Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
File: 4crcikIcHyLx4pBMz9u87F2-GxE.mft (raw, json)
Hash identifier: /wZISGaDRR5VvE3692i70I9TvdWLJzRgPXIDtS/iRls=
Subject key identifier: 1E:E5:22:E7:54:2D:BD:16:17:E7:0A:EA:9C:AE:B5:67:74:A5:1F:6F
Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
Certificate issuer: /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Certificate serial: 01A0E32B4B55E3C4D7F1282ADEF7BB0CDEEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
Manifest number: 1A81
Signing time: Sun 27 Sep 2026 14:01:00 +0000
Manifest this update: Sun 27 Sep 2026 14:01:00 +0000
Manifest next update: Mon 28 Sep 2026 14:01:00 +0000
Files and hashes: 1: 4crcikIcHyLx4pBMz9u87F2-GxE.crl (hash: j1pZ00XITyrQDqQm8Air3RCkrvrJC0/+De0meyEiz6s=)
2: 77se7qJXk55SeOZEcLQG-rbxsr8.roa (hash: OQDmgPfY6EApBYAHydMcNAqVcKBYMQ02TGKDG7szY/E=)
3: BpG08GkHB-QsJpL9txO9DOn8Gqo.roa (hash: qk9A6y/PVuHMQUNTyaAzAHkiLugBm0Npe2/tYgpiKkw=)
4: N6Vwe2SbWysQ4c9awY4ppmCgM8g.roa (hash: LqroIaOJcyhk3jhpQNNYhhn2nTyn7BAqMOWhnDZAcrY=)
5: S3wAJAuRML5Do5HIcNyZi2_zrRU.roa (hash: AgpqUaFG2QBQhnJTxXP4ibifKNaKINVjwUQ+PyAUUno=)
6: mtJz-hUI0Cx0jLgkDLzYwDMbWdM.roa (hash: CKUhSDm/qBK/JCbTgbEQJEgA0HKSbKEajcNdo2qCwys=)
7: pYQ5IyUbzq5qvpxuz6__bErWTAk.roa (hash: EPZHqA+xkmohjRcec6HU5g8Eeu99YhgqZrcWYKO20oU=)
8: uZvBL7Adjps3YJPzPab2422Kfhw.roa (hash: jc1WIld0OO6y7I+8/9pDJkxR96M4dxWB/ebX7E2Vo1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:4b:55:e3:c4:d7:f1:28:2a:de:f7:bb:0c:de:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Validity
Not Before: Sep 27 14:01:00 2026 GMT
Not After : Sep 28 14:01:00 2026 GMT
Subject: CN=1ee522e7542dbd1617e70aea9caeb56774a51f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:75:a4:26:dd:b8:ec:6c:48:96:9a:bd:f2:e2:
40:1c:82:f3:20:a8:05:83:17:43:4f:4e:dd:42:82:
32:81:5a:fc:9d:65:a9:17:1d:5c:99:d1:bd:d4:b4:
d8:58:91:32:2c:b5:07:c5:82:be:b7:72:d9:6b:fb:
81:39:b3:75:83:19:fa:8f:f7:ba:fc:e1:d9:99:91:
c0:fd:2d:8e:9f:ab:d9:b3:a1:f9:ce:38:23:b1:5c:
44:7d:6c:28:c8:7f:54:9c:66:4f:9c:55:11:38:60:
b3:ef:ba:a3:ef:12:03:97:08:86:36:3a:d6:fe:fc:
dc:2c:f5:cd:b5:c7:e5:04:12:29:79:65:0e:5d:3d:
b9:9a:f8:f8:2d:eb:8b:58:57:91:b7:b1:52:2a:95:
17:d9:24:d5:30:07:94:87:d2:9e:2d:c8:02:c4:75:
4a:b5:28:f8:a3:0d:2a:95:53:bf:dd:ec:02:fb:b5:
e9:7c:0d:1b:b7:db:ab:c7:ed:86:20:72:67:17:af:
e3:9f:94:4a:dd:d1:9a:88:91:ab:7f:91:71:cd:ab:
b5:53:c8:00:70:db:69:f8:97:81:81:ac:36:81:43:
ee:65:0f:a2:3a:e2:b0:09:d3:c2:47:7f:c4:49:cf:
f0:5b:1c:74:bf:7e:c4:2c:b0:f5:e4:71:b1:71:44:
68:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E5:22:E7:54:2D:BD:16:17:E7:0A:EA:9C:AE:B5:67:74:A5:1F:6F
X509v3 Authority Key Identifier:
keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d3:78:a5:88:62:b1:52:e7:35:17:7b:13:c5:6d:0d:67:f8:
39:2a:5d:93:cd:0b:01:1d:66:63:81:4d:44:90:e6:13:8e:62:
f1:cf:56:f5:56:81:69:bd:e8:5b:0f:57:d4:56:ec:54:47:dc:
58:82:77:f8:15:ef:cc:d8:00:a2:e7:50:b3:5e:d9:26:43:2f:
41:b6:0a:02:bd:cf:0d:82:ec:e0:d6:96:ef:c4:b9:7f:57:b4:
97:8f:c3:24:af:87:0b:ae:ab:25:43:4b:74:ab:49:ca:b8:45:
05:78:7f:12:96:63:6b:cd:ce:9b:c0:ee:73:20:f4:64:36:96:
03:6e:47:0d:6b:69:d6:4f:62:57:58:b8:f0:d4:a3:fc:45:ab:
37:9b:1f:69:35:64:04:06:5c:98:44:fb:bf:97:67:8a:7c:46:
a5:27:93:64:72:07:a6:26:6f:f8:d2:8b:1f:95:06:76:92:03:
4c:dc:59:e7:35:3d:81:1c:94:d4:66:1b:91:dd:f0:db:96:ca:
57:1c:f7:15:9b:87:65:7a:a2:1f:ad:61:98:5a:30:e3:b4:a9:
11:50:d9:0b:1d:53:04:c6:af:79:9c:52:a6:5d:b2:36:6f:cd:
57:1a:63:cd:ce:89:29:fa:2f:36:27:69:c8:a4:81:8f:7c:fe:
5b:b8:d9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:29:50 2026 by rpki-client