Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
File: 4u1kMJX_plfeBc7spdILJlwbf1I.mft (raw, json)
Hash identifier: yE8yoYpk22Pgej/rx91+JvZifM0Sl53pexDp+ZBOjmU=
Subject key identifier: 1D:0D:C1:C9:D4:67:F0:AB:7A:C1:0C:2F:7A:3D:6C:4E:8B:3A:11:CF
Authority key identifier: E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
Certificate issuer: /CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
Certificate serial: 01A0D1926942AB194ABC3AC90F94EF71E36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
Manifest number: 12EA
Signing time: Thu 24 Sep 2026 04:00:28 +0000
Manifest this update: Thu 24 Sep 2026 04:00:28 +0000
Manifest next update: Fri 25 Sep 2026 04:00:28 +0000
Files and hashes: 1: 4u1kMJX_plfeBc7spdILJlwbf1I.crl (hash: 6Vv9pKnbZBlp3cQoenghBgHCwWXBuOaDHhNhblP5GnI=)
2: VCisrPtNvtB7bscmQGWvZKbtHFo.roa (hash: 5zS8VmmJLoewFXoJ5XZ3WMz0MzfOi8w0Bvod98H2Sr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:69:42:ab:19:4a:bc:3a:c9:0f:94:ef:71:e3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
Validity
Not Before: Sep 24 04:00:28 2026 GMT
Not After : Sep 25 04:00:28 2026 GMT
Subject: CN=1d0dc1c9d467f0ab7ac10c2f7a3d6c4e8b3a11cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:f4:da:f8:b3:bd:9e:29:77:c9:35:04:2a:
60:dd:65:a6:fc:7a:f1:a2:54:df:d4:dc:39:05:c2:
97:cf:11:44:c2:60:11:9f:7e:5c:7f:4f:95:40:d6:
e7:b9:ad:19:4f:5b:63:d7:8d:b7:05:e8:db:cc:b4:
66:56:14:6e:58:07:b8:7f:41:1c:e5:d1:fc:bf:9c:
0b:c4:4d:d2:32:66:dd:01:54:dc:2e:ab:0d:a1:65:
b1:80:16:4c:77:6b:ed:84:d2:fb:67:dd:89:ee:09:
f8:27:96:aa:08:d6:31:76:04:96:2b:0c:8c:98:f5:
13:9a:05:75:8e:4a:91:ae:08:d2:60:62:61:d3:69:
06:75:07:8b:25:ce:bd:28:c0:ee:2c:1f:b5:8f:3c:
79:02:30:f6:c0:d2:71:db:30:a1:80:d7:69:75:dd:
fd:cb:d1:94:78:5b:24:b7:ea:e1:a8:2a:f7:22:f5:
7a:9c:fd:fe:a4:b4:36:ed:69:94:4f:e8:ac:33:51:
b3:6a:d3:8f:00:18:c4:b5:a9:b0:7d:0d:62:92:3b:
b8:9f:20:e2:86:0d:04:4f:b5:60:04:88:51:29:48:
b9:89:eb:f7:92:25:a1:6c:17:ae:ea:83:9b:d6:ae:
51:19:68:82:e1:5d:8f:55:b7:37:df:c9:96:d9:9a:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0D:C1:C9:D4:67:F0:AB:7A:C1:0C:2F:7A:3D:6C:4E:8B:3A:11:CF
X509v3 Authority Key Identifier:
keyid:E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f8:e6:49:f9:05:4f:2c:a5:7b:68:f3:3a:b1:fe:73:42:e8:
a1:bd:e8:10:69:3b:8b:cd:c5:d7:76:c9:2c:ce:bb:bc:aa:2c:
e4:f0:67:f5:f8:db:48:c9:41:c9:a7:a2:e1:e1:bb:b2:e1:49:
e7:6f:3c:4c:9a:72:73:f7:98:4f:0b:ba:7e:fa:5e:e9:80:50:
72:2d:9c:b2:38:02:c6:d0:72:5a:00:2a:fc:6e:f6:de:1c:9b:
47:39:63:0b:0d:7a:b0:79:7e:64:7c:b0:85:06:a2:90:b7:82:
23:5c:9d:ae:29:89:36:c5:d3:6d:6a:64:f6:03:0d:49:b6:1c:
41:02:b4:39:39:7a:60:81:f5:12:1d:22:af:4d:75:96:c5:4a:
c5:eb:67:c6:47:f3:73:d8:8c:ad:36:c8:7a:d3:b4:b4:26:46:
2e:cb:cb:3d:bd:43:b5:0b:b0:bf:f3:5f:6c:1a:29:e5:42:ad:
8b:37:97:32:8e:19:8f:93:8c:db:7c:59:d3:b2:2b:78:a1:b9:
72:50:1f:6d:19:a2:18:47:07:db:3e:1d:46:98:a8:d7:e8:d2:
0f:b2:be:d8:73:20:ef:d9:b5:9a:61:bb:fb:1c:ce:96:a2:d4:
48:4f:57:44:65:c1:20:17:af:93:37:6f:6e:67:56:a6:5c:81:
4c:2e:48:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:30:08 2026 by rpki-client