Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
File: 4VaISXYX6PCmBpCvqz75TBGrbXI.mft (raw, json)
Hash identifier: 3TTFzuOSydHV96LXbopJSaiAl4EpI0GYsIpq+KpLfkM=
Subject key identifier: D2:98:54:58:01:C7:A0:F1:DF:A6:58:74:7D:4F:39:C0:C5:96:59:1D
Authority key identifier: E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
Certificate issuer: /CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Certificate serial: 01A0CCDA244BECB7E6A1267EFCD9E741D19F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
Manifest number: 052D
Signing time: Wed 23 Sep 2026 06:00:43 +0000
Manifest this update: Wed 23 Sep 2026 06:00:43 +0000
Manifest next update: Thu 24 Sep 2026 06:00:43 +0000
Files and hashes: 1: 4VaISXYX6PCmBpCvqz75TBGrbXI.crl (hash: vm2A32VAcDiCxw33S5v2M59TGWWwZV9o4UCrZCv+MFs=)
2: lFpP2edtZbeiimHGLzmvkcEN-mg.asa (hash: K6iJU79abc3heTHJ4tesdUEWhmfGUsJIrOPm/MA1KBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:da:24:4b:ec:b7:e6:a1:26:7e:fc:d9:e7:41:d1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Validity
Not Before: Sep 23 06:00:43 2026 GMT
Not After : Sep 24 06:00:43 2026 GMT
Subject: CN=d298545801c7a0f1dfa658747d4f39c0c596591d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:65:99:bf:e8:0d:b1:46:84:cf:5e:3a:e1:3d:
2f:49:a6:fb:56:d4:e2:f6:a7:57:32:4d:ca:d9:0b:
5d:41:1e:3f:f2:be:cf:4c:a3:f1:25:7d:7a:e0:db:
45:19:a4:20:c0:83:3f:42:05:d7:80:d1:12:de:a7:
97:e8:b7:8a:4c:a3:bf:24:a6:75:f2:8c:fc:1a:cb:
35:61:80:9f:b8:d9:98:96:7c:75:61:f6:6a:22:98:
49:4c:2b:18:64:b5:0d:43:1c:58:24:52:d2:fd:9d:
d0:5e:6b:3d:96:e0:07:91:40:4c:b3:9c:74:48:ba:
5f:90:6d:ba:ac:58:8a:0b:2f:0f:dc:fb:cf:02:94:
00:4f:45:51:4a:3b:9e:54:88:64:67:48:78:ba:51:
26:4b:56:d4:a4:3a:54:9f:8a:71:9d:e8:1e:69:9f:
02:48:c9:f8:44:f7:23:06:35:3d:2e:2b:11:50:fb:
14:c4:43:23:e7:2a:df:f3:89:39:d5:d6:a5:6f:2f:
81:77:6d:a8:f6:cf:f1:f0:5f:4f:f6:e4:19:0b:9a:
a0:da:2c:d1:80:69:df:9a:e2:c4:f5:43:fc:49:04:
19:40:d8:83:5c:cb:38:f0:84:f2:98:0b:68:48:ec:
90:1d:5d:7f:2b:ce:ef:f8:90:8f:83:7a:75:7f:fa:
6a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:98:54:58:01:C7:A0:F1:DF:A6:58:74:7D:4F:39:C0:C5:96:59:1D
X509v3 Authority Key Identifier:
keyid:E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:83:f2:3b:db:b4:ab:36:71:3c:3a:17:56:9c:a0:fa:b7:78:
64:71:d2:33:d7:af:b1:e4:d5:c5:23:5c:7d:88:e4:c3:94:84:
fe:d9:b1:bb:ab:62:89:37:07:0e:45:52:6e:ac:98:09:8d:ec:
bb:a2:51:23:55:b5:8e:65:f3:5b:67:24:64:d6:cc:c2:fe:6b:
21:05:af:86:dd:e1:1d:6d:ba:9f:18:da:28:98:15:2c:a5:b2:
2f:e6:00:87:67:bf:db:10:fa:8a:be:34:5c:40:21:74:b3:c5:
31:33:b3:b9:f5:58:8a:f9:43:54:d8:8a:21:31:eb:e5:34:a1:
0c:33:a2:ac:4e:ee:97:a0:ac:58:f2:51:5d:a0:61:24:d9:06:
c0:7d:63:37:0a:1a:9e:d6:45:82:9d:83:9f:8b:bb:e6:97:92:
e8:5d:7f:f5:6e:a2:26:40:7c:c8:1d:4a:13:98:f0:d7:ab:69:
16:cf:04:03:24:5d:09:f8:62:94:04:9f:b2:b2:68:d4:43:e5:
35:2d:2f:10:81:b2:9b:4f:ca:91:04:09:0c:a6:b0:c7:6d:19:
84:3f:34:6e:08:cf:61:98:15:94:ca:0f:d4:c1:f3:5a:6c:75:
5b:ff:98:a7:4f:d4:66:5c:f7:db:33:6f:78:83:50:f9:d1:c6:
3d:23:4b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:59:08 2026 by rpki-client