Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft
File: 4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft (raw, json)
Hash identifier: eGwMfgCL+v41dUWbxO6us2PyBjGhegyiKKzDzhaJdvQ=
Subject key identifier: 10:8E:F5:29:78:5C:E7:C0:E8:BB:CA:38:BE:38:E4:98:C1:AD:11:E2
Authority key identifier: E0:52:77:76:67:4F:9B:AF:0B:C2:95:ED:26:0F:16:B0:D8:3B:67:6D
Certificate issuer: /CN=e0527776674f9baf0bc295ed260f16b0d83b676d
Certificate serial: 01A0CAB471FDADCEEE1B1CD91ABF47AF6CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft
Manifest number: E3
Signing time: Tue 22 Sep 2026 20:00:18 +0000
Manifest this update: Tue 22 Sep 2026 20:00:18 +0000
Manifest next update: Wed 23 Sep 2026 20:00:18 +0000
Files and hashes: 1: 4FJ3dmdPm68LwpXtJg8WsNg7Z20.crl (hash: O8xVIzMOfiILXXzcYs/hTDORDlOK7gLT90dt9GwRQl4=)
2: I0KwTqxUocsvcaYGRR4zapPMMqg.roa (hash: dmUgwCvOQahbw3iSzZonSHUNI6WWUEQvrZXsD8lNy/k=)
3: JJAZ-O4IJgQLGyAfc-8wTWBxykA.roa (hash: YSeY7xqTEtO7PqfrAlhTz5nmFBQdhs7hiSlxvWOUhkI=)
4: fQIWqImR4nVYlfvLLjiNXx70sEs.asa (hash: ThEh+n6WvESDD7EZWCsgtnIgGCyu7Kb1at4ATMHl6rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:71:fd:ad:ce:ee:1b:1c:d9:1a:bf:47:af:6c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0527776674f9baf0bc295ed260f16b0d83b676d
Validity
Not Before: Sep 22 20:00:18 2026 GMT
Not After : Sep 23 20:00:18 2026 GMT
Subject: CN=108ef529785ce7c0e8bbca38be38e498c1ad11e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:13:32:96:42:85:73:e9:be:2e:e5:da:b8:b8:
55:7f:10:bc:78:1a:fe:6a:88:b7:b6:7f:2d:b0:a5:
7d:41:81:3c:23:92:37:4b:bc:4c:9e:57:2a:22:2f:
b5:ef:0c:41:1f:61:9c:4b:40:99:d8:53:4f:bf:b5:
ba:b3:c1:b8:db:4f:03:90:4f:83:b1:ee:0b:c2:f2:
03:7b:15:e8:56:0a:09:c8:7d:c6:8c:ff:06:3a:14:
8b:53:cd:57:8a:00:39:1e:5e:20:78:32:bd:1d:18:
37:51:be:98:bf:01:68:5f:21:ab:e0:44:ad:ac:c1:
89:80:31:82:dd:59:b7:8f:9e:c0:2b:9a:42:09:ee:
5a:a5:55:bc:a5:0a:f3:26:07:d9:66:3b:43:b3:6f:
37:1a:2c:d6:2b:97:36:67:dc:4f:42:cf:af:69:79:
42:c4:08:90:12:12:c3:9a:cf:56:8b:85:c6:15:bf:
00:dd:d6:99:97:b3:f6:c3:f9:7e:d9:23:b2:d1:53:
5a:83:38:e9:b3:3d:b0:ca:cc:98:f3:7f:fd:85:ee:
60:42:72:d2:ae:75:b3:73:c7:af:cd:10:46:04:bd:
ec:e8:05:4e:db:dc:00:fe:80:be:03:fa:61:d4:de:
58:a2:ee:6d:b4:5f:33:06:91:39:1e:f5:d4:28:9a:
34:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8E:F5:29:78:5C:E7:C0:E8:BB:CA:38:BE:38:E4:98:C1:AD:11:E2
X509v3 Authority Key Identifier:
keyid:E0:52:77:76:67:4F:9B:AF:0B:C2:95:ED:26:0F:16:B0:D8:3B:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:10:ec:09:dc:47:97:7e:21:b7:fb:ea:73:10:f2:db:db:12:
22:a9:85:ae:dc:47:28:e2:56:4b:a9:0e:77:7b:88:0d:f7:e2:
00:0b:98:80:95:29:70:88:99:52:f2:31:e7:83:f8:67:aa:37:
3f:10:1a:53:0d:1d:94:e5:76:73:93:98:59:25:32:01:35:09:
b3:df:5a:e5:83:77:05:c1:39:66:be:71:9d:96:a2:5c:fe:6f:
29:85:a0:85:03:fb:b8:72:e4:ea:9f:81:41:f8:50:b0:e4:ee:
77:99:6c:e9:e8:c8:90:7d:7b:d9:da:3b:79:bc:2b:49:33:7f:
23:e1:89:22:27:3c:15:09:c6:2c:af:80:20:35:c4:ac:31:23:
9f:08:29:2a:d1:9f:2c:14:83:65:65:05:54:38:c5:e9:12:d1:
77:25:71:68:ed:9d:73:ef:15:1b:0f:f8:fd:78:aa:ce:49:f7:
e8:ca:77:84:94:bb:29:f4:7b:72:87:fd:84:e6:42:21:5f:6a:
20:65:4f:8a:1e:47:90:3c:ca:dc:54:7d:ad:66:46:a1:87:af:
56:55:0f:da:aa:97:5a:90:52:ea:e1:74:5d:30:48:19:6c:62:
35:ac:97:da:13:86:cd:2d:a5:99:91:41:06:66:2b:a4:c7:fa:
70:33:f1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:54:10 2026 by rpki-client