Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/4-RF3Maa8qhLmLB_kBFn9uK4gzQ.mft
File: 4-RF3Maa8qhLmLB_kBFn9uK4gzQ.mft (raw, json)
Hash identifier: 4g4N1dyVBCgjNLe96Uwp18qXe88mtLRHrWFDtCYYtIk=
Subject key identifier: 3C:0B:9E:4C:E0:C6:4C:C2:F7:7B:FC:AB:8E:17:F2:9B:1B:1D:36:C7
Authority key identifier: E3:E4:45:DC:C6:9A:F2:A8:4B:98:B0:7F:90:11:67:F6:E2:B8:83:34
Certificate issuer: /CN=e3e445dcc69af2a84b98b07f901167f6e2b88334
Certificate serial: 01A0ED0BD3C2701350C9F7153069C8B4D0C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-RF3Maa8qhLmLB_kBFn9uK4gzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/4-RF3Maa8qhLmLB_kBFn9uK4gzQ.mft
Manifest number: F4
Signing time: Tue 29 Sep 2026 12:02:50 +0000
Manifest this update: Tue 29 Sep 2026 12:02:50 +0000
Manifest next update: Wed 30 Sep 2026 12:02:50 +0000
Files and hashes: 1: 3Y0DvCCQl1T1M_Odsj25KMfoj0s.roa (hash: bYPYLnwJfT6YQz6FMrLKBCsJh4hMqdOt81D/lCQeK9w=)
2: 4-RF3Maa8qhLmLB_kBFn9uK4gzQ.crl (hash: uuVy4lL5XXZyfuSWjwe65ExSta1ImUv5vz9raiqTeE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/4-RF3Maa8qhLmLB_kBFn9uK4gzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/4-RF3Maa8qhLmLB_kBFn9uK4gzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-RF3Maa8qhLmLB_kBFn9uK4gzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0b:d3:c2:70:13:50:c9:f7:15:30:69:c8:b4:d0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e445dcc69af2a84b98b07f901167f6e2b88334
Validity
Not Before: Sep 29 12:02:50 2026 GMT
Not After : Sep 30 12:02:50 2026 GMT
Subject: CN=3c0b9e4ce0c64cc2f77bfcab8e17f29b1b1d36c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:54:01:b6:db:71:5f:db:bc:17:b7:96:06:
b6:2e:96:2b:32:32:22:d7:24:8f:72:d6:53:0f:08:
9f:75:0f:c1:f7:23:5a:d0:5b:50:3a:c4:29:35:45:
65:95:67:28:9a:f8:2e:06:ac:6d:0b:77:44:7b:2e:
85:1a:08:59:f8:9a:d4:bd:3c:5e:5a:ec:0c:76:43:
b7:0d:c3:0b:e8:3f:7f:92:40:4e:11:89:1b:40:c8:
36:db:bf:0d:71:ad:0b:6d:04:13:4c:e8:d0:14:46:
de:9a:2c:0f:d0:26:fb:39:76:09:0a:15:0b:1b:d6:
c5:95:39:90:2d:aa:a8:e9:49:0e:1e:1b:4c:47:a2:
b5:1d:8e:f7:54:f1:a2:3a:75:4c:73:45:86:84:43:
75:df:22:8f:f2:2f:18:fd:06:15:9e:cf:9a:56:f2:
4b:ea:79:70:46:07:b3:31:46:35:61:79:b0:b4:aa:
72:72:7d:5e:b5:17:2a:20:56:24:e2:c1:f4:cb:3a:
69:95:bc:d2:cc:29:87:21:21:aa:73:ca:0f:04:7f:
68:db:77:ff:ad:12:a5:70:56:4e:49:86:f4:ce:e8:
ca:d0:e3:08:db:15:d5:74:33:7f:39:81:98:34:ba:
39:c9:f4:52:7a:5d:23:bb:6a:05:22:42:76:53:f2:
6e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0B:9E:4C:E0:C6:4C:C2:F7:7B:FC:AB:8E:17:F2:9B:1B:1D:36:C7
X509v3 Authority Key Identifier:
keyid:E3:E4:45:DC:C6:9A:F2:A8:4B:98:B0:7F:90:11:67:F6:E2:B8:83:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-RF3Maa8qhLmLB_kBFn9uK4gzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/4-RF3Maa8qhLmLB_kBFn9uK4gzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/4-RF3Maa8qhLmLB_kBFn9uK4gzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:88:fa:aa:72:f1:22:45:fb:ac:cd:06:53:1f:58:29:b3:3f:
92:11:d1:5e:7c:7c:2c:27:b7:00:18:44:c8:9a:65:bd:9d:a4:
2b:fe:ed:fe:dd:65:2d:bb:d7:be:cb:dd:82:19:9e:d0:2e:86:
3d:1f:65:5d:97:b0:ce:e8:00:92:bc:ef:0c:84:eb:5d:b7:59:
e6:bd:5a:24:d9:9b:bc:dc:28:05:40:91:7b:a0:63:3c:30:8c:
bb:fa:b4:32:ac:b0:bd:b4:7a:d0:50:0b:3f:36:a8:fe:a3:47:
17:6a:a6:8c:30:68:a3:72:21:07:3c:4f:1f:fd:63:18:2e:cb:
33:84:aa:ef:08:d6:c5:59:02:ab:4b:aa:b7:ac:98:8f:11:e4:
f2:b5:3a:14:61:3d:6e:fd:e6:21:0a:ae:52:41:20:8b:bc:50:
e6:85:2d:07:89:77:e7:cc:25:0e:ad:74:d4:90:54:ff:ca:97:
48:b4:72:a6:fb:8e:e1:60:7a:f3:e8:2a:8f:5e:28:0b:97:80:
4e:00:9c:11:95:99:ee:f1:33:f8:29:cf:d5:37:28:5f:2c:f4:
4a:b5:8b:c7:df:df:1d:f6:71:df:39:f6:ff:a5:19:cc:a4:18:
21:32:36:1a:5c:d8:d9:83:12:b1:93:38:4b:a7:61:4b:3f:9b:
47:99:6c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:38:00 2026 by rpki-client