Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
File: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft (raw, json)
Hash identifier: hF73J/wuq2mbtZuKObrcjyZdoNlY4G1OK16zFGMohVw=
Subject key identifier: 04:B5:FC:2D:C8:42:C9:CD:33:F4:98:74:D1:F6:30:F7:67:27:9F:86
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Certificate issuer: /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial: 01A0CCA33A8452EE006F48FFDB86714DF169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
Manifest number: 0B6D
Signing time: Wed 23 Sep 2026 05:00:44 +0000
Manifest this update: Wed 23 Sep 2026 05:00:44 +0000
Manifest next update: Thu 24 Sep 2026 05:00:44 +0000
Files and hashes: 1: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl (hash: bi8xGLy4lIK/HLNsIBQ3Fzfb4d+6fiz9uxZOji5kK5U=)
2: klvWM1OU1QpXYjnYjHz52i83egs.roa (hash: AnN+EnJzL1csHXlCR//CnqmJdv49PCKi+mvAFO4ib4E=)
3: tEyInJDOacbK6EmGN5_UjB36hSM.roa (hash: Brx/LHxXHyihOiS7ZJHPUbKExTDPA4EDRA7rrTYIERM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:3a:84:52:ee:00:6f:48:ff:db:86:71:4d:f1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
Validity
Not Before: Sep 23 05:00:44 2026 GMT
Not After : Sep 24 05:00:44 2026 GMT
Subject: CN=04b5fc2dc842c9cd33f49874d1f630f767279f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:34:50:52:71:a6:a8:f6:75:4b:be:5c:2c:eb:
41:66:3e:02:e4:11:49:79:e7:e7:a4:0b:5f:8a:e7:
3f:56:89:f9:fa:8b:7e:46:89:50:32:65:8d:d4:47:
a6:f1:fb:86:61:8b:72:f0:0c:25:cc:26:b2:50:81:
8c:4d:6d:33:8e:2e:76:d7:95:93:b4:a7:21:82:dd:
48:50:50:39:78:53:b0:c6:05:bb:ce:1b:6a:1d:92:
a5:bd:b0:b5:bf:ea:53:31:af:b7:fb:d7:50:28:e3:
a8:d1:57:75:0a:e1:ed:d5:f9:e7:16:a4:ce:b8:ca:
7f:65:43:ae:33:65:4a:5c:0f:f8:63:56:66:d5:22:
10:3b:f4:fc:32:4d:af:53:61:e8:a4:83:7f:82:c7:
ec:3e:56:8c:b4:35:e7:e7:6d:74:d1:49:34:5d:37:
19:cf:a7:44:02:8e:31:b1:59:d8:47:c9:b9:52:79:
06:03:d6:a9:70:f4:6a:5a:6e:8d:89:b1:34:27:18:
c4:f6:8a:bd:30:06:47:96:61:48:b0:3b:f7:2f:d5:
37:99:f2:6d:81:a8:a0:62:b2:e9:2d:cb:80:e8:ec:
a7:01:eb:c9:ba:f8:30:aa:fc:8f:2f:c4:9c:ae:72:
79:b5:db:9e:91:75:bb:41:b4:f9:15:55:10:59:88:
9b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B5:FC:2D:C8:42:C9:CD:33:F4:98:74:D1:F6:30:F7:67:27:9F:86
X509v3 Authority Key Identifier:
keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:57:4a:8c:67:73:d2:aa:08:ae:20:30:86:38:8f:2d:d0:65:
85:9f:21:de:7f:93:72:28:3f:6d:b6:9f:e7:d2:01:17:c0:07:
4f:88:f7:30:50:74:0d:ad:b7:aa:ee:8a:43:c6:46:b9:12:e5:
8c:2a:cc:8d:8b:12:62:7e:e4:cb:1b:e2:29:1a:ec:6a:ba:61:
42:86:85:48:f5:53:7e:af:38:77:f7:9c:e6:f4:ea:63:be:28:
33:d3:9f:d2:65:1f:03:fb:1d:65:f5:48:d5:5b:d8:df:c5:e5:
cd:a3:20:64:40:7c:93:ee:4b:1f:31:29:df:91:73:96:3c:e0:
b5:1a:af:23:6e:23:84:67:e4:2b:81:c3:af:e3:75:23:6e:c2:
35:be:1d:b1:84:00:e3:b8:5e:fc:82:23:9a:80:0d:ee:a0:8a:
23:09:ec:57:a9:b2:8b:f8:49:33:b4:06:54:17:39:ed:6d:fa:
24:34:70:41:2a:12:ec:cb:30:7d:e9:04:a3:48:79:5c:f9:1a:
69:ed:77:e6:7c:aa:e2:bd:a3:e8:1f:8f:cd:fe:b6:d2:bd:51:
d6:d8:a2:1f:ea:0c:5a:bb:58:a5:89:31:31:3e:8c:7f:9b:a6:
0d:91:cd:aa:b4:9b:b1:ed:fa:36:ff:ab:e0:7b:0a:ab:a1:85:
56:63:12:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:41:31 2026 by rpki-client