Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: u8FvbGsQVaAd4pZSKIfOTvwk7wLGyOnM0KjbEj+cJ/g=
Subject key identifier: 23:37:94:0E:2A:4C:4A:47:17:91:B5:23:57:0E:79:14:5B:4D:D5:3E
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 01A0D682BD7D857DA3E0E828FF18AD6E27EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 145F
Signing time: Fri 25 Sep 2026 03:01:27 +0000
Manifest this update: Fri 25 Sep 2026 03:01:27 +0000
Manifest next update: Sat 26 Sep 2026 03:01:27 +0000
Files and hashes: 1: 0nQ5HrpSfmi0t1lgfzKwG4GEEHA.roa (hash: rFJp94wINDC3ecjBHnwWODJLBayKpyALDaZAihUD5C4=)
2: nPVHMKh_KfMvRao_vET8GSNdB60.roa (hash: CNFNDT0hozsG/GOj4JydTWPL4u34Bu99WDiqKSdCSGY=)
3: nT0dZV9vpJOe4Ur34PRwza0i0vo.roa (hash: NbPGPMvzh32ZwAt9Bg1XTBpSWoDxY/0tDyiOFU+i+30=)
4: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: WBPlgDfNRQOFNq7U+34p0L5QcHXPfQAJlLQG9lCe4JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:82:bd:7d:85:7d:a3:e0:e8:28:ff:18:ad:6e:27:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Sep 25 03:01:27 2026 GMT
Not After : Sep 26 03:01:27 2026 GMT
Subject: CN=2337940e2a4c4a471791b523570e79145b4dd53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:57:b5:8f:4c:0a:88:bb:ff:65:ed:89:f0:d9:
fe:ec:c1:12:cf:a3:8e:16:e6:a8:84:1f:98:90:48:
5a:08:56:ab:f0:4c:02:7c:bb:0d:0f:58:eb:c0:5a:
05:cd:51:d4:6f:2e:f8:31:b8:8b:82:77:e5:57:23:
e2:c4:3f:a3:eb:22:d3:c1:c2:97:6b:5b:b6:c1:f0:
9f:37:78:60:9f:87:00:22:18:4a:d0:27:4b:b2:4b:
f1:7b:ab:bc:7e:d8:67:55:9a:18:7c:81:44:de:58:
0a:9d:f9:be:19:12:ad:1f:dd:22:10:bf:87:34:72:
15:70:94:1c:0e:0d:2c:59:0b:fe:e7:c9:10:2d:b2:
df:88:ca:bb:c3:45:a7:e0:08:58:9c:38:76:5d:e1:
14:36:99:f5:5a:12:99:a9:9e:15:ca:79:fd:d4:7f:
75:3d:5f:12:cf:c3:aa:48:67:d9:1a:5c:cd:ab:fb:
57:09:db:d9:a9:16:f0:dc:87:6f:f5:0f:96:39:90:
de:3b:ef:29:f0:6a:44:e4:53:b5:61:49:f4:33:b5:
20:04:7a:17:71:3c:fd:23:00:7c:ae:7a:45:46:36:
ee:3b:f5:8d:62:3e:b6:91:b3:b9:ff:b6:5d:86:67:
54:c4:2e:81:9a:dc:61:b9:77:ca:4a:1f:f1:c3:c2:
26:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:37:94:0E:2A:4C:4A:47:17:91:B5:23:57:0E:79:14:5B:4D:D5:3E
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d6:88:b0:81:67:38:d1:e2:f6:22:4a:78:1b:4c:ec:eb:9a:
18:33:03:dd:9c:a1:e0:a4:dd:c9:97:07:b7:57:d6:7a:ec:46:
2d:79:e0:e4:f4:1b:00:ab:80:26:a3:ea:fb:d6:ee:2b:89:ed:
fb:7c:b5:98:d9:b2:8e:62:e8:b2:e7:7c:3c:74:c9:63:60:d6:
35:c0:a1:03:0f:47:a3:f7:88:6f:43:f1:4a:b3:32:44:da:10:
ae:19:93:b6:49:64:dd:b9:47:4a:99:ef:29:9b:04:93:cf:96:
43:25:a0:fa:2c:e0:2a:8b:b9:24:70:84:39:d6:e9:f0:75:f8:
25:c5:0b:62:e6:27:57:c1:75:d4:1e:52:4d:35:ad:5b:75:df:
e2:4c:8a:9d:2f:00:4d:88:a8:c9:20:d9:83:c6:3c:4b:12:ed:
27:0f:86:7b:b3:d5:ac:89:33:33:86:e7:47:19:8e:c7:c9:b7:
da:72:b9:8e:86:74:1f:d2:ea:2c:57:d4:12:d3:0e:cd:43:d2:
08:df:f5:7f:5d:40:79:5d:19:52:3a:10:1b:30:aa:31:d3:c5:
85:34:9e:61:3a:57:09:c9:7c:82:de:df:ec:b0:4b:c2:a2:cd:
d0:89:79:c6:46:b3:e3:1a:b0:12:4f:ac:5a:ce:47:05:0e:da:
ac:0d:3b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:25:06 2026 by rpki-client