Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
File: 4T0_tqhjrA-k0f7v467DntjTiVw.mft (raw, json)
Hash identifier: 8WC+FV9f1TwlODMQV05JTswxTC5W2ubzCaF7N3MgMYk=
Subject key identifier: D8:1B:A7:AD:F2:F9:44:36:CE:81:8E:60:D1:ED:2E:05:C5:06:7E:7F
Authority key identifier: E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
Certificate issuer: /CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Certificate serial: 01A0D01290B06E18CE1F937A2F811BBB16B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
Manifest number: 19BF
Signing time: Wed 23 Sep 2026 21:01:12 +0000
Manifest this update: Wed 23 Sep 2026 21:01:12 +0000
Manifest next update: Thu 24 Sep 2026 21:01:12 +0000
Files and hashes: 1: 4T0_tqhjrA-k0f7v467DntjTiVw.crl (hash: oC9XbfUWB3kDbWRGXtSh9oLxKQMhwASI+lqs1zW4s+Q=)
2: APkEJsxH2t-1o8uReEsySa-BG0k.roa (hash: QGebNblh9sIV47+DzT8QKo/lQO0JIeSNiq/YB/thR5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:90:b0:6e:18:ce:1f:93:7a:2f:81:1b:bb:16:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Validity
Not Before: Sep 23 21:01:12 2026 GMT
Not After : Sep 24 21:01:12 2026 GMT
Subject: CN=d81ba7adf2f94436ce818e60d1ed2e05c5067e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c5:4d:ca:cd:6d:98:64:57:f8:ae:3b:aa:96:
89:ca:a0:71:58:01:71:80:9e:9b:51:5a:75:a1:9d:
8b:38:bd:a9:26:ed:97:5d:c4:cf:f5:81:06:0c:a7:
f6:fd:1c:04:5a:d2:a2:5f:45:cd:5d:e1:fc:7d:3f:
6a:66:4b:36:b3:21:e3:37:85:ba:f9:12:b9:a5:25:
66:2e:31:ab:de:e1:9c:ff:a7:c9:7b:5e:1f:9b:8c:
71:5a:bf:56:93:7f:93:83:ea:34:57:06:83:3e:76:
5e:46:2a:71:02:e3:ce:64:92:a6:0e:cc:d3:4e:da:
45:8c:0b:54:04:69:3b:67:84:2f:6c:67:b7:0a:56:
0d:75:c9:9e:d6:52:df:cc:39:98:ed:6f:a3:e9:0d:
73:1c:48:97:d7:96:dd:08:04:63:54:b2:b3:89:db:
6e:e7:ba:77:da:0b:e6:aa:ce:cf:83:93:33:42:af:
f8:d8:ec:10:b3:66:68:5e:40:a0:20:9b:a5:2c:56:
e1:e5:ff:71:56:ba:76:0e:9c:79:f4:66:50:1f:3e:
f5:2e:27:ec:e9:1f:db:f9:56:cc:7c:df:f4:52:e6:
95:e3:13:8b:e0:6b:bc:8a:20:f8:0b:40:dc:81:e3:
f4:fb:5e:6b:69:fa:bb:4e:9a:89:60:85:79:c7:20:
d8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1B:A7:AD:F2:F9:44:36:CE:81:8E:60:D1:ED:2E:05:C5:06:7E:7F
X509v3 Authority Key Identifier:
keyid:E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:d8:64:d1:5c:26:50:d7:da:49:a5:10:55:5e:24:5c:f0:87:
75:75:45:5c:4b:1d:9c:69:fa:4f:ab:38:dc:09:50:1d:40:95:
72:df:d9:49:bf:be:7e:7d:33:46:d4:e0:78:30:f2:47:76:53:
8c:7a:12:92:72:5f:20:ea:91:35:2e:96:11:76:6f:d0:6a:c0:
7b:13:76:ee:a9:77:26:c5:f0:df:28:d9:f6:7d:e6:50:80:f4:
13:ae:5d:81:67:e1:2c:7e:81:39:cc:6a:5c:da:e3:2f:7e:be:
03:5e:de:c8:3c:0e:b0:f2:0c:97:4c:d8:35:0e:30:55:ff:1c:
28:60:d0:f8:c8:e4:99:77:00:be:57:23:05:cc:48:b1:2e:96:
1d:4e:0c:08:62:9c:7a:89:8f:1a:a7:b9:1c:b5:7b:c6:0f:65:
a3:27:7e:35:c4:07:f6:a5:15:42:b3:6a:bd:7f:86:f9:63:46:
b8:e5:30:56:2c:65:61:45:4c:1f:bd:e6:6b:96:80:ab:eb:b6:
85:32:36:89:13:1c:e0:51:73:4c:b9:c7:99:39:ac:0d:b8:d3:
f7:0b:47:dc:97:fc:2f:fa:09:c6:cb:7d:c7:de:ba:ca:75:6f:
0f:07:e9:db:3c:74:5b:04:95:7e:0f:07:00:d4:c4:67:8e:37:
a5:70:d4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:44:16 2026 by rpki-client