Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
File: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json)
Hash identifier: oyvUBszVemhlLWGcddTJpVhrQMqZF887k4GfobaMTJQ=
Subject key identifier: F1:D8:68:08:69:75:AA:7A:EE:F3:CC:2A:76:BE:AF:5E:10:72:55:CE
Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
Certificate issuer: /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Certificate serial: 01A0D2DEFF1A33B3AA2DE0E4EAA89B5F0D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
Manifest number: 0E9A
Signing time: Thu 24 Sep 2026 10:03:44 +0000
Manifest this update: Thu 24 Sep 2026 10:03:44 +0000
Manifest next update: Fri 25 Sep 2026 10:03:44 +0000
Files and hashes: 1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: YITQ8H0jnjzOPtQZsAhSkYa/hHMHaWF5l7tBlTjnAhQ=)
2: xtYobtIx2W6_g9SOOJPQhPICYpQ.roa (hash: mB2srtxC3TvgB8CL9USorDjZQ7e+W7OquH6xXCy/qr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:ff:1a:33:b3:aa:2d:e0:e4:ea:a8:9b:5f:0d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Validity
Not Before: Sep 24 10:03:44 2026 GMT
Not After : Sep 25 10:03:44 2026 GMT
Subject: CN=f1d868086975aa7aeef3cc2a76beaf5e107255ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:b0:89:e0:24:13:3f:8e:8d:3a:9b:dd:93:
7c:d6:fb:eb:4b:6d:fb:df:94:90:de:a7:5e:5e:80:
a2:ed:49:91:cb:41:06:30:d0:5a:37:19:5f:1d:a6:
27:6f:40:f0:e3:28:6f:e0:73:c4:4d:cf:41:4c:4f:
11:82:d1:86:2d:88:42:58:69:c3:f6:40:ee:72:d1:
4a:b2:a8:8d:4d:37:03:29:0e:ad:56:ba:0c:7c:e6:
8b:0f:ce:63:92:ba:32:89:b3:19:98:b2:2e:23:40:
e6:ba:7e:5f:92:a8:4f:90:26:09:e9:c4:b7:78:f4:
5b:55:c0:8e:fa:90:93:b3:b1:f7:75:85:11:dd:17:
e1:5e:4d:6d:b7:9a:04:9a:a6:ad:87:ea:7a:64:1d:
a0:1d:78:d0:c2:db:17:78:1b:14:8b:8a:8e:39:d1:
0f:f8:e0:95:76:00:53:14:0d:74:73:78:75:61:f4:
d6:21:35:5b:89:ea:ac:1a:33:d1:fc:2f:1f:2e:d2:
de:e9:78:d1:c8:1c:b5:3e:4d:c9:8b:e0:da:c1:af:
70:92:da:c9:17:ec:88:81:6c:d3:9d:4d:00:96:89:
29:6d:b4:24:10:cc:f5:5e:97:6b:d4:e1:43:b8:31:
95:4a:6a:03:ba:d6:b5:13:d5:94:5a:b9:cd:52:7b:
61:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D8:68:08:69:75:AA:7A:EE:F3:CC:2A:76:BE:AF:5E:10:72:55:CE
X509v3 Authority Key Identifier:
keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:93:c6:5d:ee:a0:c8:de:61:75:87:16:c3:29:92:40:06:aa:
e6:cd:12:68:2b:e6:fa:0c:e0:54:c9:8c:e8:6c:d0:11:b0:14:
3f:9c:25:ea:da:a3:9f:a1:03:9b:43:f4:66:24:0d:99:5c:e0:
bc:63:b3:75:03:2b:2d:83:e3:b5:ab:31:fe:95:15:15:65:27:
53:8c:ac:47:ce:a4:e2:e0:a1:6d:7b:53:70:28:70:7e:2a:ee:
7f:0c:63:b8:31:95:72:67:4c:4c:02:2d:bb:24:bc:3f:27:4e:
bf:2d:49:fe:3f:ba:0e:2c:f1:3a:45:8e:f3:cc:77:84:a4:a4:
36:38:12:e8:2d:1d:51:bb:64:eb:e5:21:85:d0:e6:80:af:0c:
70:f7:1d:b7:67:e8:39:b5:78:86:32:85:ce:55:34:13:d7:b9:
94:cd:6b:4a:2d:af:b8:43:d0:f2:ea:b9:54:93:5b:6b:7f:38:
43:dc:f5:09:9d:59:dd:81:fc:18:00:02:94:f0:54:e3:04:71:
f9:0b:81:f0:78:8a:81:63:42:9d:54:5f:f6:26:02:71:64:81:
84:a5:3f:2f:2e:cf:eb:c7:17:09:79:6d:1f:d0:7c:a3:39:40:
5c:f5:1a:a9:03:cf:ed:0b:d4:2a:7d:16:87:8d:ca:80:a5:9c:
d9:8c:82:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:39:46 2026 by rpki-client