e4:66:
1f:54:7c:d4:49:7d:61:8f:b1:2c:48:77:14:4d:97:8d:fc:0e:
a6:a5:c6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:21:06 2026 by rpki-client