Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
File: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft (raw, json)
Hash identifier: RN24uMnwB/F7Ap9rQmGs+SjFDrAs/9YKJ20jRbixFNM=
Subject key identifier: 6C:F9:31:20:3A:10:47:6F:CC:6E:54:48:80:3F:D2:08:B5:26:72:B0
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial: 01A0CD7F1F05BF7ADE43FF9BA648A9F3F12C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 09:00:55 +0000
Manifest this update: Wed 23 Sep 2026 09:00:55 +0000
Manifest next update: Thu 24 Sep 2026 09:00:55 +0000
Files and hashes: 1: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl (hash: LSoLCR4+NELwf1z8e/vwYMr6zfL8LxnGUvovS+uReyg=)
2: aD4aJMmaQg_1w8VUSr55ba35-_4.roa (hash: 3Ez4Ad6m2JnI3XnTs61pJ+5b17Kb2kmyt6ZM1f7rwSI=)
3: g2k94sbrfkriJ_TYzjO-TqZlMBM.roa (hash: 1ZkSwSDFlimbj/n4XoixvGsfM3nfxp389BDAwVqw2BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7f:1f:05:bf:7a:de:43:ff:9b:a6:48:a9:f3:f1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Validity
Not Before: Sep 23 09:00:55 2026 GMT
Not After : Sep 24 09:00:55 2026 GMT
Subject: CN=6cf931203a10476fcc6e5448803fd208b52672b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:e1:4b:99:0d:6e:a4:7d:bf:d6:6e:c7:9d:
64:cc:44:1a:ce:cd:2f:91:d9:0b:12:52:9a:ca:5f:
89:56:cd:14:05:48:f2:94:05:9e:0c:9f:4b:e1:39:
0d:9b:6c:98:a9:18:ec:7a:0b:45:fc:12:39:72:00:
e8:5e:10:f1:4d:d9:31:ae:c0:e4:77:88:74:0a:bc:
ca:d0:44:b8:00:fd:48:c7:68:f8:62:89:86:bf:77:
90:3c:76:85:7d:09:37:5b:b7:09:dc:98:0d:03:17:
f9:36:0f:aa:71:8c:69:46:98:66:a7:07:75:44:cf:
3e:4d:6f:80:36:26:3e:c7:8d:aa:68:1d:ce:e0:92:
45:ca:29:4c:5c:fa:b1:8a:07:9c:0d:01:6b:74:dc:
17:d5:e4:b5:7b:02:a2:57:ae:8f:ef:50:f8:aa:23:
4d:26:50:e9:5e:cc:06:a9:b8:6d:70:35:04:56:90:
27:16:22:8b:49:f8:68:41:bd:d3:04:07:93:59:a7:
6a:21:0f:12:b9:10:9c:77:e3:39:aa:f6:67:57:60:
f3:58:53:cc:d6:2d:38:d4:91:3b:d7:d7:e1:1e:dd:
cb:a9:8f:fe:17:9e:8f:94:c9:8c:90:22:df:d2:72:
72:a5:90:76:7e:df:93:51:36:a0:3f:75:f6:3a:fc:
97:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F9:31:20:3A:10:47:6F:CC:6E:54:48:80:3F:D2:08:B5:26:72:B0
X509v3 Authority Key Identifier:
keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:10:e9:3d:a5:49:a5:82:2d:75:ed:8c:c8:ce:70:06:e2:17:
75:c6:dd:d5:1b:b8:b7:51:83:86:27:4d:e8:d4:55:8c:f9:d1:
d0:f9:39:1a:d8:cd:76:2c:ac:9a:c2:08:41:87:08:99:cc:90:
28:c6:97:50:40:4d:89:67:ce:b4:89:31:c4:3c:98:af:7b:ab:
81:91:d3:9b:20:e0:d3:16:5e:07:e8:7a:fe:33:7f:90:8e:f2:
a0:18:5b:35:1c:ce:1d:84:93:dc:8f:c8:2e:67:b3:6f:dd:59:
3f:d7:66:8b:ab:c9:d1:5a:e8:8b:ac:ac:9a:a8:48:03:de:77:
9b:2a:69:6a:6a:87:92:d8:56:02:96:ff:d5:70:bb:7b:23:66:
d1:57:2e:47:07:f9:63:66:d7:2a:7b:3c:18:81:80:2a:77:3e:
d4:33:d4:25:b1:28:1c:82:88:dd:6f:3a:df:d0:ee:2e:6e:4e:
50:58:fc:2a:53:b4:f5:b8:96:97:32:f7:a0:7e:c1:ee:6d:49:
a0:96:39:bd:73:27:05:55:94:9e:f6:ae:d0:38:48:52:02:1b:
4f:79:75:4f:3d:ad:d7:58:6d:8b:d2:10:56:19:b8:b6:c0:80:
d5:6e:80:cc:91:08:33:63:bb:73:4f:af:b6:d5:4b:32:5e:65:
ac:f3:fb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:28:21 2026 by rpki-client