Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
File: 4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json)
Hash identifier: /l2WrA2KqBUZGII3DF/oFukXUKgW5jcp/2aVMPXwPV0=
Subject key identifier: 09:70:5D:7B:BC:28:63:20:4B:F3:98:E0:30:50:7F:B8:3E:08:E4:CA
Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
Certificate issuer: /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Certificate serial: 01A0D5A6D16519576178ED84F055714D7D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
Manifest number: 0BF3
Signing time: Thu 24 Sep 2026 23:01:14 +0000
Manifest this update: Thu 24 Sep 2026 23:01:14 +0000
Manifest next update: Fri 25 Sep 2026 23:01:14 +0000
Files and hashes: 1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: jCskFYjSI0Xjh9HfDf+GHekdxmScXP+aAh2qCqelMMg=)
2: YWMzYYdq1V4GAPZh68WrmEyhVfI.roa (hash: L4cChRKUEEfDnkwJCOfQ9K/LTDSkENg728c4ezgiFqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:d1:65:19:57:61:78:ed:84:f0:55:71:4d:7d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Validity
Not Before: Sep 24 23:01:14 2026 GMT
Not After : Sep 25 23:01:14 2026 GMT
Subject: CN=09705d7bbc2863204bf398e030507fb83e08e4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8a:48:ac:6a:64:28:7d:72:6a:22:dc:12:78:
79:13:fd:f8:01:7a:9a:9c:e1:f1:fc:9e:0a:20:fd:
36:f6:10:d8:a4:0f:fc:00:92:49:f2:0a:43:b9:6d:
b3:0a:89:ed:af:b7:86:6a:99:50:e1:27:cd:e6:f9:
61:ae:1e:07:9c:9c:7f:fd:0c:5b:cc:0f:54:86:cc:
c0:cf:c7:c6:62:11:49:dd:51:e0:16:45:f0:35:e6:
56:22:b8:2b:31:42:83:8c:19:90:6e:b6:c2:9c:ad:
51:c8:8e:13:ac:b8:3a:dc:a3:06:ad:b2:de:28:17:
54:4a:29:70:f1:cc:17:ad:b5:f8:63:3d:99:78:68:
79:a2:d1:2f:27:ce:00:ef:d4:89:a5:77:a1:d6:f2:
29:19:34:74:d9:77:78:6c:79:66:0c:c7:43:92:be:
e4:66:e5:ea:09:5e:15:ee:1d:b2:00:42:ef:d4:03:
15:cc:bf:ea:c0:97:ab:33:fd:13:fb:e8:65:c5:e7:
e5:5c:ae:7e:07:34:e6:cd:b6:74:41:47:1f:c3:4a:
18:33:26:30:6b:dd:f2:4a:46:e4:d6:48:1e:71:1e:
98:95:97:7f:4f:13:e2:5a:80:19:75:47:8c:e4:60:
d3:43:fd:13:47:eb:13:12:c0:03:9f:47:1f:a7:f3:
cb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:70:5D:7B:BC:28:63:20:4B:F3:98:E0:30:50:7F:B8:3E:08:E4:CA
X509v3 Authority Key Identifier:
keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f0:e2:a0:d4:af:06:1d:44:fd:98:3f:78:d1:75:94:ba:3e:
3e:3c:00:80:9a:33:22:50:53:97:6d:65:3c:ac:43:64:d6:05:
a4:60:87:ed:0f:a6:02:65:11:46:29:97:49:bd:fc:f4:c9:1f:
a5:ac:5c:ba:83:fc:2e:0e:03:22:b1:50:c3:03:bb:d3:2d:59:
0a:e4:f9:4c:1b:29:89:81:52:fc:14:ae:a9:b8:a2:7a:c8:ac:
d9:24:b2:72:12:79:aa:83:99:c4:76:e3:d8:82:e8:73:3e:56:
b7:64:de:65:f1:7a:4b:8d:f1:89:3c:c3:cc:63:2c:6e:e5:b4:
7b:c7:2e:af:a5:54:8f:50:75:ff:a2:13:e3:af:d2:26:06:f2:
89:15:13:46:2d:63:29:a5:51:ee:f5:49:20:96:07:d6:b4:53:
08:93:b8:70:19:5b:e1:33:e8:13:4a:f9:fb:64:7c:99:9d:ad:
47:b9:ff:e6:ef:16:fc:e7:1a:4b:40:b7:fb:97:46:0f:41:99:
35:fd:13:14:4e:7a:e3:99:5b:43:dd:5a:51:62:c9:bc:ca:0d:
2d:b8:d2:c6:69:5a:3b:26:cf:02:0a:42:8e:7a:54:34:a9:3c:
33:2d:bf:a0:af:23:e2:ad:b3:cf:72:bb:3b:0c:49:1e:11:b5:
15:69:d2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:56:35 2026 by rpki-client