Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
File: 4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft (raw, json)
Hash identifier: Ai1BOWrLLaQaigajog03XB/SC4ORxRxzoekyiDOMx5c=
Subject key identifier: EE:CC:EC:9A:09:26:A0:C1:DD:FA:8D:01:E8:53:8F:E0:07:D7:FC:50
Authority key identifier: E3:10:6A:C3:EA:76:0B:2D:02:42:A9:EF:BA:2C:21:16:B6:26:F8:24
Certificate issuer: /CN=e3106ac3ea760b2d0242a9efba2c2116b626f824
Certificate serial: 01A1DE39A555E2D8F96C1D5861801E3AC020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
Manifest number: 0427
Signing time: Sun 15 Nov 2026 08:01:22 +0000
Manifest this update: Sun 15 Nov 2026 08:01:22 +0000
Manifest next update: Mon 16 Nov 2026 08:01:22 +0000
Files and hashes: 1: 4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.crl (hash: Qx2teJhrxKeSGerkHNQNljCh/qjh5CIKjNvZZaniRaY=)
2: 4ypktVvAzfNV9xVobcyFTIbQDTY.roa (hash: gbFNuHiI6Q6GwECOCQ38Wty+z3M8uTYhivyQMeIFbAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:a5:55:e2:d8:f9:6c:1d:58:61:80:1e:3a:c0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3106ac3ea760b2d0242a9efba2c2116b626f824
Validity
Not Before: Nov 15 08:01:22 2026 GMT
Not After : Nov 16 08:01:22 2026 GMT
Subject: CN=eeccec9a0926a0c1ddfa8d01e8538fe007d7fc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:26:05:aa:b6:9f:d5:1c:6b:06:48:ba:33:d6:
0a:16:0b:10:e0:9e:81:54:c1:d9:c5:2f:54:c4:0f:
06:34:05:73:58:32:1d:47:e0:13:9e:6a:47:e2:60:
fb:74:60:90:8b:cb:d4:54:01:b8:69:23:2e:7a:a4:
24:ea:50:cb:91:58:9a:49:b1:43:5c:44:dd:28:46:
c4:1a:98:0f:dc:02:c7:74:84:8b:a2:45:51:17:36:
83:1c:06:10:b8:53:96:22:4f:22:98:36:20:1c:93:
b4:14:69:c9:c0:3c:13:bc:3f:41:ca:39:05:d8:37:
4d:c7:2e:46:28:89:d1:22:87:86:99:49:b9:ba:71:
11:38:27:c8:28:42:33:e9:79:3a:0b:53:05:4d:51:
41:13:05:e0:df:7a:67:c3:f4:1d:d4:2e:c4:20:8d:
c0:e5:bd:8c:29:a7:81:53:52:97:61:3c:c4:83:99:
49:fe:91:89:0a:ed:fb:d3:02:60:bc:e6:fa:3a:78:
d2:94:d1:1e:8f:33:35:85:51:5b:0a:f0:6a:35:85:
8a:c0:b4:4c:ab:97:18:2e:54:4d:f6:b7:bf:d1:1f:
13:66:7f:79:f1:10:f5:7b:01:23:ad:23:eb:07:e5:
bc:fb:de:08:c4:9c:0a:68:9f:f0:a8:8f:c1:68:3f:
a3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CC:EC:9A:09:26:A0:C1:DD:FA:8D:01:E8:53:8F:E0:07:D7:FC:50
X509v3 Authority Key Identifier:
keyid:E3:10:6A:C3:EA:76:0B:2D:02:42:A9:EF:BA:2C:21:16:B6:26:F8:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f5:1f:3b:73:fe:80:86:4e:16:83:9e:58:16:5b:dd:f9:a5:
3b:2b:70:ec:20:78:81:43:ef:67:34:97:4c:f3:82:f4:2c:a5:
96:01:29:c2:a3:29:0b:4a:6d:a1:d1:00:bd:47:63:40:15:b5:
cc:cd:35:92:0f:df:df:b1:87:5d:5b:93:b0:c3:75:d1:a2:de:
a4:00:c9:e8:b0:5e:8f:95:25:54:ff:f4:b1:ac:4d:d3:06:dd:
36:0c:43:e0:40:30:6d:d1:29:7f:5c:06:3c:8a:ef:ef:10:f5:
9e:bf:3c:13:d0:b5:07:cd:ec:1f:71:3c:0f:c7:17:55:1d:76:
24:fe:0c:f6:1d:37:56:54:b0:1f:70:6e:f4:15:ed:0f:7b:20:
ee:4a:5f:ac:ad:9c:1f:8c:cc:5a:bc:00:f9:d8:5a:ad:63:c2:
c7:64:83:e3:30:a1:4b:50:15:70:a9:2c:b6:db:d0:97:35:40:
bd:85:fb:97:99:db:3d:6d:d6:d8:07:24:e8:9a:44:fa:5d:54:
68:2a:a2:1b:55:ef:15:5f:86:02:69:13:4a:59:de:76:7d:b3:
ca:03:90:8e:2f:e9:9b:c7:93:de:90:34:54:7b:b7:ae:54:e6:
6c:5a:75:f5:02:76:24:da:15:91:4c:2e:12:e2:74:ba:b2:6f:
9b:51:b1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:20:02 2026 by rpki-client