Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
File: 4jy32eUh5kaf1-KtE2A_t-6_4OA.mft (raw, json)
Hash identifier: h+OZNLOYgHOTebIbGgLY9qiI1HGyGuMOTPqxFkraFDY=
Subject key identifier: 15:7E:B2:D1:2E:63:09:F5:B6:3C:C9:B7:D6:96:2A:BC:C9:AD:E4:84
Authority key identifier: E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
Certificate issuer: /CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Certificate serial: 01A1DD5E01D9E976FB9B6E771878D250E9C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
Manifest number: 0E2F
Signing time: Sun 15 Nov 2026 04:01:27 +0000
Manifest this update: Sun 15 Nov 2026 04:01:27 +0000
Manifest next update: Mon 16 Nov 2026 04:01:27 +0000
Files and hashes: 1: 4jy32eUh5kaf1-KtE2A_t-6_4OA.crl (hash: MEBne538oxI3p7PvqjUVp1WsBrTLQtbWf0WBVgHovZ4=)
2: ErpeCUDkmubemk25x6bhiE8fSGc.roa (hash: TTJUK42mws9XlE8j1BxdD7GShsktqMxOOwmtU5mBiJY=)
3: T0pinHQE9eLRbdmXpvSn-pLDjUA.roa (hash: fpKBkag1Eq814ryw6TGAsVdMfo9isfHsmaeJ5gB+g6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5e:01:d9:e9:76:fb:9b:6e:77:18:78:d2:50:e9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Validity
Not Before: Nov 15 04:01:27 2026 GMT
Not After : Nov 16 04:01:27 2026 GMT
Subject: CN=157eb2d12e6309f5b63cc9b7d6962abcc9ade484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c4:3f:38:1b:4e:b4:a3:37:b6:2d:06:4c:0b:
2a:50:b5:2f:f9:6c:32:d7:b7:03:16:0f:5b:17:f3:
cd:7f:75:47:ee:83:0c:5e:c7:d4:a2:f9:06:b7:2b:
30:dc:cb:df:22:96:d9:56:e9:75:49:3e:e5:16:c2:
38:71:c6:28:48:6e:d9:23:cc:38:be:d4:66:25:c1:
d4:e2:c5:cf:f3:e9:69:23:e0:fc:8a:e2:9a:6c:9b:
85:4f:a9:45:a6:d4:10:78:05:cc:a3:c9:0d:62:cd:
9f:c8:36:64:0b:37:ef:07:43:23:09:df:95:db:9b:
8a:41:46:ac:ca:03:d8:4c:aa:4d:83:12:e1:3c:8c:
93:0b:c4:2f:d6:cb:ba:66:bb:07:35:ce:e5:ac:1c:
67:33:0f:f7:d6:1b:77:62:5f:8c:a9:e1:c0:72:fa:
57:e3:b7:d2:f0:4a:55:d3:6b:3c:61:1b:54:b3:95:
90:a7:0e:60:e5:ee:c4:86:e4:fd:33:30:29:ec:ca:
8f:45:85:a7:15:49:01:72:3a:40:f4:28:4f:3b:1d:
54:6d:b2:f9:c3:97:cb:ec:a0:bb:a0:bb:9d:9e:26:
51:7b:e6:51:12:0c:31:1d:b5:f5:42:9a:9f:f8:27:
00:f8:f8:b0:47:bd:da:5f:0c:17:29:56:4c:e2:13:
78:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7E:B2:D1:2E:63:09:F5:B6:3C:C9:B7:D6:96:2A:BC:C9:AD:E4:84
X509v3 Authority Key Identifier:
keyid:E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:3a:7c:e2:bd:ca:48:21:91:71:16:11:90:43:2a:de:54:db:
c6:20:e3:68:f7:65:bb:77:a7:89:c0:d2:77:c9:c2:47:a4:77:
5b:a4:3b:b8:85:0c:f2:c1:11:e2:d3:a2:e1:68:2a:51:92:fb:
98:0e:a3:4b:d4:e8:d2:b2:9e:af:ba:5f:56:de:6d:71:ba:06:
72:57:24:06:64:12:83:77:bc:ac:52:b9:6c:1a:d4:98:1c:b5:
23:c1:be:88:65:0c:76:72:62:95:30:c8:5d:3a:49:39:6e:2c:
02:6c:59:61:91:a4:b1:8d:e4:ea:ff:02:6e:59:25:ff:86:17:
74:39:a1:a1:ca:8d:a4:e4:fa:ed:66:fc:b8:48:68:51:90:a7:
55:e6:b2:a3:42:77:ac:ad:82:e0:32:d0:06:c5:61:82:ff:ba:
de:ff:57:86:f4:8d:07:af:63:a0:6a:34:a6:f7:bd:9f:3e:0a:
fa:9b:74:59:ed:d9:cb:b7:97:3c:2b:d5:83:98:79:36:bb:09:
a5:ed:4c:34:de:b1:df:c3:92:16:c2:ab:5e:47:5c:d7:4d:10:
9a:96:56:88:ca:54:51:58:f4:a4:f8:ca:fd:5f:3c:f2:4d:3b:
e7:05:c5:8b:04:bd:c7:87:ec:7b:3d:57:6e:0d:70:22:18:b3:
35:70:c5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:16:34 2026 by rpki-client