Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
File: 4McMwtIdqMLqZIFTT0jaSVqoS90.mft (raw, json)
Hash identifier: l+pAWf1aRLUPSiW4tZnMrkjYuf1MkaTfQQTYW3EqCPY=
Subject key identifier: DB:1B:AE:81:63:A7:29:60:3D:6B:90:63:8C:AB:65:3F:AE:5D:1E:74
Authority key identifier: E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
Certificate issuer: /CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Certificate serial: 01A0D0B7144548A941157C09005B80326300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 00:00:54 +0000
Manifest this update: Thu 24 Sep 2026 00:00:54 +0000
Manifest next update: Fri 25 Sep 2026 00:00:54 +0000
Files and hashes: 1: 4McMwtIdqMLqZIFTT0jaSVqoS90.crl (hash: qZwtoGolWMZ32JV4+sq461/2JOWg+RHuADa9yx2ph5g=)
2: 9n6YyJWp7IvRmsopFDTgxhmBQm0.roa (hash: sjjxTHhwHGPnXt5JrQHPax3TE84fw1Ixy4bJH+8t+xw=)
3: Rn2NWJkYlmshYFgoPzIuXMYWVGc.roa (hash: JJzFZmd7A4HTxXMIGqGZ67CiVP4Sj1WJIj0x7HOLtqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b7:14:45:48:a9:41:15:7c:09:00:5b:80:32:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Validity
Not Before: Sep 24 00:00:54 2026 GMT
Not After : Sep 25 00:00:54 2026 GMT
Subject: CN=db1bae8163a729603d6b90638cab653fae5d1e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:59:01:ec:ed:48:7a:d8:a3:3f:55:94:fa:
3e:34:97:cb:ca:5a:7f:2b:6e:ff:bd:9e:9b:34:c7:
13:02:27:43:e4:65:e8:7a:75:92:0e:c1:e8:82:ca:
b4:84:86:bb:e4:c5:90:f4:ec:eb:af:17:e4:43:bd:
2b:7c:82:84:e8:7b:53:c2:36:30:92:5b:5a:0b:5a:
35:4e:a3:d5:36:b8:87:fe:f2:9e:a6:07:32:62:03:
07:dd:31:67:00:78:2d:11:70:33:63:56:97:ae:0d:
24:90:7c:14:68:eb:8d:fc:77:eb:e0:76:19:8f:d3:
87:a1:c3:bd:52:32:47:1a:12:33:3a:c3:29:aa:88:
3b:bc:91:22:7e:9e:3f:dd:c9:75:b3:4e:bb:d4:c1:
31:ea:be:a3:a0:45:ed:51:82:30:29:cb:8e:00:3b:
84:8d:07:18:7d:8e:0e:23:3e:10:c3:6c:bb:fc:0a:
7a:a9:36:6a:8f:f0:b8:63:8e:f3:82:96:6c:1c:5f:
f0:e7:b1:33:f3:14:48:70:30:b1:f0:31:27:f6:4f:
b9:86:56:df:54:bd:31:8f:e3:1f:af:8a:ed:82:95:
69:e6:62:dc:fc:64:d5:61:6d:24:f1:d0:c3:c6:a1:
03:89:ed:fd:27:70:db:2d:dd:bc:00:92:c1:da:88:
88:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1B:AE:81:63:A7:29:60:3D:6B:90:63:8C:AB:65:3F:AE:5D:1E:74
X509v3 Authority Key Identifier:
keyid:E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c9:24:c4:9a:24:f3:f0:ca:9f:9b:c0:76:8a:ec:6c:10:49:
de:2d:29:ae:30:b2:a8:5c:f7:6b:61:fa:4f:88:2c:88:09:b1:
91:08:d5:73:15:c6:b3:4c:4f:7d:a8:1b:e3:f6:1c:62:34:74:
43:50:78:cf:66:1c:67:6f:a8:0f:13:c9:6c:c3:a7:48:d8:8e:
ba:0d:7c:02:85:fe:5e:37:09:da:f1:22:ca:57:6a:af:34:93:
2b:80:8f:f4:81:1f:8e:9b:74:39:16:8a:3c:fa:7b:4d:41:9c:
17:ae:86:6b:c6:f0:1d:48:7a:10:09:70:6f:33:fb:28:9a:b6:
7d:ab:c2:3e:b6:9e:04:28:d1:7c:40:0a:8a:86:ba:d0:8c:d5:
1d:68:ee:92:f3:05:46:4f:fc:ce:f8:2c:f1:23:9f:54:ec:ff:
44:ca:b8:7a:f6:6a:19:81:0d:08:45:b9:f2:58:89:90:b8:39:
5b:ed:a4:95:b4:f9:dc:88:6d:9b:3a:ec:1d:5b:16:96:60:23:
be:a8:ef:61:72:d1:7f:da:67:1a:40:7c:64:16:3c:cb:84:23:
96:a7:db:35:9a:2e:3f:94:0f:27:fe:e7:b6:13:e0:0c:16:22:
e3:dd:f2:31:7c:82:74:23:17:36:13:78:d1:84:a0:67:63:8a:
ca:ed:ff:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:24:49 2026 by rpki-client