Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
File: 4q7DyKsR_AWMmo70AO8cPRRKe6g.mft (raw, json)
Hash identifier: Z4aRmz4u/sBeS3JoJlvfEdiSEvRwSHWC75clkQbVODo=
Subject key identifier: 87:60:E7:4D:94:5F:93:14:B2:B9:4C:11:5B:9B:0B:5A:46:8A:14:DB
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Certificate issuer: /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial: 01A0CC6C92A91907F180292F8C53CD6B2259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
Manifest number: 0CEF
Signing time: Wed 23 Sep 2026 04:01:02 +0000
Manifest this update: Wed 23 Sep 2026 04:01:02 +0000
Manifest next update: Thu 24 Sep 2026 04:01:02 +0000
Files and hashes: 1: 4q7DyKsR_AWMmo70AO8cPRRKe6g.crl (hash: GegZgvLg+b0cSxyTPLS3evjcz7FW/avguaf25AiTfZQ=)
2: 5F_Lv04RXNd_Y46Aej2XB7OXRCs.roa (hash: OFOrOgL1BwCDJs6vNTJlxJXJgyRTHA3y/UE7TO8d/LM=)
3: jn-Hv0IYlCEKrmAbyK_6k7lqISQ.roa (hash: J+qsyRuhmSWKW099fqXxFsiGbbSUDzkgcakOMIwreHQ=)
4: oil7N-Cu9Bp_DmPdE_j9IZL0Ozo.roa (hash: sJuR4lvRXMBU3fcQ7PumT3oOEz1g58/Vsv/QWac8Orc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:92:a9:19:07:f1:80:29:2f:8c:53:cd:6b:22:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Validity
Not Before: Sep 23 04:01:02 2026 GMT
Not After : Sep 24 04:01:02 2026 GMT
Subject: CN=8760e74d945f9314b2b94c115b9b0b5a468a14db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7c:9e:00:74:4b:ed:93:40:17:be:46:aa:42:
6c:a5:15:ee:00:c0:b6:9c:21:b0:f7:f3:7d:65:04:
58:5b:73:42:60:77:c7:4e:4e:60:90:4d:fa:ab:d8:
d6:85:33:32:e8:15:c2:1a:87:47:14:ba:5b:3d:1f:
e2:aa:ed:92:90:e0:8d:48:4c:d4:9d:6c:f3:80:1d:
60:40:ad:71:2b:95:04:44:88:b0:e2:43:c8:e2:35:
6f:26:7a:0c:7a:c3:3f:33:bb:e9:a7:05:ec:74:ac:
b6:cc:8e:de:cc:ce:03:43:4f:c7:e4:ef:2f:c8:62:
29:72:77:74:6f:45:6c:bc:10:1d:23:20:21:aa:f3:
c7:10:38:e4:50:bb:68:cf:16:48:73:97:1d:6c:29:
95:82:2e:1f:6a:cd:a4:cf:ed:b5:bb:15:4c:f8:f6:
b1:bb:e1:37:57:98:f2:13:57:59:0f:b6:00:3a:a8:
0b:a4:c7:bf:fb:d4:62:8f:67:dc:f9:7d:1f:d9:5b:
43:8b:f7:b9:43:e9:3b:49:e7:96:33:54:6a:74:a4:
33:1c:a1:c0:2c:0b:19:fa:66:78:2e:80:d3:6a:33:
56:bf:80:6b:7d:78:a5:46:be:87:9f:a1:35:7c:44:
15:25:2a:83:d3:c7:47:cd:1e:df:da:ab:1b:17:08:
d8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:60:E7:4D:94:5F:93:14:B2:B9:4C:11:5B:9B:0B:5A:46:8A:14:DB
X509v3 Authority Key Identifier:
keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:57:07:4c:b3:d6:ff:c3:54:97:c6:02:d2:d0:ff:99:f4:86:
26:fc:49:97:50:ea:ce:d2:ac:ec:59:5d:8c:c5:c5:db:21:10:
5a:f5:0d:8e:ef:9e:d5:11:f6:e8:6a:b6:c4:26:d3:e3:4c:53:
97:01:9c:ee:1b:85:c8:56:aa:d4:f3:64:40:e1:de:61:9c:c7:
ef:2f:2b:dd:22:e7:23:2f:4c:29:5f:f5:8a:e8:76:75:f9:d3:
51:89:3b:a3:7c:d8:88:48:a7:2e:0f:19:38:bc:67:47:49:1d:
72:99:6f:e3:e7:bd:3f:39:5c:d3:f9:9d:11:5c:a6:3b:e5:64:
c3:ca:02:a8:0c:12:58:9a:2b:9f:e7:32:e2:73:e5:b1:d7:6d:
31:76:04:e1:94:29:42:58:8d:c1:31:3c:3d:5f:e6:ae:c0:ca:
c8:68:57:71:37:cd:7b:d6:2f:23:e9:42:55:7c:1f:3a:ea:23:
83:c3:d1:3a:9b:ad:17:fc:91:07:1e:6c:bc:c0:12:69:cc:d9:
42:2e:4a:40:12:6b:67:f3:4d:5f:27:0e:3c:9e:13:35:e9:39:
30:12:f8:b7:45:88:2e:5e:21:ca:6a:e5:6d:4d:ef:e3:ae:64:
2d:e2:c9:d0:80:ca:d6:66:aa:93:69:0a:44:a5:b5:d5:c3:e7:
22:68:05:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:03:45 2026 by rpki-client