Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/441e9e-5efb-43f8-991a-ed6885ca5679/1/4DcKtxTbCPR405PRKCdIkbeTKVI.mft
File: 4DcKtxTbCPR405PRKCdIkbeTKVI.mft (raw, json)
Hash identifier: kPpR14MHogKrkmzwmUAHp6QJ75bNVxcU6Xv7Lu5Fi1c=
Subject key identifier: 74:C3:C6:FE:61:FC:FD:CA:C6:40:DA:5C:68:82:86:48:9D:F1:A5:E0
Authority key identifier: E0:37:0A:B7:14:DB:08:F4:78:D3:93:D1:28:27:48:91:B7:93:29:52
Certificate issuer: /CN=e0370ab714db08f478d393d128274891b7932952
Certificate serial: 01A0CB903C639DDF54066EFB7B3E6468F9D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4DcKtxTbCPR405PRKCdIkbeTKVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/441e9e-5efb-43f8-991a-ed6885ca5679/1/4DcKtxTbCPR405PRKCdIkbeTKVI.mft
Manifest number: 022B
Signing time: Wed 23 Sep 2026 00:00:22 +0000
Manifest this update: Wed 23 Sep 2026 00:00:22 +0000
Manifest next update: Thu 24 Sep 2026 00:00:22 +0000
Files and hashes: 1: 4DcKtxTbCPR405PRKCdIkbeTKVI.crl (hash: 9z9SxjIiBE6LUV2TQQolxDz2zK5BeRS6iprUzCGUQ38=)
2: PF6_QJj8YRzBUWzRDIQ4t1IPmnA.roa (hash: h6piPoUmp38AjHoQiX6p9iBQOr+oUtxb1p4/tf2CUQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/441e9e-5efb-43f8-991a-ed6885ca5679/1/4DcKtxTbCPR405PRKCdIkbeTKVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/441e9e-5efb-43f8-991a-ed6885ca5679/1/4DcKtxTbCPR405PRKCdIkbeTKVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4DcKtxTbCPR405PRKCdIkbeTKVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:3c:63:9d:df:54:06:6e:fb:7b:3e:64:68:f9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0370ab714db08f478d393d128274891b7932952
Validity
Not Before: Sep 23 00:00:22 2026 GMT
Not After : Sep 24 00:00:22 2026 GMT
Subject: CN=74c3c6fe61fcfdcac640da5c688286489df1a5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:66:f9:6b:2a:89:8f:3e:8f:56:45:a7:24:ab:
8c:fb:0f:1e:4f:03:8a:ab:3b:98:d8:ff:e3:7a:8e:
5d:05:75:41:b1:7f:42:61:21:97:e9:60:c0:29:21:
3f:b3:0c:83:e9:c3:23:2a:f2:9c:20:58:75:8e:56:
3d:06:bd:82:4a:4d:96:7b:de:29:42:da:97:89:47:
ba:f3:94:d8:28:42:3d:19:31:92:e6:09:6c:d1:c0:
3d:52:b7:8f:7a:1a:9c:02:8c:12:e3:6c:2a:db:ca:
7d:46:53:c3:34:b3:66:6a:63:7d:a4:a2:71:9c:69:
bf:cb:44:9c:cb:57:9a:b0:2b:58:03:3d:35:f3:a7:
ec:1d:45:8c:f3:bd:60:95:7e:5a:0b:9b:1d:be:0f:
7f:87:3b:c3:08:36:81:ad:14:13:d0:ef:cc:7d:5e:
a2:58:6e:b4:ea:84:c7:ee:0a:c3:33:29:c6:62:93:
ce:73:78:b1:62:46:be:b8:7b:1b:0a:6c:e4:b7:3e:
11:98:1e:29:b1:41:cd:76:af:82:04:75:af:b0:40:
fa:5b:41:84:37:98:4c:6d:0d:45:f4:66:4a:71:42:
a4:23:7f:9d:68:f0:c4:9d:07:57:59:3f:8e:19:c7:
26:9a:5e:3a:f7:df:01:9e:1e:37:d8:e1:9b:b2:a5:
a3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C3:C6:FE:61:FC:FD:CA:C6:40:DA:5C:68:82:86:48:9D:F1:A5:E0
X509v3 Authority Key Identifier:
keyid:E0:37:0A:B7:14:DB:08:F4:78:D3:93:D1:28:27:48:91:B7:93:29:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DcKtxTbCPR405PRKCdIkbeTKVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/441e9e-5efb-43f8-991a-ed6885ca5679/1/4DcKtxTbCPR405PRKCdIkbeTKVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/441e9e-5efb-43f8-991a-ed6885ca5679/1/4DcKtxTbCPR405PRKCdIkbeTKVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ec:12:1c:1e:4c:c6:7f:cf:1a:ba:e2:5c:40:76:e0:af:c6:
7f:2a:3f:b0:c1:14:55:4b:1b:cd:b7:33:5c:7b:be:4f:41:15:
20:c1:97:13:d0:ed:0f:5f:23:b8:be:ba:5b:53:2b:54:70:11:
41:91:16:13:bd:4e:38:aa:ac:5c:a2:03:08:2b:fd:72:07:6c:
03:27:0e:4b:18:49:89:c3:d1:62:96:f8:01:5e:97:f1:a4:b0:
ab:f8:15:cf:ed:a3:eb:9c:8c:e2:1e:1d:aa:ab:f5:9a:bc:73:
69:27:ec:e0:80:7a:7c:c3:33:ad:8c:6f:9f:41:ed:23:68:c3:
0d:57:64:dd:7c:51:f3:4d:66:58:a5:24:d0:e8:4b:31:fd:30:
86:54:f0:52:df:d5:3a:9b:2e:99:05:99:07:b6:a3:3c:e9:74:
6b:e3:9c:f9:c8:f7:ff:50:bd:f6:2a:af:c7:ee:01:f6:7b:fd:
cd:56:39:af:f4:bc:1a:3c:d5:69:dd:28:97:22:9a:3d:79:03:
80:f6:3a:79:df:8f:00:e2:f3:df:88:79:58:de:2f:a2:ad:95:
1f:ed:e9:a4:0a:ba:dc:82:5d:9e:90:3e:b9:0c:c1:b5:1c:ed:
e0:b8:ee:9f:f6:1e:59:b6:a2:fb:f4:8e:0c:17:36:cf:ad:a1:
61:0d:4b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:18:33 2026 by rpki-client