Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
File: 4sP8GYx3L1m47eUphWtS6heaTjg.mft (raw, json)
Hash identifier: mFBZr6HvFnrkXTUYGLFwUi7wXEeoB98eOgBkEpKpQIY=
Subject key identifier: DC:F3:DD:34:37:CC:BE:C9:B1:F9:39:4E:A8:C3:B5:18:CF:B1:43:BF
Authority key identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
Certificate issuer: /CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Certificate serial: 01A0D26DDE04F08023CBF2C2B78066D8BA8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 08:00:10 +0000
Manifest this update: Thu 24 Sep 2026 08:00:10 +0000
Manifest next update: Fri 25 Sep 2026 08:00:10 +0000
Files and hashes: 1: 4sP8GYx3L1m47eUphWtS6heaTjg.crl (hash: qGdcmu/IaM2vaR4Ur7mRZyJU2LVwWoV4MOrmlU++pBI=)
2: j6eYXTGIPK6gsz2syCvMaVTG-yE.roa (hash: 91e+kynlaPtGnq7c6oIlywSzsBYw97PzDquhkqe4ygw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6d:de:04:f0:80:23:cb:f2:c2:b7:80:66:d8:ba:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Validity
Not Before: Sep 24 08:00:10 2026 GMT
Not After : Sep 25 08:00:10 2026 GMT
Subject: CN=dcf3dd3437ccbec9b1f9394ea8c3b518cfb143bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:57:cd:ce:16:e2:38:88:94:34:78:33:9b:a5:
de:1e:a8:fb:d4:73:c5:3d:29:58:bc:44:65:38:b2:
64:53:d3:4d:02:a7:1d:df:b3:d0:29:e4:b8:89:cf:
07:97:84:34:41:80:1e:a9:13:a7:3d:b9:00:93:d1:
d2:1a:9a:d8:91:75:00:38:79:e2:98:10:80:d4:46:
d0:5f:e7:fc:6b:15:7b:c0:71:e2:c8:43:05:79:b0:
1c:9c:27:a7:21:11:15:ad:c4:7d:a8:fb:b6:f0:ac:
f8:9c:9d:ec:68:c9:53:9f:08:40:45:9b:ea:3a:73:
14:99:d4:e6:36:d6:e4:6a:c4:9b:2e:cf:0d:30:c1:
d5:72:af:a6:ae:a7:05:eb:e9:c8:45:b1:de:f2:b8:
f6:91:8e:f2:9c:7e:16:cc:4b:60:3a:3b:3f:04:42:
4d:e7:70:bb:79:cb:87:d5:0d:7d:48:be:26:bc:f1:
34:4d:f1:8c:a2:dd:fb:c1:63:97:77:aa:51:ba:f3:
f2:f5:36:83:f8:bd:df:b4:f8:ab:b6:64:c5:a1:23:
eb:64:7f:3d:66:07:b5:77:b3:18:32:76:9b:25:b8:
46:b5:b4:6a:8c:4b:7d:c4:a8:85:78:d8:7c:b4:a6:
c2:80:1f:06:5c:6b:0a:8c:64:e0:d2:c4:ba:e7:91:
4f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F3:DD:34:37:CC:BE:C9:B1:F9:39:4E:A8:C3:B5:18:CF:B1:43:BF
X509v3 Authority Key Identifier:
keyid:E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:28:0c:5f:8c:88:62:6e:85:10:57:72:6e:72:f2:42:06:c7:
d6:19:53:10:52:96:52:ae:8c:bc:a7:e1:8d:9f:9d:bd:54:06:
6e:d8:db:b0:80:ea:0c:16:53:09:c1:1d:fd:4c:bf:66:a8:db:
8b:5a:d2:40:8f:3d:bb:a3:19:b1:77:3a:cc:0d:2e:c9:12:de:
d1:01:a5:2e:ee:b9:50:89:c5:eb:c9:14:55:41:47:60:83:7d:
b1:1d:f6:34:43:c0:4f:45:af:6f:78:00:97:64:56:f3:2c:c8:
6b:21:b3:e8:e1:95:bd:15:05:dc:25:26:95:d5:f2:41:fa:5f:
43:ff:03:6d:35:b6:33:97:a0:e9:d3:6e:86:84:b4:86:ca:62:
76:be:36:e3:c4:0d:5b:ad:49:38:7e:30:9e:6e:da:6f:12:d6:
76:55:95:fb:99:d7:2a:e1:29:b7:3d:32:89:a0:9d:f6:f3:43:
38:8a:9a:1b:cc:9d:8f:12:04:a5:6f:2a:d1:b6:b3:e5:21:4a:
2d:1c:4b:f0:b3:2b:68:7e:b7:dc:30:f1:7f:80:90:fb:7d:bf:
89:b3:54:72:8d:80:0f:e3:7a:36:dd:ca:5c:e0:e2:3d:e3:05:
a3:06:6d:6b:91:3c:29:b8:72:7a:12:8c:fa:54:23:4d:0e:2e:
19:85:c9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:55:08 2026 by rpki-client