Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
File: 4kB6dpbweYQUMFTUEePKXxg27NQ.mft (raw, json)
Hash identifier: 6TLYqKZFHIl89PCKMpjK612SN5bK0a/fyv17vQk9Ksk=
Subject key identifier: 82:59:2E:79:B5:60:4C:76:47:4C:C0:6C:9F:EB:94:CB:FC:78:49:85
Authority key identifier: E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
Certificate issuer: /CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Certificate serial: 01A0CA1012315F940E5CD7F57E486CA3A4DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
Manifest number: 0F33
Signing time: Tue 22 Sep 2026 17:00:45 +0000
Manifest this update: Tue 22 Sep 2026 17:00:45 +0000
Manifest next update: Wed 23 Sep 2026 17:00:45 +0000
Files and hashes: 1: 4kB6dpbweYQUMFTUEePKXxg27NQ.crl (hash: ioI427t9FeTA8JbiOGxV9dusJazwb5i3xTXbkCPJUgM=)
2: WmLHmdZMxDOKlC1Fqsc3FlKEnfY.asa (hash: m/8JCGEVFLwz3ghFyicJoK6G6xzZBUtlwCYggVSvDxc=)
3: XexrTT-WjOfF1IH0hIaeXZfiLag.roa (hash: HDA8bu6O9RqOeUyNIrj9FwIn/BuM4ZQvluzThKczOzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:10:12:31:5f:94:0e:5c:d7:f5:7e:48:6c:a3:a4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Validity
Not Before: Sep 22 17:00:45 2026 GMT
Not After : Sep 23 17:00:45 2026 GMT
Subject: CN=82592e79b5604c76474cc06c9feb94cbfc784985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:34:f0:b1:3f:f0:72:77:1e:a6:d9:ec:bc:2c:
51:3f:10:a0:a1:51:b9:f3:8d:e3:16:f7:c1:a0:41:
06:9f:91:63:e8:e3:69:dd:a1:01:92:a9:52:75:a4:
5f:1a:5c:e8:14:82:af:b6:60:7c:22:7b:75:dc:34:
97:e3:6b:2d:d4:9f:93:5c:60:21:dd:4b:20:cf:56:
0b:c2:8a:5d:f8:28:80:f4:de:a8:13:a0:3b:e4:b9:
c7:9b:18:df:34:eb:e1:ed:3f:3a:0c:e5:bb:45:e2:
47:b5:3d:10:68:f3:ca:d0:e5:8b:d2:f1:7e:2e:9d:
03:50:90:a8:4c:d9:8d:9c:01:f5:dc:01:6a:67:fd:
17:ea:d8:f6:8d:2e:67:71:90:6c:b2:ef:d5:a4:f8:
65:77:18:b6:08:69:c4:98:8b:ed:22:e1:8c:06:9f:
93:7a:33:b2:fa:7a:5d:13:f9:f1:b3:1b:7d:4d:27:
19:12:53:12:42:ae:c3:58:ce:f6:b0:d0:6c:df:98:
9f:d6:b9:09:e7:5a:f8:e5:d3:1d:0d:16:4a:62:eb:
e8:37:4c:44:28:62:df:4c:72:9c:70:1b:24:ca:5f:
59:85:06:7a:95:88:1d:34:aa:dd:80:6c:c6:2d:cc:
55:31:b4:7c:39:8e:d4:e2:34:18:67:f4:1b:c3:43:
3c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:59:2E:79:B5:60:4C:76:47:4C:C0:6C:9F:EB:94:CB:FC:78:49:85
X509v3 Authority Key Identifier:
keyid:E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9f:fd:93:85:b4:e6:f8:d4:99:81:b0:ee:e7:a7:4c:26:ee:
df:ff:98:65:61:78:c1:b1:55:87:e6:b2:51:ab:63:46:4b:16:
a5:e9:be:3a:e6:61:25:9c:2a:bb:96:b2:fa:07:7b:ec:8a:30:
19:62:57:12:a8:2e:d7:0d:90:37:f5:ab:1b:62:67:ad:5b:9d:
fc:64:97:39:50:2f:a5:82:49:03:15:77:67:1a:0c:ee:10:4d:
d1:6d:06:d5:fd:68:6a:a2:5b:00:fd:3e:45:d0:69:5f:3a:df:
eb:29:17:95:1e:bc:e3:65:58:ef:0c:a8:01:18:fd:58:c3:8f:
a7:7e:62:a1:94:1d:fb:f1:f3:3c:7d:bf:b0:0a:74:a6:1e:45:
08:c5:89:22:60:77:63:f7:4b:6d:a8:e8:d6:44:2d:bb:62:b9:
db:b7:7f:cf:d1:4f:1b:2c:76:34:e0:af:ed:8b:dd:dc:69:fd:
67:77:43:40:35:ff:a8:1d:ba:b4:e0:58:cc:7c:6f:be:df:a3:
e7:ba:1d:4b:b5:e3:93:06:0f:f5:f4:b0:90:4d:08:1f:2e:bd:
4f:db:d1:44:34:bb:b8:75:15:01:85:b5:0a:10:3b:f0:74:59:
21:b5:7f:6a:8d:64:04:b1:23:07:a9:c8:25:d0:5c:9f:5d:44:
8c:1b:76:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:26:25 2026 by rpki-client