Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
File: 4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft (raw, json)
Hash identifier: DG955McniI1xtB6g/mu/3YXgN5vdllcBpUvpKSX0FLA=
Subject key identifier: 77:66:64:C5:C7:16:AC:62:EA:33:73:57:9D:9F:66:0C:6F:D5:6F:BA
Authority key identifier: E0:CA:79:5C:4B:5F:B3:C9:E7:DD:99:2E:7A:37:64:90:2D:12:1B:C2
Certificate issuer: /CN=e0ca795c4b5fb3c9e7dd992e7a3764902d121bc2
Certificate serial: 01A0D614A4238319D882E8D97A75DADF3FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
Manifest number: 023F
Signing time: Fri 25 Sep 2026 01:01:11 +0000
Manifest this update: Fri 25 Sep 2026 01:01:11 +0000
Manifest next update: Sat 26 Sep 2026 01:01:11 +0000
Files and hashes: 1: 4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl (hash: HIKywuR+gqpk5XcZihcjsXkzE98GMqm+weMEbiVnG+w=)
2: AFLK_8dbQHSlYChoAA91MADo2dU.asa (hash: 7cAv3e9gnI3dZUR9MQwkNpXKUI1PglLX9wimy3aeHe8=)
3: Piv3x5GjdFWYogfJry-sQL2JX-U.roa (hash: 2ZYAqvuqxNoPqFzul2MyF+P3n7KAI2Js6FxsXshtYjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:14:a4:23:83:19:d8:82:e8:d9:7a:75:da:df:3f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ca795c4b5fb3c9e7dd992e7a3764902d121bc2
Validity
Not Before: Sep 25 01:01:11 2026 GMT
Not After : Sep 26 01:01:11 2026 GMT
Subject: CN=776664c5c716ac62ea3373579d9f660c6fd56fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:b6:c9:6f:20:64:6e:df:e1:16:99:ad:0d:
21:9d:40:97:02:c2:a3:de:86:6d:70:40:9f:ff:e9:
d5:c6:ac:e9:44:2c:e6:c1:37:25:01:ed:4b:3a:62:
0c:c2:15:d3:7f:d3:80:0e:8a:12:ae:89:8d:8f:7f:
7c:18:4a:8d:d7:fe:35:7a:a3:3c:b5:7f:6b:20:44:
75:02:12:1f:b5:fc:20:e7:48:38:df:ab:c1:2d:4a:
9a:9b:47:7d:8c:c5:1a:88:b3:f6:fe:5a:ad:10:2c:
5d:e5:19:4d:6f:ec:63:d9:0c:51:46:53:10:ae:e7:
e4:10:63:eb:89:29:5e:0b:f2:55:77:bd:7b:6d:c2:
ea:72:d7:57:80:13:91:b0:a2:7e:58:47:44:e7:32:
f5:5e:7f:e6:31:e9:e1:4a:7d:14:d9:b8:bf:ef:ad:
d7:dc:84:05:63:34:45:97:ee:29:7f:5a:92:28:c7:
ce:d6:a0:5b:24:81:a4:8d:2a:cd:11:b6:eb:1e:94:
39:c9:56:95:c8:4d:d6:ff:e6:71:7e:38:d5:ed:98:
9a:0d:f2:80:3e:b2:56:8d:77:89:d5:99:65:10:0d:
84:34:7c:8c:f3:b0:6c:28:be:cb:df:b3:4a:74:9d:
b8:a3:13:5c:62:85:10:ea:37:c4:1e:e2:e4:40:5b:
41:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:66:64:C5:C7:16:AC:62:EA:33:73:57:9D:9F:66:0C:6F:D5:6F:BA
X509v3 Authority Key Identifier:
keyid:E0:CA:79:5C:4B:5F:B3:C9:E7:DD:99:2E:7A:37:64:90:2D:12:1B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:60:71:f9:8b:e1:08:58:29:15:be:02:f6:47:fe:4b:48:d6:
4c:f5:9e:ca:80:26:c7:06:98:34:e6:c7:1d:14:74:8f:56:98:
4b:87:ea:e3:39:99:4c:e8:37:9c:82:44:8b:18:7a:e7:9d:ec:
d6:0e:ac:2b:ac:43:a5:a0:f9:5a:b4:f9:a1:6a:67:e1:08:a9:
cf:15:79:62:ba:c2:35:68:80:8e:3b:3a:75:6d:16:5b:ed:56:
9c:08:14:23:fd:e1:e3:bf:93:b9:ed:91:dc:1d:8a:09:23:58:
32:85:04:c5:23:7c:d9:49:51:c4:3d:f4:11:ad:ea:1e:e3:e5:
f5:87:0c:2b:a1:e7:c4:f6:69:0e:dd:ed:41:c2:5a:77:bb:ea:
3f:e0:82:ea:ca:f3:1f:16:5e:5c:71:33:92:23:98:a5:b6:e8:
f2:a2:6f:82:96:b2:0f:e9:2c:d0:3b:76:cc:c3:97:82:08:f3:
ca:d6:74:bf:59:aa:f5:b2:17:95:a5:ea:5f:07:71:0e:fb:c2:
53:42:a8:b6:b5:b3:e9:5f:e3:cc:61:1d:3e:60:bc:64:0e:6b:
b2:5f:61:f3:c9:e7:c4:f4:2c:c4:c5:b0:f5:f8:eb:d4:d5:e6:
99:a8:57:05:73:a4:85:ea:cc:38:c9:12:fa:42:63:ac:1b:57:
a8:de:89:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:20:11 2026 by rpki-client