Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
File: 4ddWkNOcgwGAs_VcSdFAoqBNORc.mft (raw, json)
Hash identifier: 9NPLtjZms0uPDVAQe1chtO8dTt/HAREW7zYElgNbaOY=
Subject key identifier: AF:00:4A:F3:31:F6:94:2B:F5:7B:6E:E7:89:C1:E8:68:9E:E4:BA:4B
Authority key identifier: E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
Certificate issuer: /CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Certificate serial: 01A0D15C02BE648DA5B3A02FC9C318691D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 03:01:03 +0000
Manifest this update: Thu 24 Sep 2026 03:01:03 +0000
Manifest next update: Fri 25 Sep 2026 03:01:03 +0000
Files and hashes: 1: 3VLJL7-f2gIaDHt9s5O08zvl02o.roa (hash: nvn//iDJID27yb0p4DmlRMNLDXzJBDmTCGYaGUQJ1lA=)
2: 4ddWkNOcgwGAs_VcSdFAoqBNORc.crl (hash: fWnWDIb5rQotY7F4HvAJilblt1qevKXlwwP6Y0LJ6Tw=)
3: AK-YlCPEVbLAZegzYkNrI96Oefg.roa (hash: TQp9SWZ90VsXFNcjm672V8NJs6N2oP9XQNZuCEin7So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5c:02:be:64:8d:a5:b3:a0:2f:c9:c3:18:69:1d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Validity
Not Before: Sep 24 03:01:03 2026 GMT
Not After : Sep 25 03:01:03 2026 GMT
Subject: CN=af004af331f6942bf57b6ee789c1e8689ee4ba4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:6e:e9:2e:64:72:43:c7:b8:39:d0:0f:66:
f5:70:66:a9:b9:4a:9f:02:37:fd:c0:7f:2d:49:70:
7d:af:5f:6e:81:31:9b:8b:83:dc:9b:4a:86:f0:57:
5e:f7:82:71:34:d8:8f:e3:30:63:80:ec:75:d9:2e:
8c:84:5b:b3:14:da:82:a9:ce:10:55:17:be:b1:78:
02:0c:42:40:be:e2:2f:bf:23:f1:0d:7c:7a:0f:f8:
5e:ed:b0:75:a8:7c:50:fe:6b:dd:27:6a:35:97:d7:
ab:e9:d1:fc:f5:b6:5a:32:fc:93:53:21:fb:f7:b8:
09:83:91:2b:4e:3b:0d:f1:c2:c7:d5:e2:b0:bc:3c:
18:32:63:9f:dc:52:30:a3:85:bc:df:58:04:1f:4c:
91:80:0a:ca:58:f1:7a:d6:95:55:f8:42:00:10:8f:
3f:61:42:64:68:87:68:33:6f:df:6a:91:e6:ae:24:
f6:19:f9:3e:ae:09:20:ab:c3:51:0d:2c:cf:f0:9d:
75:60:a2:91:5a:b2:43:83:04:9c:33:64:6d:26:66:
2e:7a:ba:0f:7b:07:d5:d2:33:88:71:30:a1:17:9c:
b8:f2:ea:09:f1:b5:b4:21:c3:82:f9:9c:f1:74:d4:
be:e0:63:63:89:7b:b7:90:61:d9:d3:10:19:cd:d3:
99:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:00:4A:F3:31:F6:94:2B:F5:7B:6E:E7:89:C1:E8:68:9E:E4:BA:4B
X509v3 Authority Key Identifier:
keyid:E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d2:e0:b4:c9:28:e3:43:fc:29:a4:29:87:6a:36:c6:44:f5:
dc:ed:b5:33:14:82:cd:56:08:a5:fc:13:02:4d:f2:fa:df:ba:
a1:03:a9:64:45:ca:e2:a5:e2:ac:80:96:74:57:70:76:b3:82:
73:5f:0e:87:32:76:de:0d:05:d9:05:76:8e:f5:ae:aa:2e:e4:
2d:a4:cf:14:9f:0d:04:92:fd:77:96:d8:76:16:c9:6f:5f:b2:
8f:89:f2:72:2b:30:21:35:e6:5c:e9:78:fa:ab:0e:a6:f8:ca:
b2:72:e9:48:f2:d9:e6:c3:1b:3a:f1:7e:44:27:91:c1:e8:d3:
06:49:a4:f0:d7:a7:92:9c:cf:2f:bc:ea:6e:12:8a:87:44:0a:
86:c3:64:b5:d5:18:41:4b:31:4b:d0:b3:7b:0e:27:78:fa:e1:
b8:b7:c6:ae:10:6d:a1:14:1d:bb:78:eb:d9:a1:bc:95:52:31:
6e:74:75:42:09:b6:bd:c5:5d:c5:7a:3a:78:70:b0:2b:45:83:
33:c2:8f:43:1c:fd:25:fe:93:77:f4:06:65:d8:0e:50:41:c8:
45:58:ca:aa:90:67:38:0c:ab:a3:f0:59:6e:3b:04:c3:ea:bb:
6d:ac:d3:0a:5b:54:8d:51:89:a1:7b:15:6f:3b:ba:d4:a0:c4:
54:52:75:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:53:39 2026 by rpki-client