Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.mft
File: 4D9m3X0SB0SQc-IeGjZIKKFJa5Q.mft (raw, json)
Hash identifier: OaFK4nlSmKOzE6wcR4Iy+tnAzBVHVMpJofBoFuXTPkw=
Subject key identifier: 87:9B:D2:13:50:12:EB:D5:26:E6:58:98:8C:5F:94:3D:C3:CC:7B:9D
Authority key identifier: E0:3F:66:DD:7D:12:07:44:90:73:E2:1E:1A:36:48:28:A1:49:6B:94
Certificate issuer: /CN=e03f66dd7d1207449073e21e1a364828a1496b94
Certificate serial: 01A0D7CD3BF9C413AC9749231B435F99FD79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.mft
Manifest number: E9
Signing time: Fri 25 Sep 2026 09:02:26 +0000
Manifest this update: Fri 25 Sep 2026 09:02:26 +0000
Manifest next update: Sat 26 Sep 2026 09:02:26 +0000
Files and hashes: 1: 4D9m3X0SB0SQc-IeGjZIKKFJa5Q.crl (hash: N7AJxk4S2m1KCm/ACNOI02OPMwfYACBnSLFsJKuUIKk=)
2: kYP-N6kinjxADOPUDAI1mMqCiMo.roa (hash: /T46dbhLvgDMiZ//AOgwguIuo5EQnnNikqQT0mHcCKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cd:3b:f9:c4:13:ac:97:49:23:1b:43:5f:99:fd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e03f66dd7d1207449073e21e1a364828a1496b94
Validity
Not Before: Sep 25 09:02:26 2026 GMT
Not After : Sep 26 09:02:26 2026 GMT
Subject: CN=879bd2135012ebd526e658988c5f943dc3cc7b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:22:73:73:61:a3:aa:9d:78:17:45:1b:19:
8e:e5:28:fe:75:59:13:65:6c:7d:e8:8f:fe:fc:94:
cc:25:db:51:c2:25:8c:22:36:b1:9c:96:f7:63:66:
09:86:dc:f9:2c:37:30:a1:9b:e7:7a:25:a4:bf:ea:
54:cf:8e:0c:04:3d:69:6b:0d:a7:3c:9a:38:89:4d:
9d:a5:9b:43:f4:fc:46:4e:7b:10:32:fd:ad:4e:7a:
37:47:d4:49:78:8a:e7:ed:49:c0:64:95:19:40:14:
45:b3:59:d4:2d:64:12:01:54:91:d8:b3:97:b8:90:
19:08:bb:48:68:26:f0:e8:53:c0:93:ab:6a:9c:67:
c6:95:d3:23:89:bd:2d:07:bb:43:4a:2d:ea:de:c6:
84:d2:15:02:29:f9:b0:51:e7:4d:af:bf:c3:ce:05:
58:f2:be:8c:3e:a1:33:86:8a:4b:5e:7a:fa:e4:0a:
83:aa:59:2c:91:73:68:2d:c4:dc:77:f0:b5:6b:9d:
4a:6d:55:f6:fd:9d:0e:f1:e1:ac:d2:73:24:9f:4a:
b8:9b:8c:a1:52:3c:97:91:4b:e5:9e:10:b1:c6:91:
b4:2b:2b:75:6d:29:45:ae:23:9a:37:61:73:e4:4e:
a1:36:26:b5:41:23:b8:8d:38:e6:2a:63:7a:53:f0:
06:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9B:D2:13:50:12:EB:D5:26:E6:58:98:8C:5F:94:3D:C3:CC:7B:9D
X509v3 Authority Key Identifier:
keyid:E0:3F:66:DD:7D:12:07:44:90:73:E2:1E:1A:36:48:28:A1:49:6B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:19:4f:a6:51:18:7d:16:1d:ff:26:6d:39:3f:d5:5b:27:0b:
3c:f6:86:3e:79:3b:81:a7:47:9b:24:2a:57:eb:49:23:8c:23:
75:e3:1b:0b:b3:63:2d:77:c3:7f:c8:70:6a:6a:46:e2:f9:ad:
bc:7f:62:f8:49:d9:de:e6:a2:11:af:ef:4b:5a:69:2a:8d:5d:
d8:5e:5b:37:be:a3:b4:17:94:d0:6d:14:6e:8d:78:12:83:98:
82:20:ae:8c:21:f3:76:d2:1a:27:54:87:bd:cf:49:94:b6:03:
81:2d:6e:71:70:22:13:7f:a6:fb:b1:e2:93:df:3e:42:e9:f3:
7d:71:70:ac:0d:8d:e7:7b:bc:81:77:4a:0b:4f:a3:14:59:34:
40:20:09:43:7e:b7:64:65:91:10:61:d3:35:34:2d:ac:85:e2:
70:91:1d:ef:3b:14:ce:d4:6e:0c:5c:fa:cb:c3:85:9e:ce:1f:
61:bf:49:7f:57:40:bb:7b:46:00:06:da:92:38:70:37:f9:59:
09:22:cb:03:0c:26:60:1d:ed:2d:58:89:57:42:b8:22:9c:bf:
71:33:89:9b:47:ab:91:30:71:d8:64:ba:bc:76:7b:cb:1a:45:
48:c7:66:e9:8a:a9:04:f3:5e:f0:ba:4b:43:8f:ee:aa:15:74:
0c:28:52:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:28:16 2026 by rpki-client