Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
File: 4Genud52frl9tk5RZHhJRjO9VOo.mft (raw, json)
Hash identifier: gc1j/MvtL3Jo1GEUUxvGO43m8tKZlsMhMuqwv6Xz7Hk=
Subject key identifier: C3:BA:EB:A2:F3:F1:A8:D4:44:5E:2B:13:8C:E8:4F:6D:FA:F6:AF:E0
Authority key identifier: E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
Certificate issuer: /CN=e067a7b9de767eb97db64e516478494633bd54ea
Certificate serial: 01A0D3B8F0799FD5EC960C9A1A9E91649CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
Manifest number: 1072
Signing time: Thu 24 Sep 2026 14:01:47 +0000
Manifest this update: Thu 24 Sep 2026 14:01:47 +0000
Manifest next update: Fri 25 Sep 2026 14:01:47 +0000
Files and hashes: 1: 4Genud52frl9tk5RZHhJRjO9VOo.crl (hash: ve2nUTpkISYw35ncWzSFyaBhlG48KWtIw85dBh7xPKg=)
2: fqd_p4Wrb6OXddN1aeuYEJC8YH4.asa (hash: jmbRwKrDPkjso/zUasnqP+cDaGWkVpbGq+nQ2VGiSLw=)
3: mqWwX3c1BOwgAKEJ3FuyfvO_MKs.roa (hash: 05RPu7PASUup4/F6w6O5WKp82l03RTgAZ/jZKw8NCyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:f0:79:9f:d5:ec:96:0c:9a:1a:9e:91:64:9c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e067a7b9de767eb97db64e516478494633bd54ea
Validity
Not Before: Sep 24 14:01:47 2026 GMT
Not After : Sep 25 14:01:47 2026 GMT
Subject: CN=c3baeba2f3f1a8d4445e2b138ce84f6dfaf6afe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:53:d4:80:66:53:f3:58:d3:66:88:09:b5:91:
62:8e:ab:b9:69:1b:63:3b:fc:6f:0a:17:3e:62:d4:
4e:8d:ee:54:96:38:42:cd:8b:1f:8d:58:97:57:7f:
3d:e2:19:3c:b3:be:3b:50:ae:58:33:fa:1b:1f:17:
e3:75:f9:38:3a:17:c2:2f:48:17:67:ed:77:c0:d1:
a2:51:4d:4e:c1:1b:60:a7:34:11:cd:4e:c7:69:80:
b6:9d:bd:6b:fe:09:ce:5c:ec:39:02:ab:64:21:38:
06:c3:18:d4:6d:18:c0:39:48:71:ce:4b:01:96:28:
7f:0b:2c:b7:ab:2d:98:1a:4e:72:67:73:83:31:3a:
b0:85:22:14:37:fe:76:6e:75:86:db:1b:ba:52:a6:
bd:4c:a2:46:b5:cb:b5:1f:6b:35:70:f9:0b:62:07:
ba:65:b8:36:aa:d4:38:7e:e0:b8:f5:0c:bd:a7:e8:
fb:e4:e6:cf:65:30:89:ad:6a:cf:f8:2e:6c:bd:7e:
74:fe:e5:1e:b2:52:ba:e8:07:0c:78:f8:0c:b3:52:
63:40:5b:b4:7a:e2:fb:d1:6c:38:c0:15:df:e6:ab:
37:eb:73:12:ec:c8:e1:62:e9:37:44:c2:ef:af:94:
5a:8d:30:3c:e1:cb:9a:5a:7e:cc:c0:1f:28:28:62:
e7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BA:EB:A2:F3:F1:A8:D4:44:5E:2B:13:8C:E8:4F:6D:FA:F6:AF:E0
X509v3 Authority Key Identifier:
keyid:E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c1:0f:58:40:04:f8:6b:2d:fe:46:66:1d:5c:5a:74:f2:40:
ae:6d:11:84:e9:13:3f:6f:71:db:67:6c:ac:99:fb:80:70:7f:
cc:e5:97:84:58:3d:13:2b:e5:57:13:04:93:ff:80:39:da:39:
75:c0:3c:50:ef:5a:3e:48:cf:2b:7c:99:ea:7a:5a:44:7e:1a:
ae:8b:c0:9b:e1:9f:43:bf:72:c3:84:ef:3c:94:bd:59:70:b7:
f7:68:99:96:cd:c0:22:a4:9d:2e:a0:a0:ef:e6:19:6b:1d:8c:
91:8e:81:ac:e8:04:18:b2:c4:ca:87:bb:36:0d:33:3e:36:4e:
c9:fb:50:10:c6:0f:64:4f:be:f4:b7:b2:49:2c:bb:a9:3f:82:
94:47:c9:33:8c:11:1e:73:16:8d:b1:bb:d7:56:43:a3:eb:13:
2b:e9:6f:fc:04:ba:f5:99:86:73:0e:ac:4d:05:7d:28:00:9e:
fd:50:7f:ea:a1:0e:a1:dd:74:6e:19:9c:56:43:6f:56:39:cb:
0d:35:46:77:6a:d0:ee:e7:af:b7:ae:50:ae:9c:20:65:fb:47:
f1:21:e8:a0:08:07:2e:3b:d3:f2:df:0c:fe:9f:48:c6:e0:fd:
cc:3c:5b:b0:88:55:ca:bb:e9:07:eb:fc:06:5f:92:b8:b7:b8:
4f:64:a0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:06:45 2026 by rpki-client