Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
File: 4NQ1eE2owhjg_xB83P4kykVpyUk.mft (raw, json)
Hash identifier: F9OYZpR1hGxlpdFLpN8Q6m5VXnGRqkKEt8IEjFHAhaE=
Subject key identifier: CB:D2:49:D1:DF:C6:91:9C:BA:6A:13:40:38:90:C6:DA:6B:79:43:C2
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial: 01A0D26E2EF33BFC8F06B4FE86C4B7FAD681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 08:00:31 +0000
Manifest this update: Thu 24 Sep 2026 08:00:31 +0000
Manifest next update: Fri 25 Sep 2026 08:00:31 +0000
Files and hashes: 1: 4NQ1eE2owhjg_xB83P4kykVpyUk.crl (hash: d4i0M0maEcxc6675xyW7VQbLwXP9bX5N2+8Rt0yMe5c=)
2: HQvqu0FyNTgLxOCtIkfc5EdcDj0.roa (hash: 130FHhBXUMCrMDc50ZJnqMVOCj69/WSdEuG7otm6jac=)
3: JDb5A2keqNNHHn7egHMcEGsac60.roa (hash: ArdL/hAkNPkcLPWJJnXPFWGPHSAOP/P5AYcbgtu+Yug=)
4: MbiryQPvDhyE4fWE2RUNJytt6AY.roa (hash: OrXM+BXuK0a9EBtLr+v3zOe94bGU/tMcOd4waL7ij94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:2e:f3:3b:fc:8f:06:b4:fe:86:c4:b7:fa:d6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Validity
Not Before: Sep 24 08:00:31 2026 GMT
Not After : Sep 25 08:00:31 2026 GMT
Subject: CN=cbd249d1dfc6919cba6a13403890c6da6b7943c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:49:90:7e:05:7f:76:e4:9f:f5:77:29:de:
07:12:87:f7:19:35:27:40:40:ee:99:22:36:b0:8e:
73:28:3e:a6:71:66:0d:35:a2:1b:5a:17:ff:47:02:
5e:fa:69:e7:4d:49:a9:7e:30:0c:6c:5a:24:5e:19:
18:fe:2f:ad:36:3c:05:b3:53:f1:4c:55:f3:64:33:
13:70:82:dd:ee:22:71:aa:69:30:24:8d:8c:b8:fb:
54:ae:63:c3:d4:84:82:43:06:da:af:96:c8:8b:dd:
0b:53:91:22:ea:eb:26:97:08:62:61:a1:83:43:6d:
04:91:d2:cf:11:04:65:98:22:db:39:be:61:d0:77:
10:3b:b6:98:60:d4:2b:8b:7b:b8:97:b2:28:d2:e8:
58:89:22:b3:e0:36:56:a1:43:47:ef:66:38:32:85:
f2:b2:0a:91:4b:d0:09:d6:7a:61:ea:36:96:30:01:
6a:0f:1e:5c:2c:db:d2:b0:52:3d:ce:c5:00:b6:0b:
5a:22:25:89:8e:ec:6f:f2:26:1b:89:31:eb:21:1d:
c1:7b:8b:66:da:c2:5c:76:d5:f4:89:09:d4:ac:c6:
35:77:fa:86:5b:04:a0:83:ef:d9:41:da:50:a3:82:
19:ff:25:5f:49:9b:05:76:c3:d0:37:3a:75:fc:19:
1d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D2:49:D1:DF:C6:91:9C:BA:6A:13:40:38:90:C6:DA:6B:79:43:C2
X509v3 Authority Key Identifier:
keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e2:b8:a3:34:ca:ad:33:9c:f4:56:39:f6:ba:31:51:36:86:
96:71:88:9c:09:09:85:c1:77:0d:42:2b:74:0f:d0:8b:8f:2b:
ee:4b:79:54:c3:17:08:59:3b:0c:45:b5:e2:0a:58:7f:ac:00:
78:b1:dd:5e:c6:ee:69:79:22:56:94:69:b8:72:c5:e7:a8:de:
c8:cc:ba:9b:c0:ce:8d:11:45:6f:ec:b7:7a:d2:55:81:d5:98:
12:01:72:25:7f:e6:59:10:25:8c:b5:42:36:16:14:e8:18:a0:
b0:0e:ba:f8:27:66:4e:b3:91:d5:76:ab:f8:44:3d:b9:17:04:
84:a7:cb:9a:16:1a:a3:c5:d5:97:27:fc:ea:00:88:e4:60:0c:
7a:4d:46:bc:95:57:1f:dd:7d:3b:96:52:ff:bd:de:ec:cc:46:
28:9e:99:ae:9f:5b:9f:11:41:00:8d:13:d2:05:6e:45:bb:0a:
75:81:a2:27:cc:9e:f9:d7:a0:68:a2:01:be:21:2b:e7:d9:da:
26:db:74:e9:c7:19:7e:7d:1b:81:79:f8:9c:21:a5:18:a9:09:
cc:3e:68:21:d7:fe:29:fd:1b:46:33:9d:a1:7f:2e:00:f5:94:
7a:10:d6:0b:0d:3c:78:c0:b5:5a:ac:db:19:2d:a3:cc:12:c7:
9a:41:3f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:02:37 2026 by rpki-client