Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
File: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft (raw, json)
Hash identifier: YjvvUrvM4rsnRdvq23qoGgtet+81+SUUvmSz43Kt0BU=
Subject key identifier: C0:98:75:E8:33:DA:4C:98:A3:71:70:3B:D3:60:14:02:38:80:FB:15
Authority key identifier: E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
Certificate issuer: /CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Certificate serial: 01A0CDEC73954EF4A608EB4D9F71A65D70D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
Manifest number: 1020
Signing time: Wed 23 Sep 2026 11:00:20 +0000
Manifest this update: Wed 23 Sep 2026 11:00:20 +0000
Manifest next update: Thu 24 Sep 2026 11:00:20 +0000
Files and hashes: 1: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl (hash: z1HSmAPIVIUpfCsZS81vRmlia3U/gYXi/e4C3wAbv6g=)
2: FeEckT4qIPnFBupFbhMx-hvffm4.roa (hash: dMuaS63v6Vf4ExEsJJZptpBNFEkp0v5Qz3wn0QyTq14=)
3: pDrIjzZmP19TaAzRkXVsR5PgXDM.roa (hash: EhOVo2mVh+0JylRQJforOe474zHiA+LVqDCnvMtMlzg=)
4: s_-LqLAwoVzNq7MMJZajpyC4Khk.roa (hash: ClKhGIdEbTXNOQjYUKo8kUllH20eM7IYqgOaHPxfrg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:73:95:4e:f4:a6:08:eb:4d:9f:71:a6:5d:70:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Validity
Not Before: Sep 23 11:00:20 2026 GMT
Not After : Sep 24 11:00:20 2026 GMT
Subject: CN=c09875e833da4c98a371703bd36014023880fb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:57:e4:ff:dd:0e:06:4d:1b:5a:c9:be:be:fc:
76:94:d4:4e:de:5c:eb:8d:62:f5:1a:60:64:d3:3b:
f7:f8:28:f5:75:7a:e4:59:65:45:79:c5:15:dd:71:
d0:1a:5e:49:9a:d0:c2:6c:32:e3:9e:5d:94:19:ed:
b4:65:57:27:bb:ab:6a:04:c6:e6:2d:55:77:7c:60:
0b:b3:67:5f:de:c7:18:d9:2f:a4:26:d9:c8:8a:00:
34:51:3e:6e:b7:fe:8b:d6:ec:3d:e9:a8:8b:9e:ec:
c3:c1:18:d9:64:c3:88:ff:a6:37:ff:c5:02:61:62:
1f:cc:55:9e:94:52:54:db:31:e4:82:61:7e:97:9c:
cf:c5:7e:6d:ff:73:e6:16:1f:3c:2c:ec:b3:60:59:
de:87:82:bd:01:84:b9:d3:0f:62:ac:0b:db:c8:5c:
6a:f7:6e:2b:0f:94:6d:9d:d8:89:83:4b:c7:53:13:
05:a6:3a:ab:8e:c0:e4:70:65:a8:e0:6b:77:06:2e:
fe:85:a6:2a:c9:ff:ca:13:0e:fd:45:ae:5e:ad:ad:
b3:03:69:aa:bf:f8:fa:97:11:10:e9:13:74:ab:f7:
be:81:42:1e:59:6a:e2:4d:b0:1f:3e:fb:e9:51:67:
cc:63:ae:86:08:fb:05:6c:06:ee:bf:0d:fb:e6:9d:
35:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:98:75:E8:33:DA:4C:98:A3:71:70:3B:D3:60:14:02:38:80:FB:15
X509v3 Authority Key Identifier:
keyid:E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0a:2d:d6:4f:e4:de:61:99:0b:de:4a:f6:dd:2c:c4:ae:30:
fb:ec:bb:63:8a:f6:02:63:0e:43:6c:7c:0a:62:96:73:9c:59:
89:5d:b0:90:95:97:7d:de:18:ef:ad:5c:63:e2:12:cf:b8:67:
ab:5e:0b:2b:5e:de:0b:1d:0a:02:be:86:fe:07:d6:7a:c4:fc:
c6:9b:7e:63:f7:2e:36:28:57:73:2f:c5:59:be:63:02:63:ad:
b6:27:89:9e:e6:87:49:9b:9c:80:2e:c9:95:60:a7:8f:a8:e7:
ef:cc:04:72:e4:96:3f:67:2a:82:60:1a:21:a7:e1:54:7d:df:
03:c5:6c:6c:e3:1e:af:a5:91:63:5b:2c:e2:61:a9:4e:37:49:
e2:9b:33:b0:bb:60:d8:5a:ea:24:bf:df:47:86:91:0c:35:8a:
a8:80:fa:d9:a9:f1:86:8a:80:6c:39:3c:95:d7:7c:4b:e8:46:
ef:a8:f8:9b:d0:10:62:51:8a:fd:76:a7:9b:50:be:57:fd:fb:
18:24:f6:cb:27:23:f7:a1:5e:87:e0:82:b8:62:28:aa:4e:0f:
2d:19:e2:5b:1e:da:2e:fe:d5:20:a4:cd:b5:41:70:2b:1f:39:
4e:3e:a1:32:1d:67:ff:cf:6d:e1:f9:8c:f8:49:56:db:96:31:
ca:0d:18:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:57:46 2026 by rpki-client