Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
File: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft (raw, json)
Hash identifier: IvVnH7C17RBUMtjWgx6CBSR4EcBCyhR38DjaIUtiDfQ=
Subject key identifier: 2E:93:23:67:E0:7C:77:BC:AA:4F:DA:B7:3F:26:AE:6D:28:5F:AD:B4
Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
Certificate issuer: /CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Certificate serial: 01A0D6B9622C3F90FB4AB22DBAEC4A771BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
Manifest number: 1A81
Signing time: Fri 25 Sep 2026 04:01:08 +0000
Manifest this update: Fri 25 Sep 2026 04:01:08 +0000
Manifest next update: Sat 26 Sep 2026 04:01:08 +0000
Files and hashes: 1: 1-nIDHjjDOfK0qkT3T38aF1CybZo.roa (hash: wfNaZ1sAvLj/BXad973SBMXYEOp2AK12GK1yxn0qtHA=)
2: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl (hash: kda49mpM9dXBY4lEHhwMUsnWN+GDEVedHUTAEbeCl64=)
3: 7cNt7nS6Ga02pEEvUGwXFcclfa4.roa (hash: IhtCXpz8Ziv5ADSE80GH1TqeWkIm73cJMRq8OxzR0jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:62:2c:3f:90:fb:4a:b2:2d:ba:ec:4a:77:1b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Validity
Not Before: Sep 25 04:01:08 2026 GMT
Not After : Sep 26 04:01:08 2026 GMT
Subject: CN=2e932367e07c77bcaa4fdab73f26ae6d285fadb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:94:a6:a5:ba:ad:6d:6d:32:db:87:ca:d7:
3d:98:be:6e:d8:a6:00:28:37:bd:17:fe:8e:14:36:
3e:14:ad:6b:b2:35:e9:cf:8b:10:f9:89:89:2a:d8:
43:f5:3d:9b:8c:52:f1:f5:ad:c9:a5:d2:1a:f5:1c:
38:4e:9b:f7:82:de:5f:a8:12:7c:1f:a1:b0:52:da:
1a:f0:4a:bb:75:52:29:95:5d:2d:7f:75:74:e1:10:
f1:3d:6c:f7:8c:c6:44:73:11:46:63:93:79:4f:d5:
f3:f8:42:ed:a0:73:20:bf:1c:75:35:ea:00:50:05:
fa:42:00:58:6d:72:c9:ef:72:b9:39:e3:3f:98:fa:
49:8e:cf:c5:1b:e4:0a:1f:45:77:df:77:3c:ba:93:
53:27:8c:7e:fd:22:42:cf:51:f2:47:79:f5:55:82:
3c:1c:22:37:20:6e:2f:f8:e3:b9:ad:87:e1:60:e6:
87:9e:81:68:52:d6:3e:06:67:7f:d0:f2:b4:a5:89:
fa:67:7c:0e:17:2e:c5:a9:b9:fd:2b:27:26:9a:16:
29:f9:11:58:1a:4b:dc:28:fc:6e:ea:a9:80:8e:2b:
ee:5b:9d:37:b6:fb:7c:05:38:9f:a9:43:7f:e6:8e:
5d:5b:3a:fd:87:04:f6:3a:30:77:0c:98:d8:53:25:
30:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:93:23:67:E0:7C:77:BC:AA:4F:DA:B7:3F:26:AE:6D:28:5F:AD:B4
X509v3 Authority Key Identifier:
keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:0d:5c:93:9b:3f:b4:d8:72:3e:f3:32:01:48:99:69:0d:1b:
9c:47:ed:63:79:9f:ad:7f:1b:6a:39:2c:9c:0c:ba:62:b0:75:
7d:42:48:5a:a1:b8:b3:db:0b:cd:05:1d:83:25:80:6f:c9:c1:
87:43:10:ef:7b:36:36:6d:52:16:bf:72:85:a9:3b:d9:07:90:
a6:91:19:39:5e:02:70:73:d8:64:ab:9b:83:b9:4c:1b:89:f6:
bd:c4:29:7c:d1:5e:6a:60:6b:af:b7:12:bb:e1:ee:31:40:03:
94:af:8a:4c:2f:06:7b:18:d1:70:36:c6:58:df:2c:b7:b1:cc:
e7:98:1a:ac:a1:2e:d7:26:d4:5e:83:1c:79:e5:8d:89:cd:e4:
2b:c4:1f:9e:c5:ad:18:41:6c:a7:91:d9:8d:00:fe:5f:59:a2:
3e:dc:7d:ec:40:ca:51:3c:e3:56:28:28:4f:cb:26:6f:8a:a9:
0c:fe:70:7f:b5:10:5c:af:08:1b:0b:67:4e:76:60:74:fe:37:
99:52:02:24:1f:6a:7d:8d:09:35:ce:57:fd:d8:cc:5b:75:e4:
4b:65:52:54:ab:17:3a:91:92:fc:6a:2f:e8:f7:b1:28:54:60:
f1:1c:ce:e4:e2:b9:07:7f:cb:86:0e:7e:bd:56:2f:f3:42:29:
9c:f5:c5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:02:24 2026 by rpki-client