Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
File: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft (raw, json)
Hash identifier: r2HhB+kujnNfgHISHch6ESfstXFdKFlRn0FhEKk2+E8=
Subject key identifier: E1:E9:23:6E:0E:26:41:73:F7:7A:6B:BC:DF:26:A5:1F:E5:A5:A3:D2
Authority key identifier: E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
Certificate issuer: /CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Certificate serial: 01A0DB03E60AD3249FFD59D5EDE23C5603A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
Manifest number: 06AF
Signing time: Sat 26 Sep 2026 00:01:00 +0000
Manifest this update: Sat 26 Sep 2026 00:01:00 +0000
Manifest next update: Sun 27 Sep 2026 00:01:00 +0000
Files and hashes: 1: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl (hash: PBjaRhVu8IcJURpGMPkxRIiOo8sQbxkShZRKuY7Yc2U=)
2: nm8pFEpWXGPLmBGfEmff0mnlzsw.roa (hash: +n+qMQpld1QaCfNSSKf78RqXBTGK3eec/GzY9ilFD5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:03:e6:0a:d3:24:9f:fd:59:d5:ed:e2:3c:56:03:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Validity
Not Before: Sep 26 00:01:00 2026 GMT
Not After : Sep 27 00:01:00 2026 GMT
Subject: CN=e1e9236e0e264173f77a6bbcdf26a51fe5a5a3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:7f:7b:87:65:01:d6:ce:72:5d:0b:16:7c:
1e:12:56:5e:87:34:33:96:d0:54:aa:75:cd:21:d4:
46:a2:a7:cf:bb:59:b7:87:d6:6e:da:5b:3d:31:31:
f6:2d:00:2a:fd:ea:3d:36:8f:ef:f2:4c:7d:52:2d:
b7:a8:cc:47:db:83:6d:30:29:85:44:d2:d7:6c:eb:
a7:6a:c5:2e:4a:35:d0:f5:3c:1d:35:7e:9f:7d:fb:
b8:60:c8:01:7a:7b:03:8a:be:f8:43:d5:f2:4a:a7:
11:41:96:f5:51:ea:66:50:8b:3f:d1:df:16:11:d5:
d2:53:5f:99:72:01:5b:3c:3f:05:cb:35:8e:06:35:
ca:25:7d:f6:21:21:28:02:10:51:cd:59:ab:57:dd:
74:bb:38:a2:cc:9a:9d:4b:58:21:d8:a2:90:5c:51:
62:6d:5d:c2:77:f8:77:2a:de:8a:9a:f0:f2:53:c0:
5a:ed:1f:1e:12:81:cf:41:91:34:3a:34:b3:eb:2f:
00:d7:37:80:b6:14:d2:e1:d6:af:aa:03:06:33:21:
17:0e:91:8b:ec:ec:8e:11:41:df:08:90:86:e5:d5:
65:2c:c2:91:08:34:8e:33:3e:ea:81:e8:1b:1d:3b:
b3:b5:63:9b:43:11:64:9c:28:d8:f6:dc:1f:4e:29:
33:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E9:23:6E:0E:26:41:73:F7:7A:6B:BC:DF:26:A5:1F:E5:A5:A3:D2
X509v3 Authority Key Identifier:
keyid:E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:33:3e:99:36:24:48:7e:48:7a:84:71:3d:63:2f:94:6b:c8:
cc:07:a0:dc:af:50:94:da:55:4c:b2:14:37:cd:6f:31:4e:40:
38:57:44:0e:49:69:a9:35:f9:dc:a4:b4:d0:50:b1:1d:a6:44:
99:fa:8f:ee:67:07:4a:69:41:a9:6e:30:c5:88:12:95:17:d3:
0e:79:4a:bf:51:e9:6a:4e:9a:85:25:fb:dd:a3:a2:d8:d9:8e:
6e:a6:e0:f7:60:6b:bb:2d:d9:70:d6:0d:6c:4a:ec:4d:c0:ca:
31:ed:2c:3e:6c:bd:ac:0f:1d:14:48:b6:44:2a:68:76:ea:3e:
97:df:03:ec:a7:24:8f:22:d7:49:9f:44:58:3d:55:e0:16:9f:
22:38:ff:a5:fe:5c:78:58:c1:e7:4d:b4:30:21:42:c6:d7:e6:
9f:65:90:74:47:01:54:9f:0b:de:56:ce:4f:2c:22:59:02:e2:
79:e1:1c:43:9a:1b:7f:c8:dc:b1:5b:84:41:09:28:c4:a8:7c:
61:d8:d2:5e:b4:c8:00:ed:3b:24:39:68:64:74:48:e6:8e:8a:
43:44:7e:45:4c:a8:fd:d7:fe:7a:26:6e:d7:47:f0:f4:0e:2d:
93:c3:be:98:6d:a0:dc:9a:8d:84:03:3b:ad:de:dd:d6:95:73:
bc:87:a9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:56:11 2026 by rpki-client