Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
File: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft (raw, json)
Hash identifier: AVlDoPkb6hzWEQR1Lj1G8MZ0UjKXa1bQ8CfefS7RRBg=
Subject key identifier: 0B:09:A7:47:10:D5:DC:AE:62:33:99:AC:65:1B:2D:20:CD:0F:20:79
Authority key identifier: E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
Certificate issuer: /CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Certificate serial: 01A100C829105A9A790192019BD47BEAFB9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
Manifest number: 1A83
Signing time: Sat 03 Oct 2026 08:01:19 +0000
Manifest this update: Sat 03 Oct 2026 08:01:19 +0000
Manifest next update: Sun 04 Oct 2026 08:01:19 +0000
Files and hashes: 1: 1OhU1ba4r4lAxG-v3HBo5kpowjY.roa (hash: uhi47WtmC1HtS+uzfaoWnsMLVST1oI2GfXGXB1P0CWo=)
2: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl (hash: i2Z94/d2iu0iK1ksqmJG4iB5igtUDn/hNL2mBba0hvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 08:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:c8:29:10:5a:9a:79:01:92:01:9b:d4:7b:ea:fb:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Validity
Not Before: Oct 3 08:01:19 2026 GMT
Not After : Oct 4 08:01:19 2026 GMT
Subject: CN=0b09a74710d5dcae623399ac651b2d20cd0f2079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cf:67:d5:e1:32:45:67:80:33:2b:cf:c4:02:
57:a0:32:5c:df:97:95:00:ba:6e:af:ef:d8:7a:23:
68:07:62:41:c4:8a:aa:5e:64:e9:bc:8f:c4:6a:39:
bd:f4:08:0b:12:2b:11:d0:2d:0e:dc:ac:38:b9:6d:
73:5e:be:6e:e3:51:d4:07:1d:0b:9f:84:0f:9d:e1:
f8:10:71:4f:5b:fa:fe:db:44:9d:8f:a5:6e:ac:87:
50:b0:ca:54:86:5b:eb:1f:0f:9a:26:ff:47:ad:d8:
c1:b6:61:2c:71:cb:eb:0a:97:dc:be:77:0c:d4:b6:
94:8a:20:0b:c5:c8:2f:bc:a9:e3:ce:88:c9:85:4b:
0a:81:6a:15:9a:e6:b7:d4:6d:57:d2:09:fa:5b:ae:
ea:12:a1:09:5c:88:2b:27:eb:cd:34:17:90:6c:76:
3e:49:ce:f0:49:6d:2a:10:54:c0:81:23:7c:e6:3f:
eb:08:44:a8:22:e0:40:0f:9d:13:81:c3:b5:30:b4:
ea:78:3c:63:b9:45:26:0c:e3:a8:1d:77:51:ab:68:
d5:d6:a5:e0:d1:45:aa:0e:56:c7:23:92:3e:96:39:
0d:03:dc:7e:64:36:f2:74:70:fd:64:c2:87:e7:ae:
dd:cb:5d:33:19:4b:a0:62:eb:cd:c8:b9:a3:52:73:
32:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:09:A7:47:10:D5:DC:AE:62:33:99:AC:65:1B:2D:20:CD:0F:20:79
X509v3 Authority Key Identifier:
keyid:E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:10:d4:aa:81:23:99:0e:dc:e2:65:43:3e:89:c9:85:44:61:
64:80:68:11:61:54:db:6a:41:4d:2c:ff:73:7c:fb:f5:51:e4:
5f:52:24:ef:16:04:38:2e:b9:51:a1:3a:e5:f5:01:22:41:e6:
cd:48:45:94:fe:7d:1b:71:2c:4c:27:7b:cb:5d:ec:ba:d7:8b:
c6:d9:04:f2:ec:23:2a:19:d1:4b:0f:fd:db:82:7c:88:b7:a8:
e3:62:fb:fd:d1:5e:3e:90:eb:6d:91:ff:d5:14:bd:02:ac:5a:
3e:99:ab:a8:77:29:b4:61:9e:ad:dc:3c:26:4e:78:8c:ea:5d:
b4:cf:b6:0c:8e:fe:ce:61:84:de:0f:6f:ae:80:d1:77:96:fb:
ce:81:33:ad:41:26:83:00:ec:b9:08:b2:6d:2b:42:1a:7e:df:
b0:51:bc:e6:17:3e:82:96:53:83:d7:49:03:e1:bf:b8:56:8b:
fb:27:de:82:63:23:f3:fe:5c:67:3a:ed:45:4b:8f:e8:24:6a:
87:5b:af:73:88:20:ca:2f:c3:3a:9e:41:8c:9c:ea:65:82:77:
89:13:ee:3a:6d:0b:1c:86:e4:e8:9c:c9:57:1e:b1:1d:98:3a:
28:b5:80:44:18:2c:42:87:83:56:76:e3:c6:71:73:37:6d:c7:
d0:2b:03:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 16:16:49 2026 by rpki-client