Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
File: 4IZuWnxyXctqE4zGw0DP2tQxXT4.mft (raw, json)
Hash identifier: 8nQhUZwel8BPxws5txhb6RC0jEORTJChuy3bpZGV5rw=
Subject key identifier: AD:C2:42:17:D1:73:0D:D7:C3:86:BF:D6:2D:D8:4F:81:D2:33:17:D7
Authority key identifier: E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
Certificate issuer: /CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Certificate serial: 01A1231D4DE42D8FA62764C1432C1613E3FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
Manifest number: 1A9F
Signing time: Sat 10 Oct 2026 00:01:25 +0000
Manifest this update: Sat 10 Oct 2026 00:01:25 +0000
Manifest next update: Sun 11 Oct 2026 00:01:25 +0000
Files and hashes: 1: 2KPw1cvbm50f0LYM14wl1jqJ9og.roa (hash: A1Jjz4VQ5P7K7cWtSDzEEjwDvup5VASHzuFeW68IpQ8=)
2: 4DjthTFuBFBUicM1fyQrr1R-zpA.roa (hash: /khTTdB4MFujwhgprh1GKjQ5sevdR189YyvZSZEdlvw=)
3: 4IZuWnxyXctqE4zGw0DP2tQxXT4.crl (hash: 1hl+y98rw45LEmj1p5uGJxzavxaPdG9Voy08PYqKmtM=)
4: 7pxmMXSw-HkZG9cAZnnYN-vEkfQ.roa (hash: mEU3VRJ8fuQ7izupJUqVvL0qdRuIxFLkUNg5UpgN7ss=)
5: 8OlOEZgObzEvy1E8VmktgWUdQi0.roa (hash: vpY2iql20BkJOzJyUWVMsBYvSfuAgM3xo1h/baltqkw=)
6: IbI54r9UQEycQUhSG_R7IhAl23w.roa (hash: Xsth8W4XkRG829Saw23qV/fuk3mylDa5vQqSxMBq6Os=)
7: kaNSS3H8CcGwyEb9L0LHfodkCbI.asa (hash: w3bZtfnN5MHgcG0AWFUlSLsnuz4fMXs0k06prQh3OWE=)
8: mxy-X6DSpF8ZztbUQjMZo4HUfAM.roa (hash: 8VsFON9Y1Ltuj+mPJYLJdGhQhe4GbTQ4L4kgjue4VFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:1d:4d:e4:2d:8f:a6:27:64:c1:43:2c:16:13:e3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Validity
Not Before: Oct 10 00:01:25 2026 GMT
Not After : Oct 11 00:01:25 2026 GMT
Subject: CN=adc24217d1730dd7c386bfd62dd84f81d23317d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:7d:c4:e7:73:82:ff:5c:15:79:54:8e:2f:
67:c9:d6:fb:99:63:fa:18:7c:87:48:a3:92:1f:73:
34:a0:77:85:ad:5c:9f:cc:8f:b9:fb:4a:63:ef:cf:
aa:a0:47:ce:bc:cf:b0:79:10:a3:69:c8:c5:26:a5:
36:1f:37:7c:4b:4c:c8:44:54:a0:a2:c5:eb:2d:18:
42:03:a1:a5:64:2c:89:07:2a:1e:8f:52:ea:db:56:
45:a0:1e:90:6a:0b:20:56:90:71:3f:6c:7d:fa:d0:
a8:e8:a2:10:60:af:70:79:17:34:59:af:b4:4d:3d:
76:cb:43:3c:02:8b:01:d1:60:88:ab:e6:35:2f:e8:
c2:ec:df:8e:5a:6c:68:86:c9:a5:97:3b:4f:69:a7:
8a:ed:f2:4b:63:80:e9:c5:e2:70:ac:34:54:bf:a2:
a5:7a:59:00:ef:c0:68:7c:86:b8:79:f9:d3:75:05:
9c:09:01:90:8c:ee:06:dc:bc:fa:83:e6:b0:d5:02:
8f:e1:ac:07:6f:08:63:f6:93:5e:1b:19:51:7f:d0:
06:a1:d7:d2:19:44:54:67:43:09:e5:6d:d6:f8:c9:
52:32:78:0d:6d:38:86:7d:fe:fd:2a:d6:94:52:5d:
1d:8f:3a:17:35:46:af:50:6d:c4:db:4e:77:f9:e3:
14:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C2:42:17:D1:73:0D:D7:C3:86:BF:D6:2D:D8:4F:81:D2:33:17:D7
X509v3 Authority Key Identifier:
keyid:E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:69:1f:81:f2:b4:5f:ce:69:85:61:b0:48:d5:4d:d7:08:3f:
83:96:7b:09:a9:79:48:76:01:ea:09:3e:3b:96:bc:b1:49:18:
0e:42:18:85:19:da:7f:60:6b:49:16:ab:bf:d5:88:4a:e3:f4:
bf:9e:23:96:ff:ff:91:c7:7d:05:7a:f9:a6:7a:35:c0:47:fc:
dc:56:58:90:f4:a3:56:47:29:37:dd:0d:33:4a:3e:c2:16:9c:
2b:c7:e4:84:34:98:a9:23:bb:74:bd:db:c6:83:30:94:d6:aa:
e7:4d:64:aa:cd:25:4c:59:81:3d:a1:52:07:47:49:7f:85:31:
4e:09:04:92:3a:06:2f:b5:71:2d:d5:de:8b:35:4c:1e:d4:95:
28:10:cf:00:c0:8d:29:a6:9a:32:9e:bd:64:cc:12:5e:ae:83:
68:2d:2b:78:ea:89:aa:57:6d:f0:35:1a:ce:39:d5:3f:49:5b:
38:fb:cd:c2:32:62:75:8f:48:f2:39:e9:b8:f3:a2:a2:c8:1e:
d8:ea:46:ad:e5:7c:13:ef:39:ba:18:c6:28:0d:cd:45:74:6b:
0b:cd:ab:d1:f7:38:f0:12:c6:3f:a7:f2:52:41:14:8e:9c:41:
f1:58:40:95:22:0d:c8:b9:81:7d:ba:39:82:63:65:0d:b3:22:
b4:c9:74:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:00:51 2026 by rpki-client