Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
File: 4sFE7jL911AT5_G4wtgH09rti74.mft (raw, json)
Hash identifier: Od9wVfbC2bMJjWDwIqQfMvyCzV93LETqSRINGW/OhAI=
Subject key identifier: 71:A7:F0:D5:5A:8B:A9:28:0F:7F:41:2E:FD:D8:5E:61:ED:7A:A8:D9
Authority key identifier: E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE
Certificate issuer: /CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
Certificate serial: 01A0D0EE4D18F9CF0403B109919C52B16439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 01:01:13 +0000
Manifest this update: Thu 24 Sep 2026 01:01:13 +0000
Manifest next update: Fri 25 Sep 2026 01:01:13 +0000
Files and hashes: 1: 4sFE7jL911AT5_G4wtgH09rti74.crl (hash: dbyVXPXdNMXrHi5HfpFzK/dvO6IfFFI4lcoaHCGrYZU=)
2: qimpL4GnPOyoUuwHADETW2Ca-BA.roa (hash: 1Q13z0RPNiBFNEdoqsP4b2RZwfD+sGSDYlp0PmV8cak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ee:4d:18:f9:cf:04:03:b1:09:91:9c:52:b1:64:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
Validity
Not Before: Sep 24 01:01:13 2026 GMT
Not After : Sep 25 01:01:13 2026 GMT
Subject: CN=71a7f0d55a8ba9280f7f412efdd85e61ed7aa8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1b:8b:7c:60:f4:7f:3d:70:9d:0f:0e:f9:d0:
4b:84:37:45:fd:b7:87:47:d9:8c:54:db:9c:37:c4:
66:35:5d:d5:78:cc:d7:49:43:93:51:ad:37:3d:94:
85:12:0e:b0:02:d2:3c:16:66:e5:2d:20:63:bc:d5:
64:a3:6e:0e:5e:bd:77:18:c6:76:be:d8:b2:49:08:
f6:12:83:d3:20:08:dd:5c:01:23:4b:09:9e:82:76:
e4:9b:b7:18:42:01:16:a6:a8:5a:f0:fe:ca:c1:2e:
ee:3f:2b:b3:1e:2e:97:54:ad:03:d7:47:55:da:5d:
51:d8:bf:dd:df:38:d2:1b:8e:73:12:5f:52:2b:50:
8f:b3:f0:f0:57:7c:7d:60:54:6b:99:d8:c7:83:51:
d3:19:ee:0f:ab:ce:29:7f:89:86:7c:34:40:bd:c3:
18:db:a6:7f:f5:60:a5:3d:db:b1:6e:fd:1f:55:b4:
48:5e:25:77:92:c5:59:27:1d:2b:96:44:e6:69:46:
59:6f:ee:3e:80:5b:f1:e2:b8:37:8b:b2:89:e9:13:
f3:74:44:8a:53:19:87:ff:72:e1:46:66:eb:7c:73:
b5:8d:0e:a2:31:ab:e0:42:a0:dd:45:df:85:7f:cd:
aa:03:90:a8:d4:ed:2c:6a:4e:91:5a:e0:79:79:fc:
b6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A7:F0:D5:5A:8B:A9:28:0F:7F:41:2E:FD:D8:5E:61:ED:7A:A8:D9
X509v3 Authority Key Identifier:
keyid:E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e6:dd:e9:87:6d:c2:66:d1:6e:26:69:f1:f7:74:3e:21:ee:
06:14:a3:07:fa:31:88:4a:3f:f1:30:4e:0d:34:be:7e:61:e6:
e5:e2:20:b2:11:df:a0:75:cc:92:f6:0c:c9:bf:a1:f7:d9:c6:
3f:4f:b3:82:d6:c9:84:6b:e7:48:aa:19:b5:59:91:fb:7f:9a:
18:6e:b1:e6:4d:f9:bd:2f:4f:a8:8b:16:2f:c4:0c:47:c3:56:
1e:24:df:82:fd:1f:75:a5:1b:0f:87:67:16:c5:ed:e8:e3:33:
45:83:5a:19:f6:5f:49:ba:f9:6d:71:e1:1b:aa:65:7c:1a:94:
bf:e1:99:c7:f2:8a:d2:ce:2b:85:09:28:26:6b:45:c5:27:6c:
39:fd:f6:e8:ed:4f:7a:e0:cb:a4:aa:66:b1:0c:68:2c:c8:e8:
97:95:1f:8c:d3:70:38:76:4e:82:ea:a9:29:09:32:ed:bb:5b:
cd:4d:aa:a2:cb:fb:49:f8:2b:fb:0a:d4:69:e1:a8:d7:45:39:
11:5f:f4:34:93:03:3b:8e:dc:98:d1:ce:a1:5a:7a:90:24:a7:
8f:b1:93:3b:1d:de:3a:51:5f:c2:d9:a6:72:ec:44:d5:36:ea:
c4:03:ba:22:9f:e5:6e:c2:39:e1:4c:02:c3:08:44:15:f8:86:
68:ca:f5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:04:19 2026 by rpki-client