Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
File: 4sWGEhDcOL2660d9bacZZkqEprw.mft (raw, json)
Hash identifier: uS1/OIczqMkTmCg6dmfzsUutKsVb6zCQ4Z0we6WJhUc=
Subject key identifier: 3B:0C:22:48:76:01:33:20:6C:7E:EA:1D:21:1F:ED:CB:C5:DE:66:76
Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
Certificate issuer: /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Certificate serial: 01A0CEFEE46D8FC737E1046366AEB80A1DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 16:00:06 +0000
Manifest this update: Wed 23 Sep 2026 16:00:06 +0000
Manifest next update: Thu 24 Sep 2026 16:00:06 +0000
Files and hashes: 1: 1-No8JnCXoZmNvwGOuPwKrmYYJ6c.roa (hash: 2kZ069SCXyvjYNeKIO+pvEFPTW/9AX8f/8u5tWS3u3U=)
2: 4sWGEhDcOL2660d9bacZZkqEprw.crl (hash: hyevMgVP9qmqKW/TfAZG7samHSTYdRPoM3ddE+ZiQkI=)
3: BW5S5s1xvxdYeismlznCSfBL2yI.roa (hash: EtWeWpCD+suUmysPule/ohTEye/jj6Q4dBOVaR6L3gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:fe:e4:6d:8f:c7:37:e1:04:63:66:ae:b8:0a:1d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Validity
Not Before: Sep 23 16:00:06 2026 GMT
Not After : Sep 24 16:00:06 2026 GMT
Subject: CN=3b0c2248760133206c7eea1d211fedcbc5de6676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:d2:f8:47:57:d4:0d:12:98:20:b7:ba:63:
e2:61:66:20:ca:12:74:2f:c7:04:3d:29:ae:b7:d7:
11:10:7f:ce:ab:99:9f:1f:e0:dd:50:b9:43:3d:0d:
c5:66:54:0b:61:8c:8f:0c:32:ca:58:ae:d7:f2:88:
54:0b:8c:dd:a4:c6:f3:ad:98:af:35:f1:10:b4:99:
a9:ff:4f:aa:40:48:83:a1:ba:a1:89:09:c9:8e:88:
e3:50:27:13:ae:83:4d:da:38:c7:5d:f4:a7:ec:c3:
39:6f:e2:8e:ab:1b:b4:85:4c:cc:2d:ad:dc:c4:3c:
c0:96:cd:c3:40:a3:34:b1:f0:b9:40:0d:af:25:db:
75:52:cc:7e:41:2d:e4:ee:9f:a7:8e:07:5e:c9:e8:
81:ee:c4:7e:21:a3:5f:e0:6b:7a:70:f5:f2:b8:c4:
1f:81:49:fe:34:9e:3e:3d:9e:6d:f3:ef:9b:e6:ef:
1e:5d:23:9d:b6:9d:25:85:cf:73:84:dc:65:ca:97:
7e:73:dc:e5:38:e6:34:c4:5a:98:02:ca:a9:2e:6a:
70:10:f2:7a:7c:44:fd:28:87:a2:da:28:60:fb:12:
a8:56:c9:ac:6c:67:77:a0:b5:d8:f5:72:88:f4:85:
a6:40:5a:b5:c8:01:2f:43:38:6c:67:67:23:14:3e:
67:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0C:22:48:76:01:33:20:6C:7E:EA:1D:21:1F:ED:CB:C5:DE:66:76
X509v3 Authority Key Identifier:
keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fd:4d:df:82:89:06:b0:52:f1:30:c4:8b:b2:c3:c5:4d:28:
bb:fc:f7:b7:26:4b:c9:9b:6a:f5:c6:47:9e:55:83:b2:7d:c7:
80:b4:e8:af:7f:97:73:2c:18:81:bc:2a:2d:0f:6f:b3:f7:ea:
c2:bc:e2:c0:95:dc:f1:4d:ba:9f:f7:d2:99:a7:49:bb:3f:57:
ff:98:ed:20:1c:78:bc:d5:b2:a6:ba:49:dd:81:16:f5:19:c2:
fe:16:7d:c4:06:38:60:65:e8:04:c6:a1:fa:aa:d5:4d:ca:ee:
42:a2:b2:c5:fb:ed:71:08:e8:ea:93:7d:5d:92:07:15:ea:6a:
87:07:8f:15:1f:a7:81:77:e0:3d:88:e0:a3:81:28:92:ed:f6:
f6:1e:20:3a:06:43:1f:e4:72:5b:5b:c4:60:06:09:47:d7:a3:
5f:2d:43:80:21:87:12:0f:44:49:2e:19:0e:0c:3b:75:37:98:
bf:cd:e4:4a:0f:11:80:ff:39:1c:43:d6:7e:98:4e:42:d2:10:
35:96:fc:73:83:e5:4d:5e:0a:a3:cd:50:13:7d:cb:db:f0:87:
87:32:31:55:16:c3:eb:51:fb:cc:54:cc:5a:d6:ec:21:0c:3a:
f4:4d:3c:1b:3f:d4:3d:b4:31:0d:ab:c1:a5:58:ea:31:a9:d3:
39:73:55:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:53:44 2026 by rpki-client