
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
File: 4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json)
Hash identifier: vrp+oHM2o1UmnXW8XpMEE7d4xBrFRyKpd62KPdustFg=
Subject key identifier: 6F:47:C1:01:34:A4:BA:5D:DD:92:C1:1E:52:96:77:60:CB:6C:94:4D
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Certificate issuer: /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial: 01A0CFA457C36E5958D2CB15A6D6B925ABCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
Manifest number: 0FC3
Signing time: Wed 23 Sep 2026 19:00:49 +0000
Manifest this update: Wed 23 Sep 2026 19:00:49 +0000
Manifest next update: Thu 24 Sep 2026 19:00:49 +0000
Files and hashes: 1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: SzsPf4s22a9xoqVyO9rJNVTV7ky8NKDAvjlJS6GFHwU=)
2: QtPhnyLsRRN8U6hpcPXp4Z0oWqY.roa (hash: i0nu2P6NxLQ5ERHa8d6GR72neeBYjpf7KkNPNvBe0Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:57:c3:6e:59:58:d2:cb:15:a6:d6:b9:25:ab:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Validity
Not Before: Sep 23 19:00:49 2026 GMT
Not After : Sep 24 19:00:49 2026 GMT
Subject: CN=6f47c10134a4ba5ddd92c11e52967760cb6c944d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:36:8f:61:73:2a:d6:67:21:46:5e:52:35:db:
49:a6:7c:dc:40:7c:9f:3c:51:20:d7:9e:67:03:72:
b7:d7:5c:b4:9c:b2:5f:8f:13:02:6d:ef:35:d6:99:
a6:21:62:ec:71:1d:7c:05:3e:26:8e:26:f6:10:c8:
60:4d:44:81:7a:f3:64:d8:fa:e0:0e:c3:04:2e:af:
0e:44:6f:b1:4c:ca:be:ce:c8:24:6a:0e:a6:07:bc:
1e:88:3a:24:f6:b8:7e:e8:d4:02:a5:ba:da:8e:4c:
8b:99:f8:cc:1b:53:fd:58:a6:39:c1:8b:51:e9:e3:
ef:e7:13:a3:40:f8:78:90:c2:cc:cc:3a:c2:43:03:
9b:08:db:c0:77:dd:e4:9c:09:23:d2:64:b3:f0:81:
82:e5:92:a8:79:4d:50:a4:59:17:fd:be:cb:ca:06:
cb:51:5e:93:e7:74:94:c6:80:fa:33:70:93:f3:a9:
cc:33:62:3a:ea:70:cc:d9:c5:00:fa:65:c5:4f:76:
f8:77:8a:19:29:2a:e6:46:a4:86:b6:dd:ab:5f:fa:
e2:fc:1a:ea:9c:1e:ba:eb:58:73:0a:85:77:bd:61:
00:fe:84:f3:29:7b:05:68:a5:cc:94:94:2f:82:36:
0c:b8:67:63:b5:83:da:cf:5b:00:1a:6a:e3:30:24:
56:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:47:C1:01:34:A4:BA:5D:DD:92:C1:1E:52:96:77:60:CB:6C:94:4D
X509v3 Authority Key Identifier:
keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8d:ee:01:34:32:7c:a7:01:ca:96:9b:f3:39:c1:86:b2:85:
48:37:f9:20:39:d0:f9:34:2e:56:46:4f:98:2a:70:15:a7:52:
a8:59:1d:e4:3d:e5:41:56:40:5f:96:2f:bc:0a:32:c7:75:32:
6d:97:a2:fb:ea:1d:83:92:8c:3c:95:26:c1:63:7a:45:27:9f:
42:39:07:d5:de:63:14:b4:66:bf:a6:f9:ba:8d:63:d3:49:c9:
6c:99:8e:27:0c:5f:82:24:31:8a:c6:f8:3d:10:7c:ab:8f:ed:
31:be:90:ab:08:9b:f4:8a:86:db:d0:ae:2b:66:53:04:d3:9e:
7b:fa:81:ae:00:33:69:06:9c:54:fd:44:a1:78:b4:4e:de:7a:
83:ac:0d:d8:dd:27:2f:81:50:6d:ed:57:4d:52:2c:ee:f1:9b:
7a:cc:0c:d1:30:c0:77:09:68:18:1d:cf:45:5f:8a:3b:16:4e:
87:d2:dd:12:39:49:ef:9d:6a:25:de:60:ef:7c:68:c5:b9:34:
17:23:07:61:b7:b6:b2:96:64:00:66:ab:33:79:ca:28:67:7c:
c4:3d:ab:a7:ff:00:cd:73:60:32:e7:d3:ed:c8:67:22:3b:6a:
93:97:58:85:55:a0:1d:20:1f:1c:b6:cd:98:89:9c:69:63:07:
ee:f5:ee:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:35:21 2026 by rpki-client