Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.mft
File: 4zaILE0Yw5Ujt8KWcunS4P2Nhuk.mft (raw, json)
Hash identifier: NkNx3KFVw6HIrv5bbFCeZDQiR7j+RkErGnwbchpJvng=
Subject key identifier: 2D:58:C8:02:ED:4E:06:1C:34:23:FD:51:75:55:37:17:6B:FF:00:DE
Authority key identifier: E3:36:88:2C:4D:18:C3:95:23:B7:C2:96:72:E9:D2:E0:FD:8D:86:E9
Certificate issuer: /CN=e336882c4d18c39523b7c29672e9d2e0fd8d86e9
Certificate serial: 01A0D20068BB496435BF6B79C1BF9EE86F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.mft
Manifest number: E6
Signing time: Thu 24 Sep 2026 06:00:37 +0000
Manifest this update: Thu 24 Sep 2026 06:00:37 +0000
Manifest next update: Fri 25 Sep 2026 06:00:37 +0000
Files and hashes: 1: 4zaILE0Yw5Ujt8KWcunS4P2Nhuk.crl (hash: xnMOg4iSvzi2BSs+ytdpGDlDjXti3UREhnmlon6KJZ4=)
2: HOa--BbyyWw8Rnz_PAkB1Aps5cM.roa (hash: ndFzc/hujYQnkxG1NYpbo75mbyjjpHmzYedQL970LIc=)
3: qwDOnP6AdU_tAQtZsLWw5wfBxDo.roa (hash: kQx1jz2DL7OQVFnj/XJkVTFzESJhS+h25gCtn8yqidk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:68:bb:49:64:35:bf:6b:79:c1:bf:9e:e8:6f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e336882c4d18c39523b7c29672e9d2e0fd8d86e9
Validity
Not Before: Sep 24 06:00:37 2026 GMT
Not After : Sep 25 06:00:37 2026 GMT
Subject: CN=2d58c802ed4e061c3423fd51755537176bff00de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:f4:d2:7a:e5:e7:1c:0a:22:fb:08:0f:16:
3e:ce:91:07:ea:aa:a8:a2:a4:03:06:50:11:cb:1d:
cf:36:63:5e:65:c5:20:ba:42:b1:a3:35:48:9d:ba:
48:f5:0a:ec:c8:d8:83:a6:aa:f9:f2:c9:59:27:16:
ce:c4:e7:37:ef:1c:1e:67:4d:16:59:0c:78:50:3d:
45:22:3d:68:d3:20:e0:e0:5e:f5:a5:72:de:72:a5:
fa:a2:26:1c:42:d3:88:79:8d:c1:99:7c:9f:6e:22:
44:9d:96:22:91:14:5d:84:8e:b2:ab:8d:e2:f4:96:
28:71:c9:49:30:65:39:51:a3:36:ca:b9:a7:78:b1:
b5:e6:76:67:e6:88:24:bb:f4:c1:8d:d2:e1:ff:8c:
34:d8:57:7b:28:f4:d7:f1:81:67:67:5c:d7:22:09:
1e:b0:0d:b4:0b:2d:a9:75:bb:28:a4:1e:ad:4f:0f:
45:11:8d:8e:1d:57:b2:de:19:91:bc:57:69:ce:29:
b8:73:d9:f3:31:82:46:8d:94:a8:1b:aa:8b:6d:74:
3c:d4:22:d8:72:0b:d0:6f:63:f3:53:41:89:20:13:
cb:66:3f:af:d4:1e:c5:b5:ec:f4:71:63:47:f8:0e:
db:f0:f8:c4:33:8c:40:26:3b:39:7e:29:c9:b6:9e:
16:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:58:C8:02:ED:4E:06:1C:34:23:FD:51:75:55:37:17:6B:FF:00:DE
X509v3 Authority Key Identifier:
keyid:E3:36:88:2C:4D:18:C3:95:23:B7:C2:96:72:E9:D2:E0:FD:8D:86:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:10:ea:94:af:39:e9:51:71:a7:02:1c:b6:9f:35:7f:30:23:
ec:d8:0b:e6:ea:56:64:aa:e7:1c:da:c5:36:74:65:0c:d9:9e:
ae:2b:ee:82:61:e9:58:35:66:97:70:6c:f4:7c:0f:3d:cb:1f:
36:8c:23:19:d2:5d:ff:74:ba:83:06:fb:4a:02:c0:05:3b:be:
a5:51:50:3e:8b:7c:3b:6f:b2:9d:1a:94:d6:60:fa:47:af:28:
a0:30:34:fb:72:71:38:6a:93:f5:ff:d8:91:7e:3d:2c:03:2e:
67:44:78:d4:61:5d:bc:97:bb:f6:26:46:e3:ab:ba:24:06:22:
99:67:d1:2e:12:2a:72:4b:5e:0e:4f:63:89:ae:b3:60:52:66:
fc:9f:d4:54:bc:e8:54:90:58:d4:e5:24:ad:74:c0:0b:61:18:
cc:af:c3:2b:6e:8e:06:56:d6:58:c3:1b:44:fc:d4:33:05:e4:
33:91:2d:d1:10:1e:be:57:6a:b9:d0:bb:69:72:88:cb:37:f3:
c5:1e:be:20:1a:5c:95:9b:12:ad:c8:d2:d2:e6:b3:84:78:c3:
ad:e0:d7:af:0a:34:6c:e2:23:ac:25:84:f9:b4:97:4b:b0:c0:
07:95:d1:c9:00:0a:b4:06:d1:f4:b2:5e:93:b2:dd:5e:51:45:
f9:05:82:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:06:22 2026 by rpki-client