Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
File: 4GmrbwlXKvtG6fjpoGOdgguWlCI.mft (raw, json)
Hash identifier: vSpuQ2VyHieFuTHnn31mHZWbhKYVDUTnfwZCpuD/eTo=
Subject key identifier: B0:18:70:72:04:CA:ED:49:25:C2:5B:11:46:77:1A:EB:ED:1F:6F:3A
Authority key identifier: E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
Certificate issuer: /CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Certificate serial: 01A0CDECDCBD4D9BA8A51DC08EDCCF88ADA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
Manifest number: 1A00
Signing time: Wed 23 Sep 2026 11:00:47 +0000
Manifest this update: Wed 23 Sep 2026 11:00:47 +0000
Manifest next update: Thu 24 Sep 2026 11:00:47 +0000
Files and hashes: 1: 4GmrbwlXKvtG6fjpoGOdgguWlCI.crl (hash: gl2dX+91mhi7zs5IhVBe9IQPBs7CtJ8ekUmSCcdAuxY=)
2: w9M7qFYAM8Bc_3Ry_zHFbT7tXaQ.roa (hash: S9cgU4aODgbYFlt1oo6eD08eYcxMr87FOJ/xbk/bpB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:dc:bd:4d:9b:a8:a5:1d:c0:8e:dc:cf:88:ad:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Validity
Not Before: Sep 23 11:00:47 2026 GMT
Not After : Sep 24 11:00:47 2026 GMT
Subject: CN=b018707204caed4925c25b1146771aebed1f6f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:de:67:8f:19:13:b2:51:bb:ff:bd:c4:b0:
19:2c:c1:80:be:7d:e2:c3:39:31:75:bf:3b:8b:dc:
24:bf:92:c3:a6:84:5a:56:8e:b2:95:da:43:b2:68:
25:a6:cf:c3:7d:64:b5:84:30:5d:c8:04:9d:03:5d:
2f:c8:db:49:36:25:ff:81:0c:b3:83:d9:8e:a2:1a:
54:16:67:cf:3c:80:1c:c0:e4:58:d8:c2:42:5d:07:
6d:8e:0f:60:76:40:f6:0b:69:93:b8:ec:f4:52:1c:
3f:f7:80:f4:27:de:3f:40:0a:72:92:3b:79:84:27:
03:20:98:b4:a3:00:ba:ee:e1:99:35:ec:14:2b:2d:
51:ce:dd:f5:fc:17:54:ba:79:cf:25:d0:5b:16:24:
a2:8f:fa:d1:2c:05:ff:52:95:0d:bb:21:38:9a:8d:
1f:a1:45:03:9a:a1:4f:cb:77:6d:02:f7:82:cf:10:
80:dd:c8:c4:5f:2a:21:21:49:31:af:4a:0d:38:c2:
a6:64:1d:78:51:ae:f9:39:34:93:b5:ba:65:6f:9d:
75:74:0f:64:a0:58:71:e2:aa:db:30:93:64:dd:a9:
10:69:76:28:dc:6f:88:18:e3:4f:6e:b1:c1:63:c4:
b1:f3:03:40:32:e3:5f:f2:02:81:23:bf:45:f7:92:
f3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:18:70:72:04:CA:ED:49:25:C2:5B:11:46:77:1A:EB:ED:1F:6F:3A
X509v3 Authority Key Identifier:
keyid:E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:58:f7:0a:c9:70:f5:7f:38:62:3f:6f:b4:8e:68:0e:72:9b:
83:86:a0:de:de:bc:ff:3b:74:ae:56:55:66:3f:12:32:a3:3c:
9e:98:95:9d:2c:0d:92:3c:16:43:24:b1:38:92:6c:f7:01:2d:
15:86:b2:88:6f:aa:23:57:b0:92:f0:5a:be:4e:37:22:5d:99:
8e:c7:ee:c5:4c:d6:3c:8a:9d:b8:2e:a2:8e:7b:5d:fb:71:54:
81:87:1b:3d:25:7c:90:da:a3:25:2c:5b:ae:cf:d7:b8:7c:b1:
7a:0a:8d:1e:49:b8:d6:87:ab:fe:e3:a4:2a:d2:7c:26:04:b2:
9b:79:39:49:60:14:3d:a8:c5:4d:d1:e7:26:49:a9:00:ff:0d:
f3:b3:d7:b2:a4:d2:05:a8:f6:05:e4:8d:b8:d5:ea:fa:29:56:
e8:bd:c1:b0:fc:36:c9:1e:db:f4:05:e0:1c:1a:cd:61:28:c9:
8d:11:2d:2f:75:2e:25:b8:9d:82:34:f5:4a:37:f2:27:d7:8c:
c4:de:d1:b9:99:3f:58:17:81:ba:39:87:ea:5b:37:6a:42:b9:
54:8f:20:7d:57:67:ef:5c:c2:c5:4f:1c:57:4a:ae:e5:92:c1:
ac:bb:2f:48:b1:59:73:04:f5:42:73:08:a0:66:07:64:47:b1:
0f:01:eb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:31:48 2026 by rpki-client