Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/4gwaOtdAOA4tNbccwx8OdGaNfYo.mft
File: 4gwaOtdAOA4tNbccwx8OdGaNfYo.mft (raw, json)
Hash identifier: LNBiPEV3sC07QEUhk9T2rdmokdCbhw8qnGL9Zb8ehiQ=
Subject key identifier: 9B:4C:12:68:3C:6F:27:48:CB:71:10:4C:DF:58:B8:99:07:C4:94:FF
Authority key identifier: E2:0C:1A:3A:D7:40:38:0E:2D:35:B7:1C:C3:1F:0E:74:66:8D:7D:8A
Certificate issuer: /CN=e20c1a3ad740380e2d35b71cc31f0e74668d7d8a
Certificate serial: 01A0CC353C48FEBF97AC95DF1061DF90B493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gwaOtdAOA4tNbccwx8OdGaNfYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/4gwaOtdAOA4tNbccwx8OdGaNfYo.mft
Manifest number: E3
Signing time: Wed 23 Sep 2026 03:00:35 +0000
Manifest this update: Wed 23 Sep 2026 03:00:35 +0000
Manifest next update: Thu 24 Sep 2026 03:00:35 +0000
Files and hashes: 1: 4gwaOtdAOA4tNbccwx8OdGaNfYo.crl (hash: NXcBEB+2962yZ0Jc9LcbLGZD5Rs1jLuKKk4cH+B/WZs=)
2: r6naNgboRIR-K7Xy37v9x1ob_9M.roa (hash: XqgTeLaFMQaYrfck9iQh85I2pBo21M9RzrFoxt7HJfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/4gwaOtdAOA4tNbccwx8OdGaNfYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/4gwaOtdAOA4tNbccwx8OdGaNfYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gwaOtdAOA4tNbccwx8OdGaNfYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:3c:48:fe:bf:97:ac:95:df:10:61:df:90:b4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20c1a3ad740380e2d35b71cc31f0e74668d7d8a
Validity
Not Before: Sep 23 03:00:35 2026 GMT
Not After : Sep 24 03:00:35 2026 GMT
Subject: CN=9b4c12683c6f2748cb71104cdf58b89907c494ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:62:90:88:d8:cb:89:85:3e:5c:e0:ee:a6:f6:
8a:23:3c:3d:65:08:c5:91:d6:b0:7d:a9:0d:16:0b:
c0:b3:db:90:89:fa:40:c8:64:76:02:ad:34:11:cc:
76:9b:d0:f6:48:75:40:86:ac:a9:c9:c4:21:b8:74:
a3:60:cb:d2:d5:ec:78:b7:ae:a4:a0:c9:cc:ab:df:
43:aa:2c:ec:b3:7f:49:d2:33:23:46:5b:50:7e:40:
9e:7a:ed:48:68:b3:62:b0:7c:ee:5a:41:e3:68:d0:
e9:9c:a0:8e:c5:a0:00:61:84:90:db:29:aa:f9:bf:
0a:91:4e:65:39:ca:ae:e2:53:14:ea:79:2b:f8:aa:
de:09:22:bc:81:94:80:d4:b9:7c:96:c1:1f:36:97:
4a:fd:2d:3d:84:a4:34:67:b2:9d:1b:44:64:05:3a:
04:90:60:88:b0:04:fe:e5:4e:05:a7:d9:2e:87:79:
7a:78:6e:c6:a2:95:cb:f1:c7:e6:51:c9:1d:7c:81:
9c:c2:d1:f9:81:c6:91:47:a7:a2:71:53:0a:d2:ff:
f1:1f:e5:d8:ca:ad:a0:c6:3b:b4:8d:be:58:77:13:
f7:eb:f6:7f:a7:9f:4f:15:ac:0e:75:51:35:0e:0a:
85:bd:ff:e2:e4:fc:a1:19:bd:80:ce:e5:d5:04:8e:
2a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4C:12:68:3C:6F:27:48:CB:71:10:4C:DF:58:B8:99:07:C4:94:FF
X509v3 Authority Key Identifier:
keyid:E2:0C:1A:3A:D7:40:38:0E:2D:35:B7:1C:C3:1F:0E:74:66:8D:7D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gwaOtdAOA4tNbccwx8OdGaNfYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/4gwaOtdAOA4tNbccwx8OdGaNfYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/4gwaOtdAOA4tNbccwx8OdGaNfYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:23:4b:54:da:c0:7f:b8:23:8e:43:e3:23:8f:af:30:2e:0e:
69:29:cb:06:5a:eb:79:27:82:a8:02:75:05:b8:a9:f8:86:d7:
e6:9e:97:1c:da:12:ef:3a:2a:c1:71:46:29:29:9c:6c:5c:ac:
74:f4:6b:54:77:dd:2f:e5:ea:3d:51:e4:e7:1c:f3:52:31:5e:
88:b4:61:c7:b3:36:9e:97:a0:51:3c:0b:84:71:80:f0:81:68:
40:7b:ab:db:1c:62:ea:d2:0b:d5:04:82:94:0f:51:20:b0:af:
a8:19:0f:84:ef:96:f5:36:dc:de:97:a2:72:86:6e:79:ad:b0:
6c:a5:e2:33:99:55:97:01:c6:7e:81:89:5c:3b:ed:8d:bf:ed:
e1:1c:6f:bc:6b:49:43:e2:44:a3:ea:8d:b7:a3:09:1d:28:ef:
d5:84:bd:95:06:bb:6b:4d:a9:2b:c2:ff:9d:3e:2c:e6:97:26:
c5:af:91:01:41:0f:5c:3b:da:38:4f:15:b3:d4:db:4a:7d:a6:
3c:75:eb:84:53:5f:dc:7d:d7:44:60:13:76:21:7a:fa:12:1b:
78:86:a3:04:64:cd:9d:b4:6c:9f:43:20:f4:4e:0b:65:fd:d0:
6a:cb:18:6b:68:5f:00:de:6f:55:45:87:9b:d3:24:cf:64:01:
6b:77:e3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:29:17 2026 by rpki-client