Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
File: 4jSU4MwSx1rtHQHesVvk4mYrSFo.mft (raw, json)
Hash identifier: GZ5NwQmEpIS/VjUnjp4fezhyEszC7HaxQFQzsxoib9o=
Subject key identifier: 51:25:AB:B9:9C:CF:59:D4:A7:AF:92:20:5F:46:CF:7F:F5:9D:3D:C4
Authority key identifier: E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
Certificate issuer: /CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Certificate serial: 01A0CC6BCF92D07195439F0914588F965030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
Manifest number: 0D1F
Signing time: Wed 23 Sep 2026 04:00:12 +0000
Manifest this update: Wed 23 Sep 2026 04:00:12 +0000
Manifest next update: Thu 24 Sep 2026 04:00:12 +0000
Files and hashes: 1: 4jSU4MwSx1rtHQHesVvk4mYrSFo.crl (hash: LDIGE99tkZG/qqTlICVABjIK+Y8PPaM5h++reXnHSiI=)
2: YTHqy1jXNV7dNzrAO_RbGYRTCcA.roa (hash: zJ9iDYD1yuxkbyK8khRTA4UqxwT49qevZssCV62H0OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6b:cf:92:d0:71:95:43:9f:09:14:58:8f:96:50:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Validity
Not Before: Sep 23 04:00:12 2026 GMT
Not After : Sep 24 04:00:12 2026 GMT
Subject: CN=5125abb99ccf59d4a7af92205f46cf7ff59d3dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cf:5f:53:56:29:d8:9f:91:23:b1:00:d4:16:
92:c3:2e:59:8b:2b:13:91:c0:5e:ec:c5:a4:7b:59:
f6:44:93:32:9f:14:b8:b3:7a:ff:a1:ca:b6:3d:9a:
31:2a:bc:82:54:67:76:d7:ed:fb:6c:ac:a2:fa:fc:
41:f0:82:09:01:4a:08:be:ce:29:a1:b2:86:1d:89:
21:51:54:c6:ea:3f:77:ca:71:70:85:ea:09:50:c6:
10:94:45:75:1f:cb:1e:53:d4:15:af:f7:02:85:ec:
61:6a:6b:83:8b:d8:9f:f1:57:55:78:6d:33:5c:49:
78:d2:17:32:93:7e:a0:75:3f:0f:23:87:d5:c9:51:
40:96:14:ea:76:2a:ca:df:1b:29:ef:5b:8d:3c:9f:
1d:7a:ae:19:61:2b:de:29:f1:4c:25:1f:71:1c:2e:
a7:ce:84:05:9f:77:74:0b:73:98:c3:09:e4:b9:3d:
b2:15:44:e5:b3:36:ca:ed:ad:56:e3:75:83:5e:a4:
ed:fe:50:d8:c1:3d:29:8e:f0:e2:0d:c5:b9:18:59:
85:70:98:8e:5c:98:68:2f:f0:70:62:60:cc:34:8e:
08:31:e7:5c:86:e4:03:c4:8e:de:a9:39:9c:88:a0:
0e:45:72:aa:92:cf:64:f2:5d:05:4b:b7:78:c2:42:
0d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:25:AB:B9:9C:CF:59:D4:A7:AF:92:20:5F:46:CF:7F:F5:9D:3D:C4
X509v3 Authority Key Identifier:
keyid:E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:41:33:0c:ea:5a:a9:00:93:99:e3:b6:c9:f7:1c:d8:e6:f2:
c5:c4:55:0b:22:11:a0:dc:24:4c:d0:0c:7d:7c:76:f3:f5:59:
5f:4e:55:86:5e:3f:71:56:74:f8:70:8d:60:30:40:2d:73:a7:
88:0d:32:85:9d:a3:29:f9:27:42:7d:59:e4:4a:41:a5:86:d6:
62:8d:5e:2a:82:7c:c5:d0:ea:a9:34:6f:61:ee:48:4b:01:90:
26:9b:bd:41:eb:70:21:9a:95:c6:08:bf:2a:16:45:64:d2:73:
dd:8b:48:2b:b1:83:ae:eb:09:b9:95:dc:ba:98:95:a5:ce:4f:
c6:87:85:66:e4:78:9e:2c:c2:24:d8:f3:ff:bb:86:83:47:48:
c3:0d:db:43:7c:e8:0b:02:0a:75:38:1b:3c:6e:13:fb:80:81:
0f:25:31:b5:bd:b1:db:77:66:3c:5d:d3:b1:c6:e5:57:85:ed:
b5:1d:c2:3d:1a:2a:65:ab:e9:0a:12:c5:cd:f7:4f:4e:db:ec:
cc:ab:25:6e:0f:f6:87:1e:d6:35:fd:29:8c:94:f9:ec:0c:c9:
83:df:ff:3a:48:0f:54:9a:6c:43:4e:26:2c:84:21:fc:21:9d:
dd:f2:64:58:e3:11:58:10:64:c0:8b:80:53:0c:bb:95:83:9f:
eb:c2:0e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:26:19 2026 by rpki-client