Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/51d177-32c7-494b-a470-1b189a50658e/1/_c4S2VwEZFSQOnsqViidt5FjWm0.mft
File: _c4S2VwEZFSQOnsqViidt5FjWm0.mft (raw, json)
Hash identifier: 8QgIO25MCRriKRNFfTiYIYOsFDPQ2twCSDihSIlNEmA=
Subject key identifier: C6:D1:97:0D:FF:DC:C0:BF:34:B1:1C:E6:A4:AE:75:B8:EC:5F:12:D9
Authority key identifier: FD:CE:12:D9:5C:04:64:54:90:3A:7B:2A:56:28:9D:B7:91:63:5A:6D
Certificate issuer: /CN=fdce12d95c046454903a7b2a56289db791635a6d
Certificate serial: 01A0DD975ABCB62FED6FD7381EEC6F646528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_c4S2VwEZFSQOnsqViidt5FjWm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/51d177-32c7-494b-a470-1b189a50658e/1/_c4S2VwEZFSQOnsqViidt5FjWm0.mft
Manifest number: 3E
Signing time: Sat 26 Sep 2026 12:01:18 +0000
Manifest this update: Sat 26 Sep 2026 12:01:18 +0000
Manifest next update: Sun 27 Sep 2026 12:01:18 +0000
Files and hashes: 1: _c4S2VwEZFSQOnsqViidt5FjWm0.crl (hash: lAGwgMfVsvE5jwZ1pGKW4YGVn2nK/HHu1YL3KqGs/jA=)
2: odwPZDNuXyDgnLpxFjQripVtxTU.asa (hash: igJaENyyF56dOLL+KkaJi4krAn2njacTd33CsRM20MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/51d177-32c7-494b-a470-1b189a50658e/1/_c4S2VwEZFSQOnsqViidt5FjWm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/51d177-32c7-494b-a470-1b189a50658e/1/_c4S2VwEZFSQOnsqViidt5FjWm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_c4S2VwEZFSQOnsqViidt5FjWm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:5a:bc:b6:2f:ed:6f:d7:38:1e:ec:6f:64:65:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdce12d95c046454903a7b2a56289db791635a6d
Validity
Not Before: Sep 26 12:01:18 2026 GMT
Not After : Sep 27 12:01:18 2026 GMT
Subject: CN=c6d1970dffdcc0bf34b11ce6a4ae75b8ec5f12d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:00:7d:99:e4:ba:01:68:ff:83:6e:c4:28:5a:
33:a2:05:9e:ae:4b:35:b2:de:93:d7:df:90:45:49:
14:20:4d:4a:59:f0:f3:23:3c:50:c8:b4:80:eb:09:
17:9a:82:e9:90:00:f2:e4:5f:bf:5d:6c:a7:e5:44:
3c:5e:67:e2:88:0f:bd:78:48:8d:6d:d8:e8:01:72:
da:58:85:3a:91:73:49:06:9b:df:c8:9d:f5:3d:ce:
37:67:08:f3:6d:4c:20:d4:1a:da:29:85:ab:91:5c:
0c:46:55:89:78:f5:85:13:4e:5e:7a:e2:76:28:37:
31:9d:0d:f6:48:81:38:a3:6f:12:90:f0:00:4b:7e:
80:22:d2:7e:5d:8a:6a:f0:31:4a:03:56:e4:aa:fb:
d7:3d:1f:ca:79:8a:1b:bc:3f:ea:cf:86:82:72:fb:
66:4d:16:bf:2e:87:4d:96:05:42:88:4f:2d:12:d5:
fa:64:51:ef:63:9c:00:c5:b0:0b:f4:12:0e:7c:16:
82:0d:a7:0d:96:11:f3:71:1f:61:c6:cb:1c:e8:a0:
20:b6:67:c4:fd:78:83:79:fc:43:2a:7c:b8:7b:ae:
cf:fb:82:98:3b:33:84:11:12:11:15:c4:9f:d2:5e:
fd:f5:5d:f0:3c:6e:ad:dd:41:e6:88:79:41:08:4d:
bf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D1:97:0D:FF:DC:C0:BF:34:B1:1C:E6:A4:AE:75:B8:EC:5F:12:D9
X509v3 Authority Key Identifier:
keyid:FD:CE:12:D9:5C:04:64:54:90:3A:7B:2A:56:28:9D:B7:91:63:5A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_c4S2VwEZFSQOnsqViidt5FjWm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/51d177-32c7-494b-a470-1b189a50658e/1/_c4S2VwEZFSQOnsqViidt5FjWm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/51d177-32c7-494b-a470-1b189a50658e/1/_c4S2VwEZFSQOnsqViidt5FjWm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:39:45:78:5c:b6:bb:66:be:df:6a:8c:4c:51:e0:54:03:94:
dc:f8:9b:a8:bb:6d:cc:c8:25:07:a1:23:14:72:41:6c:de:3d:
10:e5:f7:b2:e7:f6:b3:92:ad:ca:26:72:77:3b:1f:ae:5f:31:
ac:e8:cf:df:5c:68:7d:04:96:51:30:9e:84:db:24:04:d6:5a:
70:cd:d2:32:4d:7b:c1:f9:33:df:b8:5f:16:50:7a:da:fc:23:
83:93:b8:8a:bd:3e:84:7e:81:de:43:2e:a2:fd:2c:35:67:1a:
97:86:3c:eb:82:54:fb:95:75:e9:09:8f:2a:7d:2e:5b:31:eb:
40:b9:a4:66:16:cf:16:10:31:7f:8d:95:0a:8b:b6:47:db:cc:
4b:8e:7b:19:4a:b6:b7:40:00:2a:42:85:04:d8:cc:96:39:70:
1b:f1:7f:87:31:ae:2e:89:38:68:4c:e2:90:39:57:25:82:a6:
24:20:6e:00:b6:da:f9:e9:b3:3e:9b:54:17:73:5e:e5:e4:a2:
14:37:4d:8c:df:37:0f:6f:5c:f3:28:b0:4b:36:a0:bc:da:d4:
3f:99:65:1f:6e:78:4c:cf:ac:bc:cc:da:7b:69:9e:79:85:75:
5d:43:33:04:18:37:1f:40:b4:02:d2:d9:75:36:62:dc:44:c4:
47:04:33:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:50:19 2026 by rpki-client