Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
File: 4tY8oFQoMuZCZPOssVYZki_s-Ds.mft (raw, json)
Hash identifier: ZvIc0IlHGmi/LUoZIOvg8aks51viNL+3oXbpq9jvUsI=
Subject key identifier: 8A:80:F0:7C:8C:4B:C1:2C:EA:3E:CB:57:8F:70:6D:3C:BA:24:A0:E7
Authority key identifier: E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B
Certificate issuer: /CN=e2d63ca0542832e64264f3acb15619922fecf83b
Certificate serial: 01A0D0805F0F033D72B56A4306BC9D3C0975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
Manifest number: 1344
Signing time: Wed 23 Sep 2026 23:01:08 +0000
Manifest this update: Wed 23 Sep 2026 23:01:08 +0000
Manifest next update: Thu 24 Sep 2026 23:01:08 +0000
Files and hashes: 1: 4tY8oFQoMuZCZPOssVYZki_s-Ds.crl (hash: 9woYnFhF8EDvRT9UDvgno0w2zXdUqC/walRrWdRjrHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:5f:0f:03:3d:72:b5:6a:43:06:bc:9d:3c:09:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d63ca0542832e64264f3acb15619922fecf83b
Validity
Not Before: Sep 23 23:01:08 2026 GMT
Not After : Sep 24 23:01:08 2026 GMT
Subject: CN=8a80f07c8c4bc12cea3ecb578f706d3cba24a0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:26:cf:43:14:42:e9:c4:62:14:77:e3:e2:5d:
06:f7:0c:d1:cb:23:8a:51:b6:0e:d6:87:a3:3e:20:
0e:0f:22:c7:ac:e3:2b:5e:a6:7b:55:62:4a:0f:cc:
c4:22:74:93:5a:64:59:bf:23:e2:a1:ca:a9:b6:b9:
4a:a5:8d:6d:c5:c3:44:24:bf:41:04:e6:c0:40:a8:
e6:ca:4d:78:0f:3e:0c:35:2a:6c:34:50:5a:19:d6:
85:60:b4:6e:e3:35:f5:0c:f4:08:06:4d:ec:2c:30:
46:26:f6:5c:d6:61:9b:4a:01:1f:c1:f8:02:1c:a3:
8d:b4:6c:54:c4:9e:96:d7:ca:17:d3:79:df:ea:02:
78:69:7d:18:6a:1e:16:80:cf:91:e7:9e:a2:9c:69:
3a:a5:03:6a:93:fb:7b:00:be:72:ce:33:55:3d:81:
ef:2f:88:d7:a1:f6:55:34:0b:42:e8:e0:71:14:b7:
7a:83:42:15:5c:fa:bf:0e:0e:a4:17:7a:50:c6:a1:
a3:5f:d4:72:90:b3:0b:84:0c:a8:cd:33:95:48:c6:
62:fb:45:08:c6:30:ec:99:2e:ce:3e:2a:6b:8c:24:
d5:a2:5c:8b:0e:fc:e4:6f:9e:9e:b8:c0:bc:2e:41:
99:03:db:30:c7:2e:9b:cb:46:cd:3c:44:ca:44:b5:
5d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:80:F0:7C:8C:4B:C1:2C:EA:3E:CB:57:8F:70:6D:3C:BA:24:A0:E7
X509v3 Authority Key Identifier:
keyid:E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4f:7b:83:dc:e1:43:f5:66:27:f2:b6:e1:58:b2:f4:81:e5:
76:64:3d:93:34:45:98:27:1c:4e:ad:4d:10:68:6b:b7:82:60:
89:a5:10:94:e0:ad:f7:3f:0e:85:f6:e9:70:62:12:2f:01:ed:
ca:13:2c:2e:69:d4:5f:33:f5:81:72:aa:7c:ee:c9:06:7e:c1:
12:b8:16:81:ab:15:7d:7f:d3:d0:a4:1b:e4:74:72:5d:35:d5:
d3:23:c7:b6:32:c5:9b:e2:10:be:75:1d:6a:1d:ed:95:6a:0e:
da:ef:d2:d4:97:8d:c3:19:23:a4:fa:95:bf:c7:ff:0a:6e:2a:
2b:c7:2f:7c:0f:2e:6b:54:4e:b0:13:d9:84:00:fc:9f:a9:06:
b5:d3:c9:cd:b4:1e:8d:01:61:6e:3d:e8:7a:d8:95:69:e1:36:
d1:ac:1d:d6:eb:c5:ab:eb:6e:8c:b4:a2:3a:55:14:89:cf:bb:
43:4e:2f:bf:5a:ec:ae:83:3e:d9:a6:70:5f:4f:80:4a:ca:01:
24:b4:e2:b4:17:ee:6d:8e:e2:bf:d0:5d:5c:26:a5:6e:48:13:
ec:e7:60:8c:f7:36:3a:ab:19:81:84:59:10:e1:1d:f7:96:f9:
63:7b:9a:b0:14:8f:c6:71:05:e1:33:b1:69:d0:5b:1b:b2:da:
a6:8c:e8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:19:31 2026 by rpki-client