Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
File: 4IFCtC45SABI0fzqWHo2k9pMC4o.mft (raw, json)
Hash identifier: h7piIYWlDXMaxvVucPxE8GK3ykaRb/IrCvMcNbkH4iE=
Subject key identifier: F7:43:5F:D7:E3:86:D9:95:FB:FF:B1:4F:5B:DD:4E:B9:72:40:FE:99
Authority key identifier: E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
Certificate issuer: /CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Certificate serial: 01A1DD9490DDFD95D1274A9AF1EBDC6754F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
Manifest number: 08E2
Signing time: Sun 15 Nov 2026 05:01:03 +0000
Manifest this update: Sun 15 Nov 2026 05:01:03 +0000
Manifest next update: Mon 16 Nov 2026 05:01:03 +0000
Files and hashes: 1: 4IFCtC45SABI0fzqWHo2k9pMC4o.crl (hash: ojUojw+Sa3OR2c/VttxtR8BbNcBBkIYi42EQW31L0eU=)
2: jm7CLkDkWjLyx0drk5u0jmFrhNY.roa (hash: ammB/HZj8/N3/UAaLNlwGxNZkAQiwMa1PgzKQkDpB6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:90:dd:fd:95:d1:27:4a:9a:f1:eb:dc:67:54:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Validity
Not Before: Nov 15 05:01:03 2026 GMT
Not After : Nov 16 05:01:03 2026 GMT
Subject: CN=f7435fd7e386d995fbffb14f5bdd4eb97240fe99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:66:5d:b4:32:52:90:49:d6:ce:e8:72:06:
3f:e2:d0:69:64:63:13:51:e3:a4:ec:bd:4b:14:59:
d6:15:ff:25:1d:fa:32:bf:d1:46:74:d3:56:ac:7b:
0a:6c:9d:7c:c7:b0:c1:f0:06:42:64:79:39:8f:8d:
8b:aa:ad:16:0a:80:06:29:ca:38:02:2e:b6:a2:6f:
03:7f:c8:4c:df:46:a8:83:28:05:84:98:83:50:7d:
fa:9a:1f:a4:32:62:c2:5f:8e:fa:74:08:1c:10:c1:
ce:b9:5c:95:cb:b4:e6:bb:ae:1e:17:04:d1:c4:1d:
12:c5:d5:87:29:70:94:4b:51:c7:ee:0a:e5:72:2c:
ef:d7:df:75:73:ab:e3:2b:27:7a:fe:ad:6f:1c:2b:
f4:95:45:52:01:38:0f:6a:c6:41:eb:34:e4:c4:3b:
b2:48:1c:21:6f:f0:1a:fd:ec:81:99:1f:07:ae:41:
2c:d2:de:77:5e:3d:ba:6e:9b:8e:c7:f0:6e:0b:30:
1d:d5:8e:f0:57:95:05:6d:55:a5:27:a5:94:0e:86:
92:37:a0:9a:0d:9f:25:9c:eb:de:d2:97:9d:b3:b2:
7c:79:55:9c:e6:1d:94:13:07:c2:c3:6a:55:13:7b:
3c:96:73:01:62:bf:ba:57:e4:00:0f:2c:1f:c2:96:
dd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:43:5F:D7:E3:86:D9:95:FB:FF:B1:4F:5B:DD:4E:B9:72:40:FE:99
X509v3 Authority Key Identifier:
keyid:E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d9:69:bc:fe:46:d8:f1:f4:37:e5:70:fa:1e:3b:59:f8:15:
bc:81:b0:fd:a2:49:f7:da:e3:00:2f:5f:bb:9e:02:70:e8:0a:
3b:3b:3b:70:dd:6a:c6:07:8e:03:c7:e3:2c:38:cc:f4:2d:9f:
82:c9:ca:59:47:29:3c:e6:48:9d:58:9e:28:64:70:c9:29:0c:
5d:7f:50:41:28:a3:59:6a:5b:1f:f9:bd:82:b1:89:a2:22:fd:
59:c4:34:a4:81:ac:c6:d7:82:32:00:b7:78:57:60:4a:06:44:
0e:16:0c:23:68:f4:d1:5c:c6:2c:53:b9:c3:9e:44:3f:e3:b3:
09:45:db:95:81:38:99:b8:f5:be:8d:b4:66:fa:92:87:21:6f:
69:e6:a2:c4:f5:03:cf:d6:ab:da:34:cd:23:4d:0b:e5:ea:02:
a1:5b:db:cb:57:5a:dc:bf:e1:c8:4d:98:0a:ab:5a:c3:2a:a5:
40:7b:7b:fd:be:1e:d3:79:47:f1:e7:2a:55:14:5e:c1:64:87:
79:35:e5:c8:43:4c:7a:5b:ae:25:79:d6:80:10:37:68:02:00:
ad:7d:2f:ab:c9:0c:f1:48:3c:16:c7:90:57:6f:70:4a:e5:2f:
5e:45:bd:47:cf:3e:1c:b1:31:d8:85:13:e0:96:7d:5b:58:d6:
6c:01:e2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:53:28 2026 by rpki-client