Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
File: 4_NSlr0mUtdWucSi8KzS_dp5CXw.mft (raw, json)
Hash identifier: jJPbiFW48CvCXI5Phzqh6EaVn9oauHovxNHXg3JNBes=
Subject key identifier: 99:0E:4D:65:84:6D:4E:EF:0F:75:F8:EB:D8:60:43:AF:40:1A:EB:2C
Authority key identifier: E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
Certificate issuer: /CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Certificate serial: 01A0CB2262BF1BC650DFC823A5042F358542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
Manifest number: 095D
Signing time: Tue 22 Sep 2026 22:00:23 +0000
Manifest this update: Tue 22 Sep 2026 22:00:23 +0000
Manifest next update: Wed 23 Sep 2026 22:00:23 +0000
Files and hashes: 1: 4_NSlr0mUtdWucSi8KzS_dp5CXw.crl (hash: vHQYxv6SM1hG713Zk5G5PVTayasLog7bwCciT+m5iSY=)
2: Zmnbw83gHONa8BX-buTVuMmHAsM.asa (hash: XyTVvJ3X+ERyhtywLTdj7Ns+K7vLedrBzy7rkidscZI=)
3: kJBFWcdH75SmtIn8uA9jCwfUX4o.roa (hash: ysJ0LU5rMa1kB1xrN2ppHOMAzf664V0YwglsAj8KzHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:62:bf:1b:c6:50:df:c8:23:a5:04:2f:35:85:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Validity
Not Before: Sep 22 22:00:23 2026 GMT
Not After : Sep 23 22:00:23 2026 GMT
Subject: CN=990e4d65846d4eef0f75f8ebd86043af401aeb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2a:eb:10:ca:22:6f:54:fe:98:08:be:7f:73:
1a:36:34:e6:65:b9:d0:08:92:a8:6d:f0:34:7d:fd:
41:31:2d:f1:ac:bb:c3:71:b2:fa:c2:2e:2e:c8:7f:
0b:53:af:3a:c6:11:b5:2e:38:da:62:34:a6:89:15:
f3:d3:84:8b:b8:42:65:d6:22:d0:18:e0:7e:72:b7:
b2:4f:34:2a:cf:2b:78:75:83:3e:21:4f:3d:c7:a4:
f1:24:e8:e2:03:63:08:f4:4f:9c:01:bd:b7:a4:7f:
3c:50:f8:8a:5a:e5:8f:c4:56:34:41:44:73:e4:f8:
f8:c7:c1:8f:54:80:8e:26:b3:8f:2d:2a:49:7a:36:
61:8b:b4:e7:45:cd:b8:05:9a:65:4e:7f:5b:29:49:
64:f4:df:25:26:2c:34:c6:71:6e:61:c9:75:98:7a:
08:e4:49:e6:b1:77:8c:07:37:4d:2c:b5:fa:11:21:
49:fb:a0:30:1b:52:0e:d3:ea:ca:c8:d7:cf:92:3b:
2a:4c:53:7c:7b:e8:5d:a8:e8:54:03:b0:3d:c5:42:
f0:97:a8:be:21:36:17:1c:19:93:73:81:6f:07:0a:
e3:f7:42:24:14:b3:60:48:26:55:01:8e:2f:4d:a4:
88:48:ab:f9:ea:76:89:c9:c6:a4:2b:05:52:47:b9:
9e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0E:4D:65:84:6D:4E:EF:0F:75:F8:EB:D8:60:43:AF:40:1A:EB:2C
X509v3 Authority Key Identifier:
keyid:E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a9:76:69:34:d3:0e:10:e7:54:f0:9b:f2:bb:d8:e0:cf:0b:
83:f0:51:1c:1c:7c:19:29:71:09:c8:cf:57:07:e4:d4:af:0e:
99:d3:a7:09:46:5f:83:b0:e2:b3:90:7f:09:08:b7:99:69:05:
21:9d:80:e5:9f:62:17:f3:cb:1b:2d:43:e9:52:19:d9:92:83:
50:8e:01:9c:d3:52:5d:53:4e:60:bc:ca:43:7a:54:81:43:45:
94:d7:89:c7:12:d1:b6:41:67:24:6e:cc:98:65:f9:23:06:a8:
60:ca:e7:93:8f:3e:aa:0a:56:ac:be:46:48:dd:9f:0e:79:75:
a6:16:a5:29:05:44:9f:8b:74:ce:19:c7:fc:4b:5c:0c:0e:dc:
32:be:3f:c4:f2:cc:f3:11:7a:3d:8a:53:93:b4:f8:f8:f8:9d:
4d:6f:e2:99:30:05:32:13:59:30:dd:5d:9c:87:cc:e0:8e:6f:
e1:29:b9:7e:55:60:ac:f6:ac:d8:12:6f:ff:25:3d:68:6e:cd:
fa:4b:58:c8:d8:ed:0d:35:5d:ae:73:53:0f:81:1f:24:50:49:
3f:20:25:27:d0:72:50:45:0a:88:f5:6c:5d:e8:1b:72:1a:c7:
34:1d:67:8e:82:47:af:d7:f0:23:25:11:fb:01:e7:c7:cb:a2:
16:f9:66:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:30:09 2026 by rpki-client