Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
File: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft (raw, json)
Hash identifier: NK21o3Ni2NDWtV7drG7Utgljto+dg0It+hOGI8sMHCY=
Subject key identifier: 00:17:08:41:E7:14:84:E5:D7:AA:7C:8B:33:70:E3:D1:27:66:ED:D1
Authority key identifier: E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
Certificate issuer: /CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Certificate serial: 01A1DD94C9397F7EF278202AAE2419D4DD9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
Manifest number: 1805
Signing time: Sun 15 Nov 2026 05:01:17 +0000
Manifest this update: Sun 15 Nov 2026 05:01:17 +0000
Manifest next update: Mon 16 Nov 2026 05:01:17 +0000
Files and hashes: 1: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl (hash: E8rTAgdJ8ZdOR7MXitjuPONeWJkKx9Sh1mjVUEviUbE=)
2: BdqGs3R6xCnjEwShLrflyZwaVp0.roa (hash: RR88JIqbu0K/mTZcvwGkA42FVlGztgnaWCqdDikFkjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:c9:39:7f:7e:f2:78:20:2a:ae:24:19:d4:dd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Validity
Not Before: Nov 15 05:01:17 2026 GMT
Not After : Nov 16 05:01:17 2026 GMT
Subject: CN=00170841e71484e5d7aa7c8b3370e3d12766edd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:eb:7a:57:98:d2:17:f9:81:98:db:ea:5e:
38:c1:df:b4:f0:30:16:8f:89:76:ad:77:8c:ff:6f:
75:0d:34:05:48:d8:a6:04:36:e1:3c:4c:ca:cb:6e:
9a:3a:55:6c:08:3f:05:ab:05:d6:85:1c:c3:fa:3d:
32:a5:53:c6:7b:8c:3f:e8:4f:45:77:f3:c5:63:2a:
f3:44:67:b0:8d:2d:1c:0a:f0:0a:c2:3b:b1:41:2e:
ff:0e:7d:0b:03:57:dc:1f:d6:3c:a4:e6:bf:a2:0d:
ab:a5:af:33:ed:13:eb:b9:6d:b4:a0:87:6a:d9:a2:
fe:bd:c6:dd:39:97:00:82:82:f7:6e:7d:24:11:22:
f6:ef:e5:ce:7d:91:de:20:18:7a:40:93:54:c8:d0:
2c:47:6e:b1:e1:8d:52:04:d8:06:40:20:aa:61:03:
a3:9d:e7:3d:ce:e8:f7:d9:b3:87:c5:59:79:1f:14:
c5:70:78:d8:30:69:cb:84:8c:14:46:f5:b2:af:93:
bf:fe:3e:52:df:71:8b:f9:e5:f4:39:2a:74:3a:f6:
dc:b7:c1:ec:12:14:2b:aa:fe:ef:be:e1:06:84:b9:
6c:b1:81:9d:5c:4b:01:53:da:df:6c:06:7a:b1:37:
a2:f2:0c:49:a2:ec:91:f2:de:27:a4:16:86:19:84:
00:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:17:08:41:E7:14:84:E5:D7:AA:7C:8B:33:70:E3:D1:27:66:ED:D1
X509v3 Authority Key Identifier:
keyid:E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b9:f6:34:02:e1:f3:44:71:9c:29:0a:0e:2c:ab:5a:64:42:
1b:dd:ce:8b:71:0e:c1:6a:9e:51:92:4f:9b:ff:b8:f0:0b:36:
4d:88:77:fc:49:25:9e:10:18:6c:6a:20:51:28:89:87:3a:91:
1b:3e:d8:d2:41:ac:87:21:4e:37:06:29:62:2a:ab:4a:10:9f:
d6:47:a7:fe:c1:36:68:53:01:32:d8:3f:ef:06:66:c1:5a:34:
2d:b8:1c:af:f2:88:e6:fc:bd:40:23:a2:03:0b:3e:28:04:a4:
4e:ab:00:e6:06:b0:fd:8f:9c:74:25:a8:d0:0e:ad:05:83:64:
07:a6:3b:92:a0:c5:e0:36:f0:73:7a:0e:1b:f1:2b:95:88:4d:
9e:06:88:1c:48:0f:47:7d:d5:88:8e:a2:ec:5c:a7:91:2f:10:
85:b3:99:07:06:2e:77:b3:07:d0:49:32:65:94:bf:e6:f6:56:
d8:10:70:79:41:5e:0c:e0:fc:cc:96:98:30:26:a1:64:a2:f0:
81:cb:76:be:40:61:bf:62:45:68:59:fb:bd:73:1e:16:ed:f0:
67:52:4b:44:0a:45:7e:01:05:f7:07:6e:9d:a7:96:a7:33:e7:
39:36:e5:9f:e9:64:3e:14:22:80:da:4e:20:2d:a9:fa:a5:8b:
7d:96:4e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:26:34 2026 by rpki-client