Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
File: 4XoaYiSN-HkTPAc61WKtA6K5L9w.mft (raw, json)
Hash identifier: tPLcHWRAdxJXeowHKl9Y7UFw3ro251C8qYvS/wmbGUg=
Subject key identifier: DC:6F:3C:82:9E:8D:96:63:08:BA:4D:55:64:84:4A:49:99:1D:0B:DD
Authority key identifier: E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
Certificate issuer: /CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Certificate serial: 01A0D872B037B1E9D2082F5F115D2C05A7EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
Manifest number: 0CD7
Signing time: Fri 25 Sep 2026 12:03:09 +0000
Manifest this update: Fri 25 Sep 2026 12:03:09 +0000
Manifest next update: Sat 26 Sep 2026 12:03:09 +0000
Files and hashes: 1: 4XoaYiSN-HkTPAc61WKtA6K5L9w.crl (hash: Y9bdXW/4d5Busyr3dg4Ia7E9NIKvWuIVGG7oKQ2B3FQ=)
2: JHxvjWc19A1tU7KyYGlgqUyLkL8.roa (hash: 9C5Ys0C3mf/K+bjsErUIoK6hkq5Fu1f77/hUUvfMpdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:b0:37:b1:e9:d2:08:2f:5f:11:5d:2c:05:a7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Validity
Not Before: Sep 25 12:03:09 2026 GMT
Not After : Sep 26 12:03:09 2026 GMT
Subject: CN=dc6f3c829e8d966308ba4d5564844a49991d0bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9d:9b:59:a6:2f:96:3e:48:7f:17:03:00:07:
16:c9:72:e4:f6:ec:1c:63:7f:44:21:e3:26:d3:a3:
71:ca:cd:38:89:64:8a:e1:37:68:52:06:1c:b2:2a:
5b:bb:f0:20:6e:4c:5f:0b:cb:87:b2:bb:34:c0:27:
f7:aa:03:5d:1c:27:52:60:c4:14:14:08:43:25:fa:
02:7a:64:11:b6:8f:00:15:e2:f0:b8:4d:aa:fa:3e:
d9:12:9b:f6:34:dc:db:f8:4a:a3:0a:02:d8:9f:fe:
bf:7b:60:06:ab:23:9f:4c:09:5b:ea:7a:a9:aa:18:
76:77:82:5b:b7:82:aa:18:1e:4e:92:68:f5:71:a6:
10:ca:15:19:4a:67:e0:40:a0:7e:dc:88:50:77:ea:
4e:bc:a1:9c:02:b0:2e:7f:df:6f:f9:ba:5c:ce:63:
ad:f9:6e:f9:c3:89:64:44:02:8f:9d:39:c8:68:f7:
ca:26:6a:d8:bf:31:41:52:64:a6:76:32:31:fe:22:
44:dc:8f:6c:5a:a0:b3:c5:75:8f:a7:98:e8:f1:64:
fa:aa:87:91:9c:b5:46:4a:04:d7:8a:b9:df:1a:76:
36:c5:77:50:14:79:a2:bd:7e:4a:50:8a:a7:1d:68:
03:dc:a0:9f:3b:a4:5b:7a:6a:0b:f6:1e:44:34:bb:
e9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6F:3C:82:9E:8D:96:63:08:BA:4D:55:64:84:4A:49:99:1D:0B:DD
X509v3 Authority Key Identifier:
keyid:E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:10:f2:cf:56:e3:96:94:ac:1b:6b:dd:5a:6a:80:90:74:7b:
48:ae:b0:ea:1a:ee:08:a6:f9:90:28:c5:16:f9:05:6c:39:96:
bc:e1:47:15:4c:90:a4:b5:25:cc:7f:05:50:67:5d:6a:fe:cf:
c3:b0:c5:93:87:1a:48:0d:99:a3:ba:35:a3:1b:a1:ae:55:3c:
4e:f7:4f:24:24:a8:03:35:23:be:f8:39:e1:88:c0:26:92:04:
14:2e:b1:42:27:64:db:d3:5b:23:6e:06:aa:5f:f8:62:cf:fd:
c3:e2:f2:1a:5f:cd:76:e1:f1:70:35:90:7d:ed:21:0b:f0:8c:
ee:e5:ca:ec:56:b3:22:77:8f:53:63:73:f3:de:d8:54:5a:ea:
f2:7c:81:2e:d7:7c:a0:29:21:5c:19:bb:7c:bf:7d:db:81:3d:
53:e8:c8:ab:90:61:4e:10:8c:ee:d5:41:d1:2a:ea:bb:88:ff:
d7:c2:88:11:c6:59:5d:d5:6c:7e:1c:d4:4d:9b:93:cc:73:73:
f3:7e:14:73:5c:06:e8:3a:6d:4f:8a:61:33:b1:6d:7c:34:26:
3a:42:68:44:2d:38:c7:e2:e2:fe:15:08:4b:b7:f8:ea:08:50:
a9:7f:fb:c0:e0:f2:80:b8:b3:e0:48:fb:aa:9c:3b:58:ba:87:
50:ff:ad:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:36:01 2026 by rpki-client