Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
File: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft (raw, json)
Hash identifier: UCMC5ug4EEKHaqGiCgY7MbtQjBooliEALNiyLSeak4Y=
Subject key identifier: D4:3F:FD:E5:64:15:38:34:A3:64:69:51:13:E2:7F:4A:2A:E0:E2:2D
Authority key identifier: E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
Certificate issuer: /CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Certificate serial: 01A0CEC83A30B4D0E9D09B1F1BAD1BC577BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
Manifest number: 0740
Signing time: Wed 23 Sep 2026 15:00:23 +0000
Manifest this update: Wed 23 Sep 2026 15:00:23 +0000
Manifest next update: Thu 24 Sep 2026 15:00:23 +0000
Files and hashes: 1: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl (hash: cDxIozQMuBgrP67SdgNsI2thih5XjBTS2J65/JgBVjw=)
2: kAQRnXnn1bepnTjDte_6dOnnntw.roa (hash: fvCT2Eh+lUDVebIFnLuZITE86ooUogC2tmwd5l7+wO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:3a:30:b4:d0:e9:d0:9b:1f:1b:ad:1b:c5:77:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Validity
Not Before: Sep 23 15:00:23 2026 GMT
Not After : Sep 24 15:00:23 2026 GMT
Subject: CN=d43ffde564153834a364695113e27f4a2ae0e22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:97:60:1c:2a:98:d1:fc:99:3f:53:40:2e:
c8:98:bc:95:0f:7b:77:60:38:5b:99:47:6c:46:86:
8c:62:1f:1b:29:63:a2:bc:e0:0d:14:03:3d:3f:c0:
ff:cc:69:39:7a:5c:f2:92:91:55:0f:5f:39:10:99:
d0:ff:c9:d9:34:3b:c2:7d:bc:1b:e8:80:21:81:29:
fd:ae:d2:dd:7e:fa:5a:3c:f0:ac:c7:fb:76:2b:57:
ed:c7:98:c5:96:a5:18:5b:10:fd:2b:b4:38:84:ad:
02:17:8d:11:d8:79:6f:fe:38:bd:54:de:24:a2:6c:
d3:cf:37:58:41:80:a1:16:cf:8a:2d:6a:ff:4d:1e:
04:04:f6:83:d6:25:b0:e6:44:28:26:6a:a8:8c:04:
47:25:80:c2:a0:47:8e:35:5e:e9:13:6a:fb:04:4a:
22:fd:a5:67:f0:a8:79:d1:ee:16:17:9e:f1:8b:ee:
2b:8b:19:a5:02:a5:60:29:b9:fe:74:7b:e8:4e:a9:
b2:e2:e3:59:65:a8:0f:5b:14:59:47:7b:a4:74:90:
82:b5:c1:5f:cd:3c:b9:ab:a9:0d:cb:b7:ab:85:4d:
f3:bf:f4:ec:32:4d:88:a7:62:13:f0:cf:db:3c:4b:
6a:b2:5f:23:36:b4:18:73:50:f4:73:94:07:72:95:
dd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3F:FD:E5:64:15:38:34:A3:64:69:51:13:E2:7F:4A:2A:E0:E2:2D
X509v3 Authority Key Identifier:
keyid:E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e5:15:4e:11:55:dc:4b:a4:05:9e:78:66:88:61:99:d0:cd:
1b:9b:4e:60:b7:1d:e1:19:0d:65:61:6a:53:86:02:dc:93:57:
3d:b6:19:59:51:3e:9a:68:bb:fb:0e:d5:ee:65:a0:a0:db:61:
3c:b2:fc:94:88:4b:19:2a:a9:0b:28:b3:12:28:30:c7:4a:cd:
af:99:92:fd:66:44:10:76:7a:a6:1f:88:98:df:0f:4e:d5:03:
c2:aa:70:91:fe:06:61:00:ac:c2:52:34:a9:d5:df:fb:2b:d8:
9d:2f:c3:dd:a1:14:f4:24:40:71:7f:8f:12:d6:1c:44:9d:da:
18:57:1c:56:39:cb:f5:32:78:01:cb:9d:06:97:f1:9a:98:f1:
be:c8:ea:32:41:70:31:9c:d1:5a:50:0f:1d:8e:43:66:94:f4:
56:76:d4:df:9b:60:78:eb:c5:db:5a:e1:f8:79:11:b0:47:06:
da:98:f1:5b:27:31:52:e7:c8:12:17:5e:3a:b1:b9:2e:67:2c:
a7:55:71:69:ca:05:16:03:bc:3f:a5:f9:08:ad:7d:8c:ee:4f:
26:45:ba:03:02:67:57:82:35:82:61:3a:b4:38:71:e3:8a:d5:
13:75:f8:98:32:cd:21:02:b5:57:40:ae:d1:d6:d5:5b:41:a7:
4c:af:56:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:20:24 2026 by rpki-client