Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
File: 4br5DtE9F1RSz15aFjKnlL8fTJo.mft (raw, json)
Hash identifier: 0vLurHHqtNTe/NJDFPxZ7dum7RE3wss4l9vX9UE09UM=
Subject key identifier: AD:F0:2B:D2:C0:E1:03:CB:D6:01:06:14:24:D0:FD:F6:DB:49:68:07
Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
Certificate issuer: /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Certificate serial: 01A0CD477D29E4360261ED319670AADE9DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 08:00:09 +0000
Manifest this update: Wed 23 Sep 2026 08:00:09 +0000
Manifest next update: Thu 24 Sep 2026 08:00:09 +0000
Files and hashes: 1: 4br5DtE9F1RSz15aFjKnlL8fTJo.crl (hash: 9DSue0tM8CcTQHjF0UCjZHMPjQrOZo39OnnwTtOEwp4=)
2: J1Zd6j9Lcwtys2PuV4W0VrM-mt4.roa (hash: 0QTHJDhGxK5m6zxqs1yz2ztZUhs7s6VuZHp2XlfhZqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:7d:29:e4:36:02:61:ed:31:96:70:aa:de:9d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Validity
Not Before: Sep 23 08:00:09 2026 GMT
Not After : Sep 24 08:00:09 2026 GMT
Subject: CN=adf02bd2c0e103cbd601061424d0fdf6db496807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:2d:c9:f7:d2:6e:f1:ff:48:db:5b:31:8e:
76:69:a8:d8:24:6c:9a:41:6c:d1:70:02:03:97:f9:
e5:f2:a1:c3:ab:dd:d5:cb:44:9b:3c:84:8e:4e:f2:
16:e1:6e:38:6f:00:b5:e5:67:67:d7:2b:24:db:11:
62:49:c4:65:95:3a:72:be:6d:ba:90:04:f3:34:16:
c1:fd:a9:ce:72:ad:e6:fb:74:38:a5:d5:55:e6:9d:
69:85:2c:51:53:a1:ac:7c:a3:77:0d:f2:76:67:fa:
9c:23:9c:8d:fd:4f:0e:ff:be:82:4f:53:3d:86:de:
49:44:9c:69:50:6c:5e:df:9a:20:30:99:cc:42:32:
a5:69:66:1d:a1:36:7e:93:0f:36:8e:d3:23:e2:22:
71:94:1b:e1:d6:c2:af:5c:a0:26:41:b5:15:91:7c:
ad:e1:cf:94:66:61:cd:89:7a:6b:37:06:8c:30:b1:
43:83:bb:cf:64:c9:2e:2f:e2:99:fa:77:4a:20:35:
81:b0:a4:2c:6b:5d:0f:00:7f:f4:86:ad:b1:25:3e:
46:1d:f2:c2:91:73:75:a0:81:97:63:14:29:1b:47:
cc:e7:b4:c8:5c:cc:e4:1f:e6:22:40:40:0f:00:fc:
6e:62:6f:85:45:24:1c:17:d4:55:54:d5:48:a8:b1:
9d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F0:2B:D2:C0:E1:03:CB:D6:01:06:14:24:D0:FD:F6:DB:49:68:07
X509v3 Authority Key Identifier:
keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ec:74:56:35:97:03:e1:6d:29:8a:36:08:05:b5:32:74:6e:
1c:4a:48:b3:df:da:84:ff:10:21:c0:d4:f3:ad:bf:1f:89:3b:
d8:e0:a2:37:ef:9b:03:6d:80:18:85:35:3c:8a:6c:51:ca:6a:
8b:17:59:a1:69:fc:91:7a:e2:2a:c0:ac:39:f4:91:14:a3:59:
37:e5:1f:bd:38:3e:bf:25:1a:01:64:2e:36:12:99:58:4b:5c:
56:4e:70:84:9e:52:3a:81:32:41:c0:96:62:ef:44:d2:72:a0:
c0:c6:cb:02:9a:34:ed:df:e6:58:1d:5d:6e:17:20:22:9f:38:
f9:67:48:70:5e:fb:9b:a6:93:15:76:29:ea:25:ed:62:cc:d5:
08:24:fa:24:c9:08:ad:0d:80:cd:21:b5:fc:be:04:6a:e6:f4:
96:35:a9:c9:f6:82:58:ba:8b:63:81:42:c9:69:2b:83:f4:05:
80:33:f1:35:aa:da:44:8b:ec:64:37:5b:88:c6:c1:4f:fc:b8:
1a:50:af:5f:ca:fb:44:31:5b:5d:83:3a:c4:e8:a1:e8:0c:5e:
40:b2:73:fb:e9:45:8c:4a:f4:a4:cd:78:87:91:69:08:a9:9d:
03:f6:bd:ba:f8:f6:09:29:aa:34:3b:f4:b1:9c:16:fe:c8:34:
e0:8f:77:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:29:54 2026 by rpki-client