Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft
File: 4V293KWBZpetEkXADKt2ryHsLjs.mft (raw, json)
Hash identifier: 3E3WmIQicc7OArbAf0y/+nR0JM0RIyJ5Tw+F5Ivfsvs=
Subject key identifier: AF:55:78:77:6E:B3:04:65:9C:7A:D5:6E:DE:7F:90:B5:C8:82:69:7E
Authority key identifier: E1:5D:BD:DC:A5:81:66:97:AD:12:45:C0:0C:AB:76:AF:21:EC:2E:3B
Certificate issuer: /CN=e15dbddca5816697ad1245c00cab76af21ec2e3b
Certificate serial: 01A0CC355A4BCAF7ED770FF64EC5DA6D1762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4V293KWBZpetEkXADKt2ryHsLjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft
Manifest number: 1A65
Signing time: Wed 23 Sep 2026 03:00:43 +0000
Manifest this update: Wed 23 Sep 2026 03:00:43 +0000
Manifest next update: Thu 24 Sep 2026 03:00:43 +0000
Files and hashes: 1: 4V293KWBZpetEkXADKt2ryHsLjs.crl (hash: BefhMeeLsl+B3/PbgGfzxCXL8AV+6g4oaWtGjNk83RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4V293KWBZpetEkXADKt2ryHsLjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:5a:4b:ca:f7:ed:77:0f:f6:4e:c5:da:6d:17:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15dbddca5816697ad1245c00cab76af21ec2e3b
Validity
Not Before: Sep 23 03:00:43 2026 GMT
Not After : Sep 24 03:00:43 2026 GMT
Subject: CN=af5578776eb304659c7ad56ede7f90b5c882697e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:4a:47:a7:df:a2:6a:03:ef:10:1c:5b:ae:
ac:79:5a:62:33:42:4b:79:fc:d7:c4:54:22:7d:b7:
18:11:a4:07:9f:f6:5d:b3:b1:e8:00:5f:f6:3c:18:
3d:94:8a:71:61:76:36:79:7c:78:6f:be:e3:94:6a:
75:e8:69:bc:1e:6b:fd:fa:4e:ed:d8:99:1b:fc:4d:
a0:b0:4d:61:17:ee:39:54:e5:f4:39:ce:77:08:4f:
55:a7:d6:6d:52:c8:2c:b3:d3:02:a1:b1:d2:bd:b7:
3b:e0:d7:6c:4b:09:be:2a:c6:57:89:fb:fb:cc:6f:
3d:bc:ef:c2:10:3c:ce:ff:92:f2:7e:32:95:01:4e:
04:17:96:a3:bc:5e:5d:0d:e1:0e:3c:80:09:19:fe:
5d:47:94:48:55:79:7f:66:88:a2:79:52:f0:be:d4:
96:4d:ea:58:5e:03:be:a6:6f:70:1e:8f:41:d7:1b:
26:60:38:dc:5e:d3:75:0c:79:74:97:4b:49:e3:e2:
3f:17:63:40:63:ab:cf:1d:b8:b5:e0:7c:25:f7:c2:
8f:b0:1d:bd:dd:27:ab:b2:b5:06:18:8c:d2:79:87:
53:6e:02:7f:12:eb:ec:1a:fa:38:94:2d:c8:7d:72:
df:b3:0f:76:1a:d9:1b:b9:a9:fb:76:a4:f9:01:4a:
eb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:55:78:77:6E:B3:04:65:9C:7A:D5:6E:DE:7F:90:B5:C8:82:69:7E
X509v3 Authority Key Identifier:
keyid:E1:5D:BD:DC:A5:81:66:97:AD:12:45:C0:0C:AB:76:AF:21:EC:2E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4V293KWBZpetEkXADKt2ryHsLjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:13:ca:1a:fb:2a:51:e2:fb:4c:48:a2:75:b0:15:19:22:f6:
0a:00:8d:c0:20:fd:98:ba:87:26:47:c2:45:e5:29:23:17:b8:
41:d7:18:f9:13:75:c0:2f:ad:09:83:13:2a:8f:f5:28:84:82:
22:ed:9f:e3:03:9b:0a:52:29:1b:b8:46:db:e8:39:95:d4:36:
5a:83:58:5a:85:a9:ed:4d:2b:93:5d:03:5b:8c:f8:5c:f9:4b:
af:b9:9f:66:14:c2:47:a8:53:6d:87:6d:d3:7c:6b:3f:8c:99:
d8:f4:0f:37:09:fb:9b:d0:a4:9b:bc:e8:15:48:d0:44:24:2c:
36:86:ce:cb:09:14:e2:8a:c9:2c:89:f9:fa:36:d6:d5:dc:2a:
c1:78:a8:ba:86:e0:37:e6:a1:0e:91:cf:f9:79:47:bb:4e:28:
bb:33:b9:38:eb:aa:c8:7b:32:cd:40:26:59:9a:a0:0e:5e:fc:
41:cb:ea:56:9e:2a:8a:d2:91:60:dd:66:c2:cc:77:f1:9e:76:
c0:aa:58:91:3f:e0:7b:98:38:63:8d:4e:07:1f:2b:ce:c3:ee:
0d:c6:41:a1:08:e3:39:0c:6f:20:65:7e:e7:fc:3f:bb:4c:11:
f2:56:f0:7c:26:29:8d:9a:8f:a6:09:55:9f:d7:b5:6c:53:19:
21:a7:d4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:02:47 2026 by rpki-client