Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
File: 4HG570GlOChYzZ7vmKf7nRJqpK4.mft (raw, json)
Hash identifier: XOZidq0PBhmQzecql20AZRi1mbQ6XOBchDYx9V/R1+I=
Subject key identifier: 0E:03:C5:E6:BA:7A:42:F0:F2:E4:2E:17:B7:E8:2B:24:B4:8D:09:6D
Authority key identifier: E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
Certificate issuer: /CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Certificate serial: 01A0D124EDA90567D24979282700B9293033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
Manifest number: 0795
Signing time: Thu 24 Sep 2026 02:00:53 +0000
Manifest this update: Thu 24 Sep 2026 02:00:53 +0000
Manifest next update: Fri 25 Sep 2026 02:00:53 +0000
Files and hashes: 1: 4HG570GlOChYzZ7vmKf7nRJqpK4.crl (hash: 45hyAwebCR9pfUWxPl3UGJsw0fmFLppeKT5zAv6KXqg=)
2: JqYIovUOhpMaXbCswunFuuxrXZA.roa (hash: pzyg9bet0YZqCdKyQjx/ZoPH6pBnBtJrgE7rSpscrOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:ed:a9:05:67:d2:49:79:28:27:00:b9:29:30:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Validity
Not Before: Sep 24 02:00:53 2026 GMT
Not After : Sep 25 02:00:53 2026 GMT
Subject: CN=0e03c5e6ba7a42f0f2e42e17b7e82b24b48d096d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c0:17:1f:dd:a7:0f:87:e0:7d:57:c1:26:c7:
ba:6a:5c:28:5b:01:fa:06:9d:9a:da:20:22:d8:c1:
d3:b5:14:67:e3:0d:03:06:74:da:38:74:47:99:30:
87:3e:87:66:7b:eb:8b:18:d1:d9:c9:a2:fe:9c:b2:
ce:d3:a6:24:64:ca:e0:25:c6:10:2f:4d:f4:fc:7d:
dd:4f:96:9e:93:e5:91:17:e8:bc:1f:91:1b:e3:33:
eb:5b:e4:51:34:34:5b:e3:24:5a:69:36:ca:62:b2:
4b:65:ff:f3:81:b5:56:cf:1c:67:54:42:cb:da:73:
f1:b6:20:fc:6c:81:dc:4d:ae:a4:8e:9f:6a:1f:16:
36:25:68:81:3d:51:68:f0:19:d8:dc:db:02:0b:b8:
7c:85:d3:d0:f4:8d:66:73:ce:76:25:78:d1:ce:d1:
9c:1b:8e:6b:06:89:a2:09:c7:6f:9e:9e:fb:57:ac:
0b:95:81:a8:f2:0e:9f:d7:6d:91:64:84:99:7a:a6:
a3:8e:18:3a:86:0c:5b:89:fa:d2:c7:6c:19:6b:eb:
ae:f4:cf:95:95:46:30:4b:f8:80:ca:9c:77:ed:49:
e5:d8:11:dc:13:12:64:fe:b7:3d:b8:c2:df:da:5d:
ae:06:24:0d:e9:73:bc:5e:68:2c:8e:70:d6:24:93:
99:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:03:C5:E6:BA:7A:42:F0:F2:E4:2E:17:B7:E8:2B:24:B4:8D:09:6D
X509v3 Authority Key Identifier:
keyid:E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:07:ba:78:2a:dc:67:37:6d:d7:75:f4:c8:ba:e5:89:47:36:
42:d3:24:bf:62:e1:01:ba:ea:7b:6e:62:95:c1:3d:06:d5:be:
fe:78:9b:e8:3d:db:e2:58:b4:d3:2e:33:b0:8e:95:ed:df:9a:
ef:88:4c:57:eb:02:c7:bb:0b:f8:f3:ce:fc:43:bd:99:9a:4e:
83:99:06:73:61:c5:28:bd:02:49:7c:be:e4:2e:bd:f1:a7:e2:
f8:30:65:b5:4b:d7:d3:ec:26:8c:bd:47:c7:35:a1:21:1a:e2:
d1:7a:ae:d3:e0:25:ec:ab:4a:25:b6:18:4e:c3:93:6f:ad:e7:
d8:99:b9:18:4a:08:60:de:72:cd:09:0c:0d:d2:55:16:d7:38:
e4:2e:15:4c:0e:6c:43:7b:55:5a:40:36:70:79:93:f1:64:f3:
61:19:3d:e5:e9:25:c8:8e:aa:f9:ca:c4:92:65:ca:74:f9:20:
e7:c7:da:68:dd:2a:0b:18:93:dc:4f:3c:78:bf:91:db:b4:53:
69:16:64:6c:28:30:49:db:91:6e:97:29:a0:09:ca:3e:db:a9:
a1:11:c6:7b:ad:8e:ca:2e:78:90:ce:38:ee:96:43:e8:96:f8:
de:24:d5:7a:14:c2:33:b5:37:fe:83:ad:b2:5d:23:da:09:de:
85:30:bb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:19:29 2026 by rpki-client