
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
File: 4g44BaG09bYc_nMBDoOMLw0ltEs.mft (raw, json)
Hash identifier: ISTlsa2BP4ccIcbywtlgK/qbeF6JFnaBGmkbhRAi4Ew=
Subject key identifier: C4:7D:F8:F8:C2:D7:78:05:9A:2A:3B:E4:0E:0D:B9:91:E1:92:45:05
Authority key identifier: E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
Certificate issuer: /CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Certificate serial: 01A0CE5A81F3F72EDCD2B2F0432F5DB7451A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
Manifest number: 117D
Signing time: Wed 23 Sep 2026 13:00:33 +0000
Manifest this update: Wed 23 Sep 2026 13:00:33 +0000
Manifest next update: Thu 24 Sep 2026 13:00:33 +0000
Files and hashes: 1: 4g44BaG09bYc_nMBDoOMLw0ltEs.crl (hash: Sbh51qCcqVIzAZDvJw92Z9pDK6HaBuJDOC09i3VBU9o=)
2: a9UUQvVUQnxe273U6aniMeuVSV8.roa (hash: 7vEXbXNqwlMSgJyfX4S5RjxAdbJ6vW8VHoOqOei233g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:81:f3:f7:2e:dc:d2:b2:f0:43:2f:5d:b7:45:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Validity
Not Before: Sep 23 13:00:33 2026 GMT
Not After : Sep 24 13:00:33 2026 GMT
Subject: CN=c47df8f8c2d778059a2a3be40e0db991e1924505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:57:87:3c:49:eb:3f:04:9e:29:41:31:c7:
85:d0:a8:a3:c7:14:cd:7e:ef:5f:b7:37:6f:8c:5a:
b5:a8:e9:04:da:a5:a2:91:b0:de:a3:d5:02:57:49:
76:a3:50:d5:8d:9b:9f:a4:b6:3e:9f:1d:a6:a6:cd:
d3:34:af:3c:3b:67:59:04:eb:a3:2d:0b:01:bf:af:
45:c9:5c:0e:77:42:40:77:03:d0:f9:96:a1:25:18:
0c:e7:7d:ed:72:7c:55:26:be:a5:ed:07:e2:c5:b2:
71:6d:ae:0b:a2:81:c7:f8:8e:70:af:be:56:9d:13:
c8:48:3f:b8:9c:f1:4e:68:35:3b:80:44:87:a7:91:
b0:12:8f:05:de:c8:a7:75:5f:b9:f4:dc:99:54:22:
d9:71:e5:3f:5a:67:96:be:a9:6d:2a:b1:8a:f9:d0:
4a:e9:69:f0:b6:1f:af:13:45:85:43:48:30:26:2e:
68:7a:f3:32:11:fc:d7:99:41:bb:d6:d7:ef:e2:30:
47:e0:4f:37:42:44:a2:4f:ae:4f:e7:1f:c7:af:58:
98:ed:56:f3:43:3b:60:9b:df:e8:7f:2d:4b:0a:15:
3c:cd:e4:86:30:e6:e8:64:86:e4:a4:f8:42:28:d4:
2d:5b:50:a3:02:a7:0e:ce:b0:6e:37:58:dc:b6:91:
01:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7D:F8:F8:C2:D7:78:05:9A:2A:3B:E4:0E:0D:B9:91:E1:92:45:05
X509v3 Authority Key Identifier:
keyid:E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c7:df:7e:b0:7b:3a:c1:3e:3a:14:fb:65:0a:56:56:21:55:
a7:cc:53:ab:00:2b:01:f4:1d:3a:8d:4f:b3:7d:a9:6b:56:42:
2f:d2:d6:fa:fd:32:bd:9f:e8:3e:d6:ec:eb:d1:e0:69:6b:5d:
56:47:72:57:7e:fa:ac:65:ed:c1:99:00:99:0f:f3:67:76:ab:
f5:6a:53:9b:91:6d:6c:2e:86:67:90:8b:a6:11:fe:f7:f5:65:
bf:30:39:2d:7c:57:2d:04:70:76:b0:95:cb:ac:87:6e:9b:17:
cc:61:33:e7:ad:9b:5b:e2:ab:6c:5a:71:6a:d6:f4:2c:0a:00:
51:48:b1:e1:f6:40:65:a0:8c:f7:26:9f:31:cf:7d:98:8d:9b:
46:53:1e:4f:9f:39:c8:ce:62:6d:87:cf:93:bb:46:4d:cb:a1:
b8:fa:ce:ee:ff:b7:e3:07:76:90:15:de:b2:3a:05:32:bb:c8:
26:31:98:29:72:88:bb:4a:0f:45:1b:7f:bd:ac:0b:f3:9f:49:
b6:34:74:7b:e7:e4:d9:ef:51:c7:80:20:63:4d:b5:ec:f2:a3:
61:c2:ef:69:c0:aa:d9:9b:5c:15:95:d1:c1:9a:1f:8b:90:01:
31:d6:6a:c1:ae:2a:1a:e1:69:f8:79:3d:60:37:d5:9d:5d:50:
78:fa:e8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:38:34 2026 by rpki-client