Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
File: 4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json)
Hash identifier: rKKpVTndbZ/hi8g+UmP60Lr9hxd/2T7a1aGV7r4pCY8=
Subject key identifier: DB:9F:E3:19:CD:1A:F5:5F:80:16:A4:8C:C4:42:6B:8E:7D:E9:7C:31
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial: 01A0D012740BD08E81F2C960443EC694D704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
Manifest number: 142A
Signing time: Wed 23 Sep 2026 21:01:05 +0000
Manifest this update: Wed 23 Sep 2026 21:01:05 +0000
Manifest next update: Thu 24 Sep 2026 21:01:05 +0000
Files and hashes: 1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: in2icHqNwcItmU/KohyysSMq7aYubBHK57q1Fwvslvo=)
2: nqVRQY9OL-QYsG10ABRxkJgdhMg.roa (hash: wMAwtClt2rNSLlbeGnfkTll5PRaR6LFumc9JToEyja8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:74:0b:d0:8e:81:f2:c9:60:44:3e:c6:94:d7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Validity
Not Before: Sep 23 21:01:05 2026 GMT
Not After : Sep 24 21:01:05 2026 GMT
Subject: CN=db9fe319cd1af55f8016a48cc4426b8e7de97c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:20:61:a3:f1:ba:58:31:54:b1:33:90:51:
c9:6f:64:9a:60:cf:88:05:53:26:9e:f2:2e:af:22:
c9:24:af:c7:4c:0d:2e:d8:4f:95:62:de:d7:b9:b5:
6f:3f:4e:3f:6b:75:7e:d1:a4:9f:93:8b:71:3b:b6:
b4:2d:44:a4:a3:d4:ab:51:ef:e8:05:51:b6:1c:60:
2e:f8:bd:6f:3b:73:84:aa:b3:6c:f8:e4:e5:e6:90:
51:5b:47:13:72:6a:b7:76:12:bb:6c:34:9d:38:32:
5b:14:5f:df:f1:ec:85:42:2a:88:75:8b:58:43:a4:
6c:d9:5b:2d:81:40:a7:2f:a7:d5:22:0a:a4:cd:14:
a5:ad:9b:57:1a:76:ee:ce:3b:69:f1:97:3b:22:ec:
7d:db:52:9f:58:48:15:4a:8b:02:18:97:bc:a4:1e:
38:42:60:9a:fc:31:08:7c:2d:06:38:d9:32:25:e1:
f3:4d:c8:04:c0:66:2e:aa:16:00:76:c9:e4:0e:2d:
6a:d3:ec:6e:d0:9e:80:77:6e:f2:06:45:30:ed:53:
79:f2:04:68:ad:e9:20:a9:d6:30:9a:38:7e:1e:55:
5c:6e:1b:8a:06:27:82:e1:77:30:ed:ac:5b:96:6b:
46:a7:ae:68:81:7f:bd:6e:82:60:af:64:ba:3d:42:
7e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9F:E3:19:CD:1A:F5:5F:80:16:A4:8C:C4:42:6B:8E:7D:E9:7C:31
X509v3 Authority Key Identifier:
keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e7:e3:c0:17:f6:0e:f7:e1:08:d1:d7:d0:69:9d:c0:93:a0:
b8:27:86:1f:b7:6f:32:18:84:cb:2f:02:2e:49:c0:a9:2d:e6:
b4:1a:63:7b:0f:07:97:4e:8c:d0:a3:23:13:45:4e:08:a2:65:
c7:db:b7:55:e0:33:7d:f9:83:e6:38:e6:da:12:fd:93:98:1e:
ad:46:03:05:b1:0a:d5:71:82:cf:1b:34:4a:df:97:ab:56:83:
5b:05:2e:28:94:3f:6f:c7:af:33:e1:7b:89:3d:2d:f8:de:84:
0b:79:75:a2:18:88:20:5b:ba:cc:38:0a:49:95:c6:fe:cf:1b:
6c:c9:e2:00:58:8f:fe:8c:e9:46:55:f1:d2:92:8a:2a:f2:2e:
f9:9a:78:8c:4c:4f:a1:a4:d8:ac:63:b1:c0:5d:52:44:2e:c1:
7f:c5:f0:76:1f:98:49:aa:40:bd:79:ed:af:18:5a:1c:6c:72:
4f:10:36:ad:01:26:07:46:0e:a9:4a:5c:42:cd:6f:bb:5b:2c:
a0:87:93:dc:92:bb:eb:ed:96:94:6f:39:2e:cc:99:0c:59:e1:
80:94:58:a7:16:2f:24:14:74:68:a5:ad:e7:a2:b2:91:d9:39:
28:cd:e7:e3:17:17:2a:d2:d9:36:47:ad:b0:71:51:3e:ab:64:
e5:ca:58:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:41:39 2026 by rpki-client