Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
File: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft (raw, json)
Hash identifier: 789JdnLvyJNoDX0hUpaicrjg5nurjVFDyx8C8XRDcks=
Subject key identifier: 49:19:BC:D1:63:91:17:81:0A:DB:1B:5F:88:98:B6:B7:17:75:0E:7E
Authority key identifier: E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
Certificate issuer: /CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Certificate serial: 01A0DA283726566D59575A129B10A41BF830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
Manifest number: 14D3
Signing time: Fri 25 Sep 2026 20:01:03 +0000
Manifest this update: Fri 25 Sep 2026 20:01:03 +0000
Manifest next update: Sat 26 Sep 2026 20:01:03 +0000
Files and hashes: 1: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl (hash: 0wf7SxpoVhIF1qxnWPb978i/YqexVo1lEBsLZTtt2Y4=)
2: H8G6D-Wk6u8Ak866YQFvElddI-c.roa (hash: PEnd5yN8T5n1W+yxVyKPvkVNjUPkgKs3BkeHGhdDjdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:37:26:56:6d:59:57:5a:12:9b:10:a4:1b:f8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Validity
Not Before: Sep 25 20:01:03 2026 GMT
Not After : Sep 26 20:01:03 2026 GMT
Subject: CN=4919bcd1639117810adb1b5f8898b6b717750e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:66:d3:75:f6:e2:c8:0f:cb:bb:d0:fd:c6:
8a:64:6c:0b:22:6c:56:53:ba:6c:65:21:f0:5d:69:
23:18:e0:49:c0:16:35:5c:7a:8b:83:53:f8:dc:69:
08:0c:bd:73:e7:83:e6:80:57:6d:6a:56:ab:fb:97:
c3:0e:65:17:8c:84:fa:d5:b9:d9:4f:9a:64:b2:5c:
f3:15:70:fa:88:5a:3b:66:bd:29:96:85:34:e1:f7:
b8:8b:64:ca:e4:20:98:b5:5c:c3:6a:54:04:35:9a:
67:2d:ff:42:c0:97:e7:a6:07:18:e5:4f:e3:19:b3:
78:d5:5f:05:f9:6a:07:d9:53:42:75:61:89:0b:46:
9a:76:e5:cb:12:63:3b:4d:47:b4:cb:7b:9e:16:71:
10:70:85:e9:c0:5d:b4:d8:e9:04:e6:6b:f4:85:30:
c1:cb:45:08:44:8c:05:10:8b:a7:0b:c0:a1:a7:cb:
39:87:52:76:5a:09:f3:56:62:22:e5:4e:38:53:2b:
1f:0b:9d:7d:64:a2:af:c9:f5:63:f6:40:f2:83:33:
88:78:a6:ef:ac:5d:2b:f4:74:8e:65:7c:df:76:21:
eb:fc:fd:16:4a:2e:1a:ee:57:dd:95:80:fe:d1:d1:
11:99:e1:42:29:23:f2:3f:4b:b8:fd:f7:b8:43:7d:
20:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:19:BC:D1:63:91:17:81:0A:DB:1B:5F:88:98:B6:B7:17:75:0E:7E
X509v3 Authority Key Identifier:
keyid:E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:28:7f:a9:97:cc:67:99:20:ed:b5:55:e9:10:a9:88:8c:04:
fb:15:68:76:39:82:be:7d:20:f4:ec:cd:dd:99:82:1d:f4:f3:
29:1b:2d:05:4c:47:43:11:ed:c2:00:34:53:8c:a1:95:bd:a6:
d9:9d:72:ca:ad:38:b0:00:03:4d:78:ed:a8:28:09:62:1b:b5:
ab:5b:49:0e:7a:3e:0a:ea:2d:5d:f9:3d:a5:fb:09:b6:20:13:
b6:0b:90:fd:f3:46:04:a4:cf:75:f9:5a:b7:c7:74:9b:ec:24:
f0:8b:28:53:d6:fd:c2:dd:0f:88:87:c3:a7:dd:df:b4:77:5c:
5d:aa:d7:65:6f:df:42:0c:89:b6:a8:52:61:0a:00:ee:69:86:
a1:48:85:bb:d5:bc:1b:74:cf:c3:4e:9e:d7:86:73:8f:4e:f3:
db:07:83:86:76:74:a7:29:24:b6:21:d6:14:81:8c:24:71:78:
f0:f5:eb:bb:f7:c5:8b:b9:6d:bb:7e:ad:1d:32:1f:12:db:b4:
fa:cd:26:90:2f:47:1c:f6:36:85:2a:dc:fc:11:65:11:07:94:
53:94:78:0e:17:b7:48:cf:9e:37:8d:44:1c:6c:53:3c:a1:d4:
8f:9c:7e:32:90:37:1a:09:22:34:24:27:27:e7:f7:ec:4a:72:
bd:fb:be:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:02:54 2026 by rpki-client