Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
File: 4MZJtmoZ2i_sI2sEndEioO82iw8.mft (raw, json)
Hash identifier: fPB4MTqsxRhQe/e3XhnWsaY/wC5VOWydczL2NRI4j6U=
Subject key identifier: 30:4E:DB:5D:BE:F3:EB:EF:43:B2:46:A4:68:6C:FC:60:C1:74:90:1B
Authority key identifier: E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F
Certificate issuer: /CN=e0c649b66a19da2fec236b049dd122a0ef368b0f
Certificate serial: 01A0CB59597ADC9CD0C9208AE623DE0B915A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
Manifest number: 035A
Signing time: Tue 22 Sep 2026 23:00:25 +0000
Manifest this update: Tue 22 Sep 2026 23:00:25 +0000
Manifest next update: Wed 23 Sep 2026 23:00:25 +0000
Files and hashes: 1: 4MZJtmoZ2i_sI2sEndEioO82iw8.crl (hash: uSBfQE7lg7k39CnqL7Vg4HATeRmgCvCCt74HHuYXqsE=)
2: iQFBjQMYNTTJ2jk6e5feOS_a39s.roa (hash: GqVM6J5PfB8C9Ws9x090WHFvEBb+mt5HYBg+7QoW2vE=)
3: sSUeiTuTscB37GhFxmHCikkgWjE.asa (hash: Kd5QYpqifnyO+2uyl3rYd5x9cU744aPeXurfnyMHjoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:59:7a:dc:9c:d0:c9:20:8a:e6:23:de:0b:91:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c649b66a19da2fec236b049dd122a0ef368b0f
Validity
Not Before: Sep 22 23:00:25 2026 GMT
Not After : Sep 23 23:00:25 2026 GMT
Subject: CN=304edb5dbef3ebef43b246a4686cfc60c174901b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:59:3a:38:bc:bb:95:00:dc:92:ba:38:1d:
27:32:b9:14:1c:61:51:42:e9:63:85:3c:7c:87:65:
60:a8:04:2b:86:13:1a:7d:49:80:3e:51:4e:8d:7d:
1d:f2:37:3a:82:82:32:17:79:00:ed:45:49:22:0d:
7c:bd:19:93:61:27:76:56:34:ee:b3:8b:44:ed:0e:
1b:02:b7:4a:d7:5e:f9:51:52:0a:a1:80:c2:a4:cc:
6d:03:a9:9c:4c:70:98:02:0d:25:7b:07:6c:45:93:
60:54:a3:b2:33:0f:84:3e:4b:a3:1f:3b:a7:af:87:
14:b8:6a:1d:06:8b:51:31:63:d8:a2:0c:62:3b:ea:
30:b8:36:9f:71:4c:64:9e:58:a9:4a:ef:cc:2e:9a:
36:71:37:86:7e:a5:52:90:61:4b:e4:db:df:06:16:
4a:e8:f8:29:fe:a5:12:86:d0:14:f4:70:01:cb:d3:
db:34:f3:c3:26:a9:8b:4a:bc:f2:30:d7:78:31:56:
f3:ac:71:fc:b7:4b:35:d9:c6:99:6f:26:78:7f:33:
ef:6c:f2:35:1d:d2:76:8a:7c:c9:30:53:88:c6:c0:
ef:47:f3:ed:1f:f3:1e:3f:c9:b1:03:3e:7d:d7:16:
73:3b:6a:05:d4:e1:a4:c2:19:28:f0:7b:b8:96:3f:
da:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4E:DB:5D:BE:F3:EB:EF:43:B2:46:A4:68:6C:FC:60:C1:74:90:1B
X509v3 Authority Key Identifier:
keyid:E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:11:39:2a:8e:3f:d8:68:e4:d3:b5:82:bc:38:5d:7b:7b:2d:
f1:d3:0f:14:91:0d:ac:3a:cb:c7:b2:c7:2a:eb:cf:6d:16:66:
cd:8c:88:29:44:19:6f:57:00:ec:7f:f1:f0:11:27:cf:e6:f7:
7c:ec:74:26:6c:5b:7b:cb:64:f8:5e:e2:e5:44:cd:dd:99:9f:
c3:27:e8:0c:08:66:fa:8b:70:e9:1d:81:d9:9a:e0:fe:31:26:
b0:0c:35:58:9f:6a:91:89:49:00:44:e2:68:d7:be:c8:9f:bc:
86:4a:54:65:76:74:33:c5:1a:c9:18:9b:8d:30:1f:54:66:74:
31:df:e5:44:62:16:5b:2f:9a:15:79:9c:43:16:7b:f5:e5:79:
5b:82:8d:a6:7e:34:0e:0b:91:0e:2f:d1:6c:3c:b2:a5:f0:93:
2e:b3:09:4c:c1:e2:09:8e:fb:0a:c1:de:af:97:80:9b:9c:b1:
1b:d3:21:f0:8d:bd:d1:9a:5a:ff:16:33:38:1f:86:27:f3:99:
ef:a1:3f:bf:98:75:44:bb:69:36:28:da:a5:60:66:cc:8d:bc:
4a:3b:0a:7b:7e:fe:24:03:1e:67:a7:f0:25:e0:3d:14:a7:b2:
53:7a:9f:fe:98:d6:39:84:4e:0a:e3:74:fa:5a:c7:07:9c:f5:
9d:ae:af:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:01:10 2026 by rpki-client