Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
File: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft (raw, json)
Hash identifier: j9G4hUOX8aRJRtCqpSe4qRt42+UarelfJrdPQ8vvn/w=
Subject key identifier: 92:00:97:CC:EB:BF:FE:78:AA:36:21:F4:73:02:3F:BB:90:58:0D:C1
Authority key identifier: E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
Certificate issuer: /CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Certificate serial: 01A0CDB570FF6EA89B321E4030F4F91EEDE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
Manifest number: 0600
Signing time: Wed 23 Sep 2026 10:00:15 +0000
Manifest this update: Wed 23 Sep 2026 10:00:15 +0000
Manifest next update: Thu 24 Sep 2026 10:00:15 +0000
Files and hashes: 1: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl (hash: 0eZMzuOYTZFf4NhUXgD8gMJR3grabfbhYfBVQTLMB3c=)
2: Xhzxh_1tEvbHh31P53cpofaJHAY.roa (hash: 31jnPeVemUW3b4ECC8z4gudFDjDHIoHHJ4mUtzZB8F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:70:ff:6e:a8:9b:32:1e:40:30:f4:f9:1e:ed:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Validity
Not Before: Sep 23 10:00:15 2026 GMT
Not After : Sep 24 10:00:15 2026 GMT
Subject: CN=920097ccebbffe78aa3621f473023fbb90580dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:47:5e:ed:9b:4a:79:ee:a8:27:4d:34:e5:05:
e1:8d:f7:9d:3f:85:58:a0:02:c7:a3:e2:f1:f6:20:
2c:8c:81:6e:9c:1b:00:ec:b2:39:6c:57:a0:90:fd:
6c:25:6b:bb:e6:40:5a:96:b5:01:cb:ca:a6:98:ca:
e2:c2:fd:8d:66:ef:ef:ad:6b:6a:a6:fe:d8:32:48:
b5:b0:0f:84:06:1e:ee:df:32:87:71:2a:6f:b5:a8:
41:de:12:cf:5e:e7:01:c6:46:f3:64:d7:b5:48:fd:
37:4d:11:02:b6:58:8a:ee:9e:5e:26:be:6c:97:3b:
7e:b9:7a:d9:8e:fe:75:ae:ba:5f:3f:ef:32:19:63:
e0:02:7d:f9:19:cf:a7:49:39:64:e7:03:e5:c9:5d:
e9:95:d5:49:9b:68:ac:df:52:09:74:77:23:88:51:
dc:ac:1e:be:01:a3:13:a9:2b:1c:70:ae:34:0a:11:
5b:a4:96:01:45:a7:f4:05:7f:2d:64:95:57:d2:b2:
92:62:f5:b8:8f:46:81:37:d3:00:63:df:3c:5a:c2:
5b:ff:89:43:25:2b:e2:82:51:30:ce:1d:61:d8:09:
ca:f9:7d:8e:42:5f:7e:59:90:ba:ad:2e:a0:34:20:
1b:cf:45:93:41:1e:27:99:63:7e:44:96:5f:0a:0b:
ee:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:00:97:CC:EB:BF:FE:78:AA:36:21:F4:73:02:3F:BB:90:58:0D:C1
X509v3 Authority Key Identifier:
keyid:E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:bf:b0:07:a8:94:37:2e:25:24:d6:da:5e:cd:6b:5b:26:67:
c3:d2:2d:3f:01:62:22:19:53:de:66:58:25:51:4e:3b:a6:76:
9c:58:f8:8d:d3:25:fa:63:29:99:9f:4e:60:7a:03:44:1d:8a:
4e:ac:47:02:b0:31:60:1f:93:98:c7:b3:ca:9b:94:c7:ee:2e:
01:e5:b9:a1:bb:e4:11:1c:85:4c:ae:9b:e2:da:92:e5:2b:1a:
fc:34:f5:af:b8:4b:c5:8c:4e:bd:18:f9:00:6e:9f:ec:db:72:
75:70:0f:ae:a7:ba:2b:b8:98:f6:f4:63:d6:a5:dc:78:40:e6:
12:6b:81:ed:22:b1:5e:4f:67:19:47:03:6f:2b:a7:02:7d:3f:
52:b7:23:b2:ac:99:e6:f4:ec:52:76:e0:b4:c6:4e:d9:7a:cf:
04:5f:75:ac:26:cf:33:97:d8:58:08:29:03:15:5e:59:94:3a:
9b:aa:f1:e4:c3:0a:af:b1:f7:3a:1d:73:98:1b:de:f5:ff:0c:
29:89:5a:30:3a:13:c9:ea:84:65:5b:99:c1:fb:e5:07:f6:19:
69:52:c1:a0:9b:b6:cf:f0:e7:4a:46:14:28:91:14:4f:f0:72:
ac:7e:b0:d7:ae:f4:86:b2:39:78:85:6c:ac:46:73:1f:e2:12:
a6:91:56:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:28:41 2026 by rpki-client