Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
File: F4I131NVJtnm1q_2-nrFIpOpLHE.mft (raw, json)
Hash identifier: 756oxcFuDwpag4mXN0Z9nnxFlOYpcwQ2A2S8YzFXvZ8=
Subject key identifier: CE:10:08:27:EA:E0:C3:AB:E5:A8:13:A2:8A:3C:D7:9E:59:F8:7F:4A
Authority key identifier: 17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
Certificate issuer: /CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Certificate serial: 01A0CD47ED6FFDE7A6D3299E1C31841A4AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
Manifest number: 1A6F
Signing time: Wed 23 Sep 2026 08:00:38 +0000
Manifest this update: Wed 23 Sep 2026 08:00:38 +0000
Manifest next update: Thu 24 Sep 2026 08:00:38 +0000
Files and hashes: 1: F4I131NVJtnm1q_2-nrFIpOpLHE.crl (hash: 5IbCyNJwS/rZjQPrYqPK/i8nXlxx0MUPFnR3yEXGckk=)
2: YJGwIn3Hfn4CXGcIfF5Sqvh4L2U.roa (hash: bxowbJpolM8aC3Tyo8Qe1Sfr/zVg+4jTgjgqaAuFw7k=)
3: nSoKCh55lGMD-7gl54YUpZEK_XE.roa (hash: KtXsJGsRFXBW5jD73l5yCg/b8S+cXBnf2k08FtiPNjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:ed:6f:fd:e7:a6:d3:29:9e:1c:31:84:1a:4a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Validity
Not Before: Sep 23 08:00:38 2026 GMT
Not After : Sep 24 08:00:38 2026 GMT
Subject: CN=ce100827eae0c3abe5a813a28a3cd79e59f87f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:94:af:d9:02:79:c4:ed:f4:c2:ce:73:78:
92:86:12:c2:6e:61:30:16:f0:da:bc:fb:cd:d0:e8:
73:f0:5c:b4:6c:28:ab:a5:c6:4c:a4:05:d2:36:48:
e9:b5:a2:27:97:50:d8:11:21:b4:2b:a4:a2:b7:3b:
35:c7:9b:a9:32:0e:84:f7:e3:9e:95:a9:95:34:06:
fa:ae:dc:11:8f:22:94:b9:e6:94:a5:0c:28:45:a5:
18:48:87:64:c3:1c:dc:71:5c:a9:37:18:6c:1e:37:
90:12:21:3a:3a:3b:2f:c7:ab:8f:c7:c8:82:b1:31:
5e:65:1d:6f:73:6e:d9:0b:85:d1:80:ab:0f:bb:6c:
5c:78:52:a9:10:87:e4:17:40:d9:8a:70:68:9a:e5:
34:bf:72:66:92:fd:31:0d:b0:52:fb:5f:4f:d5:cd:
26:36:dc:79:2a:d6:66:6b:e4:f3:15:65:57:11:56:
20:f6:84:30:5c:b5:ed:25:c7:87:a1:5a:b7:43:78:
28:99:d0:43:2d:c6:a4:53:ec:b6:79:23:83:88:3f:
e3:1f:45:9a:45:b6:24:74:e0:fe:69:c6:03:a9:0b:
e8:7e:f3:2f:52:6f:58:ee:43:98:0f:aa:17:5c:52:
a7:fa:17:e8:b8:15:2d:9a:63:21:ca:ac:62:7f:3b:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:10:08:27:EA:E0:C3:AB:E5:A8:13:A2:8A:3C:D7:9E:59:F8:7F:4A
X509v3 Authority Key Identifier:
keyid:17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:dd:71:8e:11:1a:50:1f:d7:64:87:4a:38:35:02:ef:1e:89:
99:e5:29:6c:7d:0c:4a:89:00:28:76:06:0c:50:e2:41:94:6e:
6f:f1:69:b1:ef:e3:9d:54:f4:85:c7:f9:62:90:95:9c:b0:63:
1c:e0:09:f7:58:f2:9e:37:dd:76:64:4b:eb:b5:dd:da:de:29:
bf:b9:d5:7d:14:35:c1:9f:fb:61:7e:16:de:d1:93:a1:97:fa:
73:2e:54:e2:53:e4:a0:45:bf:63:c3:f9:a6:d9:b0:25:30:14:
38:78:ce:13:2e:a0:83:35:ab:47:28:2c:77:13:49:bf:fa:b0:
1a:49:ff:bf:6b:48:8b:8f:88:94:20:ae:f1:f7:80:c1:d1:b1:
21:9f:dc:c6:fc:f9:a6:23:73:47:e1:84:ea:81:ba:e9:ca:48:
3e:4d:8e:43:66:b4:f9:a6:95:d5:63:0c:ea:ab:6f:41:a9:85:
9e:f9:d1:06:f2:49:47:e1:a4:63:50:d6:93:57:3e:25:db:40:
52:e3:a6:77:bf:4b:63:72:c9:f2:b8:65:ea:b3:4a:f1:f7:b1:
5a:9e:69:de:59:9d:e8:79:03:8b:d3:dc:d0:9a:11:62:d5:41:
19:0a:af:11:95:9b:57:bb:1a:72:ba:96:d1:dd:71:e6:63:d8:
5c:24:3e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:45:33 2026 by rpki-client