Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.mft
File: MNs1tD7r7J26qD7xjrHv8CPxge0.mft (raw, json)
Hash identifier: f7FXUsAQ93hMuYJSUS0u1b0yGtZbECGM9lq70gAdSmk=
Subject key identifier: 84:54:83:18:66:20:05:C4:31:D3:F6:07:BD:15:FB:6A:43:8D:F0:62
Authority key identifier: 30:DB:35:B4:3E:EB:EC:9D:BA:A8:3E:F1:8E:B1:EF:F0:23:F1:81:ED
Certificate issuer: /CN=30db35b43eebec9dbaa83ef18eb1eff023f181ed
Certificate serial: 01A0D20045249EE512E5D74A13D3ABDA1C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNs1tD7r7J26qD7xjrHv8CPxge0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.mft
Manifest number: 4A
Signing time: Thu 24 Sep 2026 06:00:28 +0000
Manifest this update: Thu 24 Sep 2026 06:00:28 +0000
Manifest next update: Fri 25 Sep 2026 06:00:28 +0000
Files and hashes: 1: GqzdFNSiDk6sI52-YP2ccD92cJI.roa (hash: drkoNBSBFH+OuC0Inyg8xVO+iSjJR9Gj4j9T03Dwk58=)
2: HVlWlVCtHJkHXU7m7ctBNao19IY.roa (hash: MMNvWbZm/oY3pLd0tkVHwkbv4AyKlSoDKH7h4UkUpas=)
3: MNs1tD7r7J26qD7xjrHv8CPxge0.crl (hash: FlRoCuOCdFU+Rkl/NTvqFj+EdajPb9wLf34N7fruZFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNs1tD7r7J26qD7xjrHv8CPxge0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:45:24:9e:e5:12:e5:d7:4a:13:d3:ab:da:1c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30db35b43eebec9dbaa83ef18eb1eff023f181ed
Validity
Not Before: Sep 24 06:00:28 2026 GMT
Not After : Sep 25 06:00:28 2026 GMT
Subject: CN=84548318662005c431d3f607bd15fb6a438df062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:4b:e0:7e:09:99:19:b4:84:72:1d:13:40:
25:57:a4:8a:4e:c2:06:af:a5:07:94:3a:c0:98:0c:
ce:b1:29:64:28:11:61:83:d3:fd:b9:ea:3a:ca:fd:
c2:66:be:0b:31:5d:b5:d0:fd:cf:d9:32:06:18:4b:
2a:bb:e2:c0:95:b8:12:3c:7e:48:ee:eb:ba:9d:bb:
77:94:09:73:af:92:76:a8:24:14:d2:30:20:f7:03:
97:e3:4c:8e:95:a5:e6:4e:92:33:b0:0f:a2:d9:f5:
8b:50:62:da:da:f1:65:7c:19:8b:67:c8:ba:0e:c1:
fb:7e:38:6d:84:cc:ab:39:a4:07:e3:17:d6:4d:b7:
0a:87:87:77:f1:f2:81:56:eb:e1:17:61:3d:d3:70:
6c:46:b1:f4:34:5f:41:ee:a6:0f:9a:e8:af:ac:b7:
45:7f:59:80:14:b5:d2:cb:95:57:f5:f2:a1:9c:42:
a2:02:9b:75:4b:b4:9d:db:0d:59:86:54:f6:e8:88:
15:54:b8:ea:56:b3:79:fb:c1:3d:64:28:b7:f1:dd:
8c:7a:1c:73:67:d9:cb:03:83:2a:cc:05:7f:93:3c:
5e:e3:52:82:f3:59:45:fc:25:61:26:2f:fd:05:5a:
f8:94:bd:5f:c6:9d:8f:66:ca:03:df:3f:fa:05:92:
a8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:54:83:18:66:20:05:C4:31:D3:F6:07:BD:15:FB:6A:43:8D:F0:62
X509v3 Authority Key Identifier:
keyid:30:DB:35:B4:3E:EB:EC:9D:BA:A8:3E:F1:8E:B1:EF:F0:23:F1:81:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNs1tD7r7J26qD7xjrHv8CPxge0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9f:06:49:da:8f:06:1f:f3:bc:48:3d:b7:11:36:97:61:89:
eb:73:00:02:33:ca:d1:2c:05:1a:01:e2:34:be:0a:ac:dc:6a:
29:fd:eb:d6:71:e5:80:e0:85:39:f4:2a:6c:0b:0c:21:6b:1e:
75:fb:5e:7d:74:9a:cc:e6:9e:57:87:c3:28:90:d1:2e:ec:11:
d5:99:82:40:7c:43:14:be:c6:80:fc:21:bf:9d:dc:91:cd:27:
78:96:48:99:90:e7:bb:4b:28:0e:38:db:29:12:e5:c6:07:eb:
26:2a:2e:15:11:1a:75:4f:19:97:6e:f4:55:af:8b:ba:0b:ae:
37:0e:91:66:ff:df:4f:50:f1:d2:f1:67:0c:e3:de:07:29:68:
e8:bb:32:28:b8:95:eb:84:75:b9:03:52:4f:70:e7:50:6a:e0:
d7:ec:cb:a0:50:c7:15:4a:d1:ae:a9:c6:f5:29:22:ec:dd:50:
c4:1a:1a:fa:49:1f:d3:4f:b2:c4:3e:53:9c:27:95:76:8f:c0:
78:2f:ba:ed:46:23:70:5f:77:cc:5a:e3:8c:50:0c:0f:58:2a:
8b:f9:80:9b:72:b7:98:e5:a0:b5:67:ce:b6:ed:64:ff:da:fd:
5c:67:d6:3f:1b:aa:6a:99:a1:a1:5d:76:67:c7:5c:93:e7:ce:
83:bc:5c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:02:30 2026 by rpki-client