Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
File: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft (raw, json)
Hash identifier: NE1himb2OZ5F/ffAJpexLrYW9mV2n62VTRMTJnZA2ec=
Subject key identifier: 0E:29:92:DF:CE:6B:35:1A:97:F2:37:5E:95:A9:5E:11:D5:53:A9:9C
Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
Certificate issuer: /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Certificate serial: 01A0D0ED957A334B13BE3A160067B82753CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
Manifest number: 156B
Signing time: Thu 24 Sep 2026 01:00:26 +0000
Manifest this update: Thu 24 Sep 2026 01:00:26 +0000
Manifest next update: Fri 25 Sep 2026 01:00:26 +0000
Files and hashes: 1: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl (hash: i7KjbDZd9GyIlAB06yLEleMOW30SAiSOjD/F9RnFak8=)
2: 5BcZMkFK4H4HzeU32Pg9Et5_SQ8.roa (hash: yDr7OimE93R5A5WQDfIWvLQYnSnCYBj7r4S1yWKb1hg=)
3: l-2H50X-00hqRbXcinxXRtfOf8E.roa (hash: He9ZZQ/4dfXZbCStMS8Lcu6gvV1X94SjwWPCQNPvzbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:95:7a:33:4b:13:be:3a:16:00:67:b8:27:53:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Validity
Not Before: Sep 24 01:00:26 2026 GMT
Not After : Sep 25 01:00:26 2026 GMT
Subject: CN=0e2992dfce6b351a97f2375e95a95e11d553a99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:8d:c2:4a:11:b0:e5:9e:dd:9d:48:54:b6:
c0:11:48:0b:19:d7:9a:6a:d1:4c:3a:36:fe:3b:03:
aa:b2:5e:d7:f0:2b:16:f5:35:c3:d1:dd:a2:83:22:
1e:86:cb:1d:d7:e2:1b:d2:21:83:4f:aa:94:24:df:
47:72:16:e7:7f:22:b6:dc:ac:b5:71:39:9b:f6:e3:
78:26:4d:61:73:e4:d0:0c:e7:37:b3:d8:39:90:13:
9d:48:ed:46:14:58:ad:c6:7c:47:b9:54:be:d2:ae:
b9:8e:e5:5d:ed:bd:5e:5b:94:62:48:0d:9b:32:39:
49:fd:91:27:dc:00:13:dd:ed:39:bc:fa:7a:3a:96:
e4:15:5c:4d:45:56:e2:d8:3a:43:7e:99:8a:f7:74:
33:98:1e:45:1b:f0:fa:77:d0:58:ee:ce:c7:6c:72:
46:f6:37:12:3b:eb:c2:ae:0a:37:2e:72:af:72:7d:
6b:d3:1d:11:f6:9d:6a:7c:d9:5f:a8:01:ad:72:47:
e8:9a:e3:83:2a:95:07:05:96:4c:35:41:c8:6f:a1:
5f:53:f5:2e:1d:90:1c:21:b8:bd:38:f6:49:ce:b0:
e4:7a:03:d5:1a:98:dc:9a:e1:dc:7f:af:ed:bf:71:
54:55:d8:b0:ef:c7:7f:8a:11:18:a0:bb:63:11:56:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:29:92:DF:CE:6B:35:1A:97:F2:37:5E:95:A9:5E:11:D5:53:A9:9C
X509v3 Authority Key Identifier:
keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:cf:29:70:89:a6:2e:63:b8:a7:68:48:5f:6c:58:64:8a:e6:
b0:87:44:2b:aa:e9:c8:ca:2a:7a:60:bb:56:e2:1b:a2:a5:fb:
d8:53:47:ed:53:a0:21:ed:eb:30:42:73:71:41:e5:5f:21:a0:
0b:8d:11:36:1f:a1:a8:0d:93:3e:d3:71:1f:b8:11:72:90:04:
61:5d:bd:2a:9e:be:3c:05:2b:cf:a2:6c:1d:93:6b:b4:ca:ad:
10:b4:0c:c9:5b:13:e2:cc:9f:fa:84:c4:9e:62:f4:9a:07:23:
d7:32:60:f7:4d:ce:1a:01:d4:5b:ca:d6:0c:e5:3a:74:5d:b1:
7f:77:5b:f6:28:71:45:b6:6d:79:47:66:70:90:f4:2d:48:96:
86:b7:bc:c0:ef:6e:4e:08:b0:58:f5:98:69:8e:eb:37:d2:9d:
93:dc:8d:0a:fe:1a:76:0b:62:be:e3:fb:d7:62:f0:30:59:a9:
a1:d1:2e:91:cd:58:77:5d:42:e8:27:58:66:a8:61:0a:9f:cf:
a8:e8:d8:36:15:d3:c0:1a:d4:6e:15:7c:eb:19:6b:b9:68:26:
0b:84:aa:a6:34:f9:7d:47:4b:06:02:10:79:3f:54:63:42:52:
17:bb:3c:26:a2:77:2d:a2:10:c8:d3:24:af:c6:17:00:87:7f:
0d:01:f4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:56:15 2026 by rpki-client