Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
File: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft (raw, json)
Hash identifier: 7xkbHxQFZdGKHUyTgZGQp2BQGhfiG3yVyweebu1nVtw=
Subject key identifier: AF:9A:C8:F6:31:96:33:D6:1B:8A:50:10:1C:CC:32:53:FE:5D:75:29
Authority key identifier: E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
Certificate issuer: /CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Certificate serial: 01A0D4945638412FA977322F1F7FE5A298FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
Manifest number: 0F81
Signing time: Thu 24 Sep 2026 18:01:26 +0000
Manifest this update: Thu 24 Sep 2026 18:01:26 +0000
Manifest next update: Fri 25 Sep 2026 18:01:26 +0000
Files and hashes: 1: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl (hash: Pj9LIfypfi0ukUohVCR6FUFSIpC77XEopGlkH3x4M6o=)
2: PrQ9lga9Ki2nMKZgqqoUsecApCI.roa (hash: wgW6ob7p1bWzADPUesI+OZalVcxaNSlVibSRrGZpWnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:56:38:41:2f:a9:77:32:2f:1f:7f:e5:a2:98:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Validity
Not Before: Sep 24 18:01:26 2026 GMT
Not After : Sep 25 18:01:26 2026 GMT
Subject: CN=af9ac8f6319633d61b8a50101ccc3253fe5d7529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:1e:40:7f:cc:08:b3:ae:48:e6:5c:26:95:
f8:02:3e:cc:27:6e:d7:39:97:5f:84:1d:47:d1:cb:
81:3c:7b:76:a6:4f:41:69:6d:f9:6f:9b:a6:84:62:
80:5f:d8:44:39:36:7b:9e:bf:24:07:38:83:15:8d:
09:da:4c:74:9a:91:ff:6c:f3:bc:2d:5d:40:6d:e6:
60:8f:59:77:1a:9a:0d:27:2a:f0:ce:42:8e:dc:dd:
02:30:4b:03:c8:e5:6b:b1:01:6d:2d:4c:a1:ef:9c:
60:30:a5:ea:59:2f:92:dc:32:29:69:2b:00:84:d1:
7e:7f:64:be:ed:b2:ed:d3:3e:02:cf:df:c0:8b:85:
f6:57:d5:5b:86:84:6e:cc:16:b5:b5:59:de:ab:ae:
9d:4a:d1:80:88:a8:58:df:33:08:8b:5a:c6:2d:4f:
7a:e8:32:f4:a4:fa:3b:ab:86:68:07:99:bf:de:d3:
d5:8e:18:f0:f3:14:dc:f1:6d:47:ba:7d:5b:36:c9:
06:e9:e9:01:da:fc:e9:18:cf:e7:dd:90:8e:32:9c:
ff:05:26:77:a1:a2:ba:05:b6:3b:01:59:3e:08:c0:
07:b5:63:a4:86:8d:36:8d:3c:80:ca:d3:6a:e9:f2:
ac:31:aa:54:c4:4e:d4:2d:d6:4e:b1:f1:0a:48:32:
03:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9A:C8:F6:31:96:33:D6:1B:8A:50:10:1C:CC:32:53:FE:5D:75:29
X509v3 Authority Key Identifier:
keyid:E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9c:6d:48:0b:08:06:53:a5:68:44:1e:0f:f3:87:bd:99:4f:
0d:f3:91:96:d2:08:e2:b8:38:c4:ea:38:88:7f:09:89:35:a9:
61:fd:7f:c6:a3:18:33:27:f0:57:19:ba:0b:62:c6:92:3c:bc:
da:72:57:80:fb:f6:cf:71:10:75:b9:3f:53:ba:e5:49:a0:cb:
f4:ee:91:ac:fb:9c:b7:c9:c1:c0:0c:93:37:77:ba:de:f2:8b:
a9:ea:e1:a7:f2:56:68:3c:49:79:83:0e:8e:21:18:58:0b:fd:
ea:57:31:ad:5c:4b:8e:df:14:6f:f7:19:69:6a:f9:61:99:a5:
81:5a:cd:ca:e9:e9:88:08:7b:f8:40:74:a7:f7:5f:85:9e:bf:
e2:c1:45:f0:d4:c3:08:e9:35:47:ea:fd:38:a4:16:b3:09:30:
5b:41:33:79:3b:c3:aa:1c:e8:74:1e:23:ed:9c:80:12:74:e6:
6a:c4:04:01:63:71:99:47:9e:9e:40:a0:b8:e1:6e:b6:9c:34:
f6:8d:64:b0:cb:ca:57:05:d5:53:ef:eb:bd:7f:ea:65:c3:b7:
aa:8e:3b:96:bc:82:10:5b:bc:cd:a0:b5:bf:e7:f1:20:22:62:
98:2f:b8:64:e1:eb:99:48:8d:eb:4c:8f:ea:87:1a:8a:b8:47:
52:64:d3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:43:15 2026 by rpki-client