Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
File: 4uevc8B6V4KvJINOvdt0qciXxP8.mft (raw, json)
Hash identifier: pMVfDmlqByKphgGnoVbzFPGIwo9g25fQ5EO5MkS0sGo=
Subject key identifier: 97:D2:E3:69:73:B2:1C:1E:9A:CF:CB:35:0D:FB:F6:86:3B:11:C2:11
Authority key identifier: E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF
Certificate issuer: /CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
Certificate serial: 01A0D9BAB492855720BD7BA48F9E08FE3D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
Manifest number: 06CB
Signing time: Fri 25 Sep 2026 18:01:26 +0000
Manifest this update: Fri 25 Sep 2026 18:01:26 +0000
Manifest next update: Sat 26 Sep 2026 18:01:26 +0000
Files and hashes: 1: 4uevc8B6V4KvJINOvdt0qciXxP8.crl (hash: 2Q5/FGRAgLG1umPHFfiU7hvtOHcybP0HcS/ftY6CSK8=)
2: O4YiRIWBlabnpHM7xKFcaOrOaKI.roa (hash: ayodsdmBoAdUSEjYUyXeYrwcQDz8Nad0uAG3lrZysIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:b4:92:85:57:20:bd:7b:a4:8f:9e:08:fe:3d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
Validity
Not Before: Sep 25 18:01:26 2026 GMT
Not After : Sep 26 18:01:26 2026 GMT
Subject: CN=97d2e36973b21c1e9acfcb350dfbf6863b11c211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:37:00:78:f6:f2:bf:22:71:ea:94:60:51:fa:
af:5e:77:bb:2d:5c:6a:76:28:a9:7e:80:73:d8:a8:
84:d9:dd:a4:03:4d:9e:ac:e9:3e:1c:a2:35:b4:5d:
a5:8e:b0:ed:98:c2:7d:0d:27:3e:61:e3:76:81:f1:
f2:dd:39:59:30:4a:1e:89:9b:76:48:02:3b:44:8d:
e9:2e:68:e8:c7:4f:c4:a5:eb:e9:c8:91:24:61:41:
44:d2:10:6f:57:22:d7:43:69:aa:43:ff:13:23:ed:
d2:15:18:f4:20:5d:35:fe:39:81:ff:2e:18:a6:e2:
f7:17:b3:fe:c0:1b:ff:ee:19:19:ef:e3:01:33:6e:
a9:8e:81:19:9a:ef:46:41:a4:24:c2:4a:e8:96:e4:
26:7a:aa:3a:04:fc:8c:0f:60:66:66:da:29:0a:ba:
39:90:d7:d8:d8:69:b7:ec:79:e6:a7:04:ec:18:57:
7a:4d:e4:e5:8f:22:77:5f:e8:39:56:7f:1b:a9:c5:
9c:83:14:7f:0f:b0:83:7a:f1:8a:5b:da:14:f3:d9:
2c:db:e3:2c:b6:ce:53:98:a1:24:44:8f:de:cc:09:
09:3b:e2:5f:4c:f1:50:13:da:f7:03:bf:ad:1b:f0:
b5:9a:29:11:14:bd:a5:d3:9e:c8:4d:97:84:8c:1a:
09:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D2:E3:69:73:B2:1C:1E:9A:CF:CB:35:0D:FB:F6:86:3B:11:C2:11
X509v3 Authority Key Identifier:
keyid:E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:6e:33:78:60:37:aa:13:cc:16:df:08:59:11:1e:87:1e:c4:
86:19:91:dc:50:ca:f7:2c:6a:95:71:a1:ef:41:81:45:b1:bc:
0e:fc:89:56:f3:b6:74:c6:37:b4:42:14:7e:0f:bc:bf:1f:d2:
1f:b1:4f:4c:8a:a5:2e:53:45:86:5a:6c:e4:42:8d:e9:fd:f5:
69:a1:6a:b4:7d:63:6f:7d:db:97:24:bb:e7:3b:50:c4:b0:f0:
ff:06:f8:08:e0:eb:c4:f8:8c:d6:7a:50:61:fc:15:90:36:ce:
16:54:cf:5f:96:5d:80:1b:da:ca:cb:cb:7b:fc:40:1f:9a:d7:
f5:65:0d:1d:28:7a:be:cd:fe:55:54:5d:12:d1:78:02:bf:62:
62:2d:b7:09:07:3a:37:95:87:05:83:e0:e3:11:a1:01:a7:35:
b7:74:b8:b5:2d:f8:ce:c2:41:e1:5b:ee:51:d9:60:23:35:f5:
c8:4c:d0:bf:85:a4:36:93:d9:f5:07:c9:bd:e6:d1:cd:56:16:
98:09:75:8e:cd:db:00:bb:2e:6e:77:c0:11:29:8b:c5:b1:00:
b5:87:89:a6:5d:15:b2:df:18:85:25:f8:67:c9:38:ef:07:27:
0e:a2:c8:34:0d:06:38:76:23:07:13:83:63:41:da:3e:97:db:
c6:5d:32:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:44:33 2026 by rpki-client