Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
File: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft (raw, json)
Hash identifier: 3Gah/KR3MtK0Pam6n95nAgrm5GMYGEjlXnvZCt8E7Zg=
Subject key identifier: C0:9F:14:6B:B0:70:D9:4E:B3:56:29:E9:06:AF:2F:BD:1D:BC:CA:03
Authority key identifier: E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
Certificate issuer: /CN=e0d1a8366c21159f079478a9030843fbf60631b9
Certificate serial: 01A0C9A203E1C8AFF5EE701B9017196124B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
Manifest number: 19FA
Signing time: Tue 22 Sep 2026 15:00:33 +0000
Manifest this update: Tue 22 Sep 2026 15:00:33 +0000
Manifest next update: Wed 23 Sep 2026 15:00:33 +0000
Files and hashes: 1: 2Yc5Pc_w4EBrqOMKmFKQLhTLkdw.roa (hash: xcDU75sza534zn4A1SLY0N4eKvAgRsSzSIlzRIhia7Y=)
2: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl (hash: A4yaokrkLm6QG9f0fSluDE3wwAYHom7ruj3/kxgLm60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:03:e1:c8:af:f5:ee:70:1b:90:17:19:61:24:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d1a8366c21159f079478a9030843fbf60631b9
Validity
Not Before: Sep 22 15:00:33 2026 GMT
Not After : Sep 23 15:00:33 2026 GMT
Subject: CN=c09f146bb070d94eb35629e906af2fbd1dbcca03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:62:9d:b0:6e:ee:d7:60:0a:bb:85:57:15:22:
37:1e:7d:b5:c9:4f:4d:e5:d0:e4:24:19:da:50:29:
d9:4b:63:c9:2c:39:1c:80:d6:af:b1:f8:b6:41:8f:
d3:65:4b:c0:1d:08:1f:ca:03:69:11:85:12:13:08:
7e:ef:df:d5:13:4a:3c:fc:ef:c6:25:89:4f:e2:d3:
95:ee:16:49:9d:e6:2f:ad:af:25:5a:c5:42:aa:c2:
51:15:d4:0b:12:28:7f:12:4e:78:11:90:3a:68:9c:
0a:8c:ee:c4:ce:69:02:03:1e:41:b8:de:bb:29:05:
6a:1b:c4:b0:4f:0b:f3:d7:42:86:bf:4b:e3:e2:c2:
fe:1c:11:26:2b:3d:e4:0c:b1:01:8e:ee:67:ab:e9:
4d:79:42:8e:fa:c8:70:54:0f:a8:e6:87:6a:42:bc:
96:3f:f4:99:f7:ed:7c:33:f0:fd:cf:5d:32:a2:57:
34:0b:83:30:65:db:b1:37:a3:45:f3:76:99:56:0b:
68:2d:53:db:1d:83:5d:c7:a9:63:4c:95:25:84:14:
ef:df:87:fb:b6:4b:51:69:b3:31:7e:29:d4:de:73:
e0:30:2e:45:87:8e:64:01:ad:1a:a8:47:b3:2a:65:
db:e9:e9:19:e0:12:ab:87:97:3c:a9:01:f8:72:24:
72:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9F:14:6B:B0:70:D9:4E:B3:56:29:E9:06:AF:2F:BD:1D:BC:CA:03
X509v3 Authority Key Identifier:
keyid:E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6a:cc:e5:b5:0c:f6:43:f5:2f:58:58:25:cd:f0:4c:63:94:
a1:62:e9:77:d1:d2:ea:d5:9c:38:0e:07:ca:b6:ee:78:56:24:
42:e0:98:a3:ff:2b:44:10:a8:1c:da:ef:67:d4:13:41:69:15:
61:16:5f:8e:b4:95:f3:b6:86:1f:9b:a4:fe:44:1b:4e:54:d9:
93:92:bb:c1:29:11:10:b1:32:65:fb:53:f0:b2:f1:10:51:0e:
fe:92:11:32:21:24:d5:be:d1:ec:e9:3e:ff:0c:1b:70:a0:c2:
13:55:cb:f5:52:8f:f8:d9:30:e6:35:93:4b:5b:fa:f9:40:52:
20:39:77:28:45:a6:3b:21:2b:dc:29:8d:e9:61:0d:f7:90:de:
ac:eb:11:be:6c:d8:c4:ef:16:92:64:f0:46:37:07:e3:d6:6b:
c3:29:58:06:d9:0e:67:ca:e7:ce:5f:93:1d:88:71:c4:1b:1e:
d2:2c:76:4c:d8:de:42:d0:ea:12:7f:1d:07:97:af:4d:52:a7:
66:38:91:70:58:c7:4c:a8:3f:a7:a1:43:71:c7:a4:87:fe:4c:
e5:bc:f2:72:bf:63:00:fb:bf:4c:3b:e6:22:5c:a4:01:63:eb:
8f:04:ca:75:e1:15:14:28:da:f4:40:d8:09:3f:ef:84:48:1b:
6d:e1:55:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:45:31 2026 by rpki-client