Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
File: 4rRFsAqGALgzTB06rfHvcZFOaMk.mft (raw, json)
Hash identifier: qcCQkD8FluUXP09cDWwZONYNeEiaQKK4KQMGvo7SCcM=
Subject key identifier: 0B:23:E8:C5:2C:8E:B7:DB:5D:92:F5:4F:2C:9B:B2:87:2F:F9:94:DE
Authority key identifier: E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
Certificate issuer: /CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Certificate serial: 01A0D0B65338C9F2AE7116D5A74C20281BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
Manifest number: 1A6B
Signing time: Thu 24 Sep 2026 00:00:04 +0000
Manifest this update: Thu 24 Sep 2026 00:00:04 +0000
Manifest next update: Fri 25 Sep 2026 00:00:04 +0000
Files and hashes: 1: 4rRFsAqGALgzTB06rfHvcZFOaMk.crl (hash: iwucCxoFQebx8xfC5n9Ku7/IAVqLvyVk7dAdWUJc8PY=)
2: nQKy6e2LccKKfVdgMJiI4DoR9BU.roa (hash: DkQsbrxnTq1yHz8jrN75m8LOYNoDRbUgrzZnY6/SqN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:53:38:c9:f2:ae:71:16:d5:a7:4c:20:28:1b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Validity
Not Before: Sep 24 00:00:04 2026 GMT
Not After : Sep 25 00:00:04 2026 GMT
Subject: CN=0b23e8c52c8eb7db5d92f54f2c9bb2872ff994de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c1:b4:60:46:b8:19:ea:81:d5:7c:2c:41:76:
b9:fd:82:13:7d:16:8e:c9:61:48:8b:5c:d3:d7:44:
9a:12:07:79:3b:c5:59:8a:d8:d1:d4:ca:d7:08:f6:
8a:fc:21:fc:dc:d3:6e:81:d5:5a:fc:d3:7b:31:1f:
16:8b:6b:ed:2b:d3:a8:7a:21:00:0f:3c:aa:73:f5:
37:cc:cd:1b:04:d3:27:6c:80:ad:1e:5d:70:a8:37:
d7:30:35:04:20:12:14:ed:7a:44:c5:d9:09:ec:0f:
eb:ee:e9:25:84:14:ae:55:43:63:60:cc:9c:7a:12:
d1:9f:71:2b:b5:48:ad:06:d8:64:bb:66:d9:86:c9:
6b:ee:f8:1b:eb:44:1e:d4:ba:7b:50:72:6b:81:57:
16:b4:5b:e6:d6:0a:4a:46:84:f3:c2:a7:50:ae:e7:
6c:e1:34:e1:06:86:51:06:b5:0f:92:a4:66:bc:68:
ce:4c:3a:48:11:ad:43:72:d0:8c:c3:d6:85:28:27:
58:0b:93:7e:4b:44:5a:91:10:19:3d:25:23:27:3c:
5f:aa:a4:cb:69:23:54:d4:cf:f6:6f:b8:5d:19:e0:
1e:f6:f8:28:c7:7f:96:e4:44:99:cb:58:2e:b4:83:
49:73:50:6b:d9:c9:11:2a:f4:f3:0c:c2:ef:b7:23:
80:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:23:E8:C5:2C:8E:B7:DB:5D:92:F5:4F:2C:9B:B2:87:2F:F9:94:DE
X509v3 Authority Key Identifier:
keyid:E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:67:33:65:75:24:f9:fc:76:ad:3b:b8:01:5c:ab:58:38:0a:
3f:9a:60:5f:ae:07:f5:51:ce:4c:65:11:ff:b5:93:84:a8:72:
8c:3b:e5:14:a9:10:a7:e7:ab:3d:fd:8e:9a:cf:39:7b:f6:29:
a8:a9:b4:25:a8:22:10:2f:75:7a:f6:07:90:ac:2c:11:1c:1b:
6e:92:b9:64:9e:84:bc:e0:88:a4:8e:e5:cc:91:a1:a2:da:31:
ac:75:18:f3:66:05:24:79:7c:62:85:8a:76:b7:b6:a8:08:bd:
45:66:fe:34:7e:5f:fc:17:7f:c5:c9:bb:7b:51:41:6e:89:c1:
5b:9e:cb:b6:52:fb:f7:6e:46:35:33:ed:a6:63:23:ce:87:61:
a0:ae:c6:a4:f0:70:a9:21:1f:f9:1e:fa:1d:da:22:c9:e4:0b:
47:a5:96:85:ca:5d:64:9f:d7:6e:93:19:16:8a:9a:5e:eb:78:
b1:32:91:5a:fd:2b:50:7b:f0:f7:42:b0:a8:6d:eb:d5:8e:99:
96:aa:42:a1:cb:43:a7:67:4f:b3:87:9f:fa:1c:13:4c:59:5a:
14:ee:d4:30:b8:df:50:58:59:c8:a9:92:9d:20:42:4b:42:48:
92:5d:38:86:27:fd:9d:cc:67:d1:1f:52:cf:ed:3b:d8:ab:ba:
6e:cb:7c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:49:17 2026 by rpki-client