Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
File: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json)
Hash identifier: 1Yf0x6uy+eggqP0y/Fs3WHQO53sPFHfvkh2JC61VFPc=
Subject key identifier: 5B:DB:DF:03:C8:3B:55:8D:97:0D:12:7D:84:C7:05:14:D2:57:2F:28
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial: 01A0D727ABC2C431307FB2120AF483B7BF72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
Manifest number: 1A73
Signing time: Fri 25 Sep 2026 06:01:36 +0000
Manifest this update: Fri 25 Sep 2026 06:01:36 +0000
Manifest next update: Sat 26 Sep 2026 06:01:36 +0000
Files and hashes: 1: 33GSrldWWk3Y0zJgykFgXMqOFKQ.roa (hash: Vx7Lsmyrdo4DClh/Ecx+QsM7m1e5mNGcZKBAQoQZRYU=)
2: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: TDSJ0QtlS+5ucV+IF95pbaWtVwDGIf8SsmgpP+r56fE=)
3: drikzNt5D9jwedYli_IhOY-bx94.roa (hash: yqU3IH8u+p0CuFDMh436wHQcQ7bwqSkz3SbUHUvU7mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:ab:c2:c4:31:30:7f:b2:12:0a:f4:83:b7:bf:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Validity
Not Before: Sep 25 06:01:36 2026 GMT
Not After : Sep 26 06:01:36 2026 GMT
Subject: CN=5bdbdf03c83b558d970d127d84c70514d2572f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:63:11:40:af:8a:94:db:7f:ff:10:06:cd:6c:
98:eb:f6:d2:55:f5:7d:e5:c3:37:2d:3d:dd:79:58:
82:25:ca:6e:31:e5:67:ac:4e:6d:70:87:5d:8b:04:
79:7a:2e:5a:d3:d7:23:37:b8:80:a2:a9:1c:93:d6:
27:4c:69:44:59:39:5d:58:dd:b4:b7:1b:cb:95:38:
2b:83:d8:8a:dc:e6:7d:78:c9:a7:89:c8:5b:97:16:
e3:7c:e7:4f:c3:ea:69:7c:63:67:7a:25:91:7b:0e:
b3:a5:50:8a:7d:c2:38:74:f0:51:44:47:e6:44:ef:
09:cd:f3:61:c9:7d:55:6e:5a:1f:9d:7c:63:90:85:
de:29:4d:2e:dd:3b:0a:79:28:f0:d1:93:b5:5b:b2:
a3:6c:a4:eb:3b:10:9e:0d:88:73:61:0a:0a:15:0a:
5f:bd:e7:93:15:1c:a4:8f:e4:fb:c3:fd:83:2b:bf:
0f:3f:71:ad:f6:19:34:8f:6c:f8:e9:75:75:e3:f9:
5c:2d:04:90:b4:68:2e:14:c5:f5:48:c0:bd:21:3f:
34:56:63:9d:77:fe:0d:b0:9a:d1:c3:de:70:72:e1:
49:19:01:b4:1b:c8:e7:12:73:c0:eb:2c:ef:05:98:
7c:bf:d7:b4:a0:6f:c3:01:35:48:be:68:40:4d:d2:
e9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DB:DF:03:C8:3B:55:8D:97:0D:12:7D:84:C7:05:14:D2:57:2F:28
X509v3 Authority Key Identifier:
keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1f:6a:d1:f7:37:13:f7:b0:07:00:e3:14:1b:0d:2e:c7:e7:
cf:5d:ef:32:2c:24:0b:67:fe:41:ba:5c:62:49:21:ab:57:ff:
de:e3:b1:30:d9:82:e2:f5:96:df:33:0d:08:4b:a6:2f:68:27:
a6:f3:1c:eb:75:c1:27:d4:47:72:bf:7e:c5:dd:07:e0:76:20:
a1:de:02:07:6e:98:a1:19:7d:dc:40:05:25:47:e9:a2:d7:9c:
1b:72:b1:f9:c4:29:00:13:2f:75:10:c5:04:74:a3:57:ea:4a:
50:f5:18:8d:b4:d8:1f:aa:a0:f5:e9:d5:53:00:7f:ed:d2:c8:
d9:4d:10:0b:79:f6:38:ec:ab:9c:6e:f8:29:da:3d:8d:7f:d7:
5e:49:3e:2c:96:94:ca:36:ec:16:4e:62:2a:a5:7a:ab:0a:85:
ce:49:fe:a3:2f:31:da:8a:dd:b7:2a:4f:2b:5a:6a:a3:48:8a:
61:12:60:41:22:c0:d6:69:0e:b6:70:bc:38:32:ab:50:b7:f7:
f5:c8:49:c8:e6:56:01:0f:bc:cc:dd:84:5b:7d:39:48:55:89:
ba:ea:6c:87:4e:6e:b8:e7:19:8e:45:4c:5b:d7:ca:d8:7b:d3:
f5:13:84:80:3d:27:28:b9:03:4d:c8:b1:ed:3e:0d:68:a7:9c:
6a:43:89:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:44:43 2026 by rpki-client