Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
File: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft (raw, json)
Hash identifier: 2XloIIk5f76Xm08sFrWTXDRl/TXhIfLPrCA4AHk/dkU=
Subject key identifier: B9:6A:7D:24:9B:98:A8:4D:1F:D1:AC:4A:C3:70:AB:03:13:26:E1:6B
Authority key identifier: E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
Certificate issuer: /CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Certificate serial: 01A0DF866D24992DF5BE43FB2F0724CAC1A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
Manifest number: 0F8E
Signing time: Sat 26 Sep 2026 21:02:03 +0000
Manifest this update: Sat 26 Sep 2026 21:02:03 +0000
Manifest next update: Sun 27 Sep 2026 21:02:03 +0000
Files and hashes: 1: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl (hash: rmWRuv8QWHTEbx/H8gwm662OwdcxBw6TpledP598XrE=)
2: emclNVVbrOSgwEekW1bHsSKyOAU.roa (hash: umsW/YEVV8b6bDEdAr61c5AeNAQYb7n62AaiTl4HN1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:86:6d:24:99:2d:f5:be:43:fb:2f:07:24:ca:c1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Validity
Not Before: Sep 26 21:02:03 2026 GMT
Not After : Sep 27 21:02:03 2026 GMT
Subject: CN=b96a7d249b98a84d1fd1ac4ac370ab031326e16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8d:4b:79:9a:91:eb:54:3d:00:2e:32:19:f2:
30:3b:13:9a:21:fa:e8:3e:75:62:eb:ca:c0:bd:8f:
24:38:74:c9:95:ba:59:f4:c7:23:0c:24:98:75:60:
94:17:a0:c4:85:b8:a8:29:9c:10:58:86:68:0d:4b:
86:90:e3:bf:8d:7d:72:9e:01:ed:13:42:ba:8b:a7:
ed:d2:1d:6a:c7:d9:6e:ab:73:36:ee:36:e6:3c:b5:
c9:ec:f3:c2:92:5d:17:f3:2a:43:f5:d1:46:8c:67:
c3:a8:75:a1:55:e9:5d:f1:b7:65:c3:ba:7a:36:52:
7f:bd:17:ea:ad:c3:fb:b0:89:ed:4c:4d:c7:30:83:
03:e3:c9:f2:98:39:e3:2e:b8:3f:0c:92:84:c6:9b:
0f:4a:54:1f:59:39:dc:68:5f:3f:1c:5e:3e:f3:45:
90:07:d9:5d:f7:b6:a6:3e:25:f5:40:40:b4:27:ac:
71:2f:b1:97:54:3a:2f:20:30:82:c0:17:21:23:b9:
3e:07:55:46:86:c8:00:2c:72:c2:7a:4e:ed:a0:dd:
32:ff:e8:27:ea:e1:c2:93:3b:7c:cd:70:d7:f6:54:
30:59:2c:62:70:2f:3e:24:dc:a8:17:a1:84:56:58:
c8:02:cf:ad:62:d6:e8:42:e8:c2:af:e9:71:67:a2:
1d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6A:7D:24:9B:98:A8:4D:1F:D1:AC:4A:C3:70:AB:03:13:26:E1:6B
X509v3 Authority Key Identifier:
keyid:E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:eb:8c:c1:e3:90:05:53:ca:c5:03:be:4c:2c:66:b9:d9:01:
2e:ac:6c:93:42:f4:11:25:5e:bd:53:db:35:d4:70:6c:bd:6c:
ae:c8:6e:57:11:db:dc:ff:e7:6e:12:9f:9c:08:84:0b:b2:d6:
59:6a:c8:5d:05:70:b3:ce:86:db:c3:2c:bb:0b:5b:2c:ac:cb:
bd:0b:a9:ee:0b:e6:15:26:7c:1a:bb:5f:e2:55:31:60:70:34:
86:f7:22:37:ad:8e:99:62:b6:14:9a:cf:65:fe:6f:fc:d8:2d:
aa:b7:b4:51:70:35:88:72:b1:bf:86:46:d0:6f:94:c8:06:af:
3b:a0:f5:f4:72:b4:fe:31:e0:1a:68:f9:7d:f2:dc:57:8e:c0:
5c:b3:34:cb:7f:64:4d:e5:fb:fc:04:91:ec:c8:c1:8c:35:36:
2c:37:6d:d7:cc:2b:86:ac:2b:31:5a:04:f3:55:93:09:5a:04:
a5:53:ee:a9:8b:30:22:c2:51:45:08:a7:7c:01:31:e9:94:4f:
f1:91:d6:f1:36:ed:09:1d:e6:85:4b:35:d8:d0:1e:59:55:5e:
d7:5b:16:b7:ca:6b:b3:4c:c2:73:92:0b:dc:89:be:da:a8:c1:
bd:a7:f6:1a:1d:6b:c5:98:bf:2a:01:6d:1d:3c:8c:18:26:8c:
11:b7:75:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:31:35 2026 by rpki-client