Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
File: 4rvHBn-KfFfWhtZ160aOmbhr1i0.mft (raw, json)
Hash identifier: gZZ7lv19bCWZC0NSOVikHXOPNd+vSyXPAC0Y414x1RE=
Subject key identifier: 9A:F9:B5:49:06:A1:AE:2B:1D:1A:22:4B:15:59:0B:EB:41:C5:67:B4
Authority key identifier: E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
Certificate issuer: /CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Certificate serial: 01A1CA0E0DC0328018BBEAD3BF13E7079B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
Manifest number: 1AC0
Signing time: Wed 11 Nov 2026 10:01:20 +0000
Manifest this update: Wed 11 Nov 2026 10:01:20 +0000
Manifest next update: Thu 12 Nov 2026 10:01:20 +0000
Files and hashes: 1: 4rvHBn-KfFfWhtZ160aOmbhr1i0.crl (hash: DazlXnYInBMV1qXdyF83aNMbYu5KHwOmaSNkDmQX6XU=)
2: bfmoXJzoDdpM9K6Axg6RQ6PcK7A.roa (hash: z7weft+bC6v8Gp+CtsE+ZYXb+kZuusFeVfZLKQMSX24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:0e:0d:c0:32:80:18:bb:ea:d3:bf:13:e7:07:9b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Validity
Not Before: Nov 11 10:01:20 2026 GMT
Not After : Nov 12 10:01:20 2026 GMT
Subject: CN=9af9b54906a1ae2b1d1a224b15590beb41c567b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:bb:de:ca:c3:de:0e:b8:58:c6:a4:16:5a:
89:8d:85:b9:d2:d8:9f:f3:9e:4f:f0:4c:98:ce:a2:
47:c6:40:79:7b:09:a8:f1:47:30:11:83:0f:c4:b2:
77:31:eb:b6:aa:cf:9e:7e:3e:fa:8c:0c:a9:48:75:
79:67:ba:1b:1f:b1:dd:64:9f:8c:a8:cb:09:52:36:
14:d2:07:44:b3:cd:c6:e5:7f:4a:04:e5:b6:17:3e:
96:63:2e:da:3a:d4:83:0b:31:8c:ee:45:22:ec:8b:
e9:f1:22:cd:06:9b:7e:d0:42:c4:4c:56:2d:a7:15:
df:69:e0:80:50:5f:f8:7c:3b:9c:90:ce:bc:bd:ed:
98:60:77:6d:09:ae:7b:19:9a:39:f2:6e:1b:9f:85:
6e:98:e9:43:f2:f5:3c:f2:2f:1d:24:a6:72:63:7a:
c3:4b:be:5b:15:95:3a:1a:70:d2:60:54:92:74:3e:
86:33:ec:55:a3:f6:2e:60:6a:5f:ca:7a:49:4f:e7:
d7:a6:a9:63:35:77:33:0c:2d:f9:7e:93:d7:d9:8f:
a8:ff:6e:40:cf:9d:95:b3:3f:c1:d8:ec:eb:5f:f6:
2a:e6:ef:77:a4:00:96:1e:51:31:ef:54:ef:75:e8:
67:ef:61:14:d0:db:9b:c4:cc:17:d2:d8:6f:da:61:
23:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F9:B5:49:06:A1:AE:2B:1D:1A:22:4B:15:59:0B:EB:41:C5:67:B4
X509v3 Authority Key Identifier:
keyid:E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:da:33:0e:06:8c:8c:aa:11:8b:73:c0:0c:ff:f6:67:1e:d1:
44:6c:fa:52:45:df:76:53:b5:59:53:e7:49:47:28:d7:24:7f:
10:8e:dc:f1:9b:7d:49:9f:db:8b:3f:f3:ef:d3:81:9b:2a:7f:
73:97:85:c2:c9:40:dd:96:4d:08:1b:56:c6:fe:a4:ee:b1:fc:
97:55:a8:f3:f5:24:47:f5:46:aa:00:62:a6:e2:67:ad:8b:ac:
69:aa:9f:5c:80:d3:ef:df:87:cd:24:86:f8:84:97:53:51:e0:
70:e7:be:6a:10:b3:53:73:6a:81:b2:94:ea:5b:10:a1:8b:10:
d3:49:28:0d:cb:57:ba:80:67:6d:4b:9d:d6:6a:16:f6:8d:8e:
3f:6b:1a:f6:28:84:13:f3:44:3f:e8:ff:5b:40:49:e9:07:e5:
80:10:76:06:e0:8d:89:32:99:c2:84:d1:ec:f1:ed:6b:55:61:
2b:1b:5d:49:31:88:51:28:07:e3:0f:b4:79:07:c0:a1:bc:1d:
20:c7:3b:f6:6e:0c:dc:c8:95:b7:d5:00:28:49:0a:84:9a:81:
64:da:ff:79:9e:30:08:11:70:6f:07:b7:3c:d1:a1:cd:7d:04:
3d:f7:a8:a7:cb:ff:22:56:14:5f:55:57:f2:7d:9b:ea:9d:20:
64:25:12:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 19:17:07 2026 by rpki-client