Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
File: 4iqTzrgrZ1qEsNeOea5KeXypgjE.mft (raw, json)
Hash identifier: QV4sZMHugu5vNgFInN3k9f6GIbqCqm4yIzF0KP6kJbo=
Subject key identifier: F4:8F:B2:23:ED:F2:53:54:C6:3B:C6:7A:47:DB:10:3A:FC:7D:62:64
Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
Certificate issuer: /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Certificate serial: 01A0EA400124BD1B434B733A0F3494C0FDA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
Manifest number: 1610
Signing time: Mon 28 Sep 2026 23:00:58 +0000
Manifest this update: Mon 28 Sep 2026 23:00:58 +0000
Manifest next update: Tue 29 Sep 2026 23:00:58 +0000
Files and hashes: 1: 4iqTzrgrZ1qEsNeOea5KeXypgjE.crl (hash: ixBShvlATF1DLaIuIDur/6glpyBMIq2HD1fPwI9Fl9g=)
2: Tuyu4PDijXamcoBmvHaUR3Zhx1I.roa (hash: QNb3CvjoOXufsYPkEn/ZOrzMSuEn5o0O6f8GFs+m4Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:40:01:24:bd:1b:43:4b:73:3a:0f:34:94:c0:fd:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Validity
Not Before: Sep 28 23:00:58 2026 GMT
Not After : Sep 29 23:00:58 2026 GMT
Subject: CN=f48fb223edf25354c63bc67a47db103afc7d6264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:41:31:62:88:d7:fa:8a:68:b1:2e:1b:e6:57:
95:d9:b6:e6:4b:ee:c4:17:a1:1c:4f:9e:c6:d9:04:
7c:a5:4f:0c:a0:4f:30:de:51:46:81:a8:9e:0d:3f:
93:6b:3b:14:25:e7:3b:03:93:fd:09:a3:66:3a:c9:
cc:31:7b:bf:9f:e1:44:e9:b9:5a:b7:2c:ba:75:5e:
31:c1:fa:4c:76:81:8e:99:d1:4e:c4:0e:43:b8:0e:
40:ce:00:19:cd:3d:1b:65:0b:17:12:76:6b:2f:83:
f4:d9:37:51:a4:66:02:0f:f6:24:9d:2b:5d:cf:1a:
8d:88:32:28:74:76:93:36:b0:ec:78:a8:99:7e:8b:
34:31:7f:1e:d0:9e:74:a7:6f:e8:1e:94:ce:ec:d2:
32:73:1b:8e:b9:5b:3d:3c:cb:41:0f:b8:2a:af:ab:
e5:26:82:d6:15:d8:4f:5b:c1:b5:80:ec:df:f1:76:
2e:6e:95:0d:15:e2:b1:af:f3:77:b4:bf:1d:fc:57:
1a:d0:08:88:16:66:38:1f:af:dd:99:02:d6:8a:d7:
fb:0b:17:ae:57:4d:4a:cc:17:f2:13:24:e8:76:d4:
99:6e:ab:ad:6a:e6:8e:61:1c:ee:24:a9:a8:59:5d:
b4:c7:f2:ce:1d:28:d9:4f:28:a6:9a:ca:9f:cb:ed:
9c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8F:B2:23:ED:F2:53:54:C6:3B:C6:7A:47:DB:10:3A:FC:7D:62:64
X509v3 Authority Key Identifier:
keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9c:13:7c:08:8a:f5:7d:62:e6:4c:dc:b2:cf:c4:0c:c8:d9:
ee:1f:09:d9:e2:33:91:2e:5b:a5:10:65:29:86:e5:11:ac:6a:
10:1d:93:4e:43:d7:b5:69:4c:54:f9:14:e7:ca:bf:cb:cc:09:
53:2b:7f:32:1b:7e:6b:93:eb:b0:76:4d:80:cf:42:a6:54:14:
12:5a:09:0c:82:b3:08:c5:79:aa:af:89:c8:ec:dd:53:fb:94:
e4:d6:48:44:ec:13:38:47:48:25:65:ae:7d:c7:45:89:a3:a7:
1d:28:1a:d4:b0:d5:a5:97:17:58:c3:f7:40:32:66:32:78:fe:
b9:9a:01:ee:63:a3:c6:5c:01:95:cd:f3:1e:21:63:ab:45:d7:
02:4f:ad:b0:5c:76:fd:03:18:d0:e0:9f:0a:bf:fa:53:4a:29:
f7:03:a3:61:6b:ea:46:6e:09:a9:45:cf:e6:69:ca:9d:ab:4a:
98:99:34:06:b6:4c:0b:db:dd:d9:c3:e8:ab:de:8c:f3:1f:b4:
44:fd:4f:b5:2b:cb:ad:b6:98:f0:c4:b8:4e:e1:b9:f9:56:3f:
ca:18:65:06:39:3c:fb:ec:0f:5d:de:59:d4:04:2b:73:82:a7:
4c:72:04:a3:de:e1:36:f9:9f:8d:85:0a:f1:54:fd:ce:1e:01:
61:45:a5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:59:39 2026 by rpki-client