Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
File: 4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json)
Hash identifier: gHV6Ksa5zpfGjWk5Ga8pW9Ci/pYk2klafWxxv1JzadY=
Subject key identifier: 29:CE:8C:5A:25:8A:EE:26:0A:01:56:5A:2F:55:38:38:82:25:B2:4D
Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac
Certificate serial: 01A0DCBBF0CA4BA1E279C9B24067112C0535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
Manifest number: 1882
Signing time: Sat 26 Sep 2026 08:01:39 +0000
Manifest this update: Sat 26 Sep 2026 08:01:39 +0000
Manifest next update: Sun 27 Sep 2026 08:01:39 +0000
Files and hashes: 1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: WdyJh0DGkCRV5KCCNv2xoD+bowhvfmF8st5qRAtTsys=)
2: E582u3b_wirr6G_w4u9uogz74z8.roa (hash: 81B6PrtCWAN/tZ4dAD4doQginsu0czWU20EU6ygqMqw=)
3: XzHwdc8CnV6b37aUuwbB9K5aCVg.roa (hash: Ajp8GTPxK9A3C7R9uHBAngG8he1JSPPWTWmru9BuMHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:f0:ca:4b:a1:e2:79:c9:b2:40:67:11:2c:05:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac
Validity
Not Before: Sep 26 08:01:39 2026 GMT
Not After : Sep 27 08:01:39 2026 GMT
Subject: CN=29ce8c5a258aee260a01565a2f5538388225b24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a2:f8:a9:e9:f9:88:18:36:61:44:b9:41:b3:
14:2c:7d:96:bb:6a:53:8f:5a:33:11:3e:18:c9:31:
fb:c9:80:d1:c1:a6:b4:1b:49:f6:5f:5e:44:af:04:
2c:68:ab:c1:c0:0d:5f:e6:55:6b:32:dc:07:1a:83:
bd:45:69:c6:a6:37:3b:88:ef:a1:8a:9b:a8:6f:09:
3a:af:6c:93:05:05:b7:84:5a:85:be:ce:51:e6:64:
7f:d8:0b:dc:bd:3e:12:1e:17:9d:26:08:2e:1f:a9:
e1:39:4e:28:cc:cc:0d:d5:bd:49:e7:db:dc:9d:b1:
b2:06:81:ae:06:6a:66:2e:14:af:1f:74:3d:ad:a7:
1a:1b:c4:45:fe:02:21:9e:c3:e3:4c:cb:32:a2:42:
ea:13:8b:f4:f9:ab:28:a1:df:eb:94:8d:31:9c:a4:
aa:ec:35:06:ed:0e:4b:37:9a:38:b7:b6:ef:b9:50:
7c:2b:c9:04:5e:61:80:bf:a5:29:31:75:c8:24:3d:
a4:4e:eb:1b:cc:ee:8a:41:68:68:36:1f:37:fa:6f:
36:20:a3:1d:41:4d:0e:dc:3c:84:21:ed:fa:5c:34:
41:72:36:91:50:9f:12:76:79:d7:28:ad:7a:8e:5e:
de:ac:c1:98:ab:53:56:04:4c:7b:32:b5:1d:a5:82:
ff:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CE:8C:5A:25:8A:EE:26:0A:01:56:5A:2F:55:38:38:82:25:B2:4D
X509v3 Authority Key Identifier:
keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:dd:cc:d3:69:c3:cc:1c:d0:ad:23:d9:b7:5b:60:a7:21:8f:
59:7e:f5:ce:ef:68:1f:3a:4a:ee:e7:0f:00:7d:53:a9:13:9d:
51:4d:8c:43:fd:6a:b0:48:d8:54:60:02:cf:87:24:0a:72:ed:
ee:ce:71:e9:fe:ea:fa:c6:db:90:02:73:10:aa:12:94:ae:35:
66:3e:49:88:94:5d:1f:8b:ba:bd:c8:72:b6:c3:a7:c9:2e:a9:
9e:91:93:b8:03:55:44:cd:72:0a:d3:b7:af:bf:81:f1:8b:8c:
c7:1b:b9:8c:b7:f4:62:41:f5:66:e0:e8:33:87:6a:c4:43:12:
2d:ad:db:23:97:1a:26:94:cf:9f:bc:da:bc:b9:b4:f2:62:11:
81:d6:0b:f8:88:3e:ff:66:e5:71:84:9b:8f:ad:25:8a:bb:f3:
fb:a2:93:7c:88:7e:00:41:3d:cb:02:ad:d7:73:14:df:6b:37:
39:b1:5a:4e:28:68:49:d2:fa:8b:b1:7f:a7:e7:e1:2a:07:a1:
09:9f:14:ef:91:52:29:c4:40:14:2b:0b:50:f6:00:a7:a3:d8:
16:fc:3a:6c:c5:12:d2:f1:d7:ad:76:7a:95:17:8e:a1:42:0d:
16:74:63:17:8d:15:c1:22:1b:0b:99:88:aa:b9:2a:b3:6f:dd:
a7:52:a5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:45:50 2026 by rpki-client