Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
File: 4KAIqA2P8mJiXmX-JYdpFYspmPA.mft (raw, json)
Hash identifier: pgAQEuK7WYWq7g664XT2USMys7r4tXZ8dfsR7fgf4rQ=
Subject key identifier: C3:EE:04:18:64:CE:40:C5:58:BF:FA:D1:D0:E9:DF:9E:CF:9B:A6:E2
Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
Certificate issuer: /CN=e0a008a80d8ff262625e65fe258769158b2998f0
Certificate serial: 01A0CEC881ADCA052F047AA7275DE9D00183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
Manifest number: 1A6E
Signing time: Wed 23 Sep 2026 15:00:41 +0000
Manifest this update: Wed 23 Sep 2026 15:00:41 +0000
Manifest next update: Thu 24 Sep 2026 15:00:41 +0000
Files and hashes: 1: 4KAIqA2P8mJiXmX-JYdpFYspmPA.crl (hash: xePKybYIFFsm09qg+RmAw554ft0c1CpUToS6BXE2ljE=)
2: BfP2bGOW8HthUfuXXggXfcuAbvE.roa (hash: dmLHFskk9KIm4+573JvglcI2K8WR/PAM7m+/RW2L1vs=)
3: pPHuomO4xh_m0S-r-_OhJE-mYVA.asa (hash: TKq6TnfE0FWP12xkoJvmUbR5i0X/fWByiH3vtL0RFrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:81:ad:ca:05:2f:04:7a:a7:27:5d:e9:d0:01:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0
Validity
Not Before: Sep 23 15:00:41 2026 GMT
Not After : Sep 24 15:00:41 2026 GMT
Subject: CN=c3ee041864ce40c558bffad1d0e9df9ecf9ba6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:82:bd:fd:60:94:ef:2a:0a:f6:32:e5:3f:9f:
2a:9f:dc:88:90:f7:e3:46:87:68:71:e8:92:ae:51:
22:11:34:ed:80:56:c9:bf:f1:5b:eb:7e:86:24:7c:
34:25:4c:ab:ec:37:10:b8:01:1b:31:08:29:b0:08:
1e:75:d0:81:d6:eb:03:6f:84:de:e5:59:2f:02:3e:
1b:d4:6c:01:b6:65:d4:ce:28:f4:16:de:6c:31:00:
d7:30:27:0b:61:cc:9b:ba:0c:d8:4c:49:12:40:ae:
60:80:cd:a8:36:2e:0f:01:da:e5:d2:2f:2f:e3:f7:
f1:a1:16:89:35:c6:fa:4f:e9:a0:c3:eb:a5:0b:ba:
25:b8:ce:87:46:0e:00:7e:26:c7:f0:ab:51:72:f1:
3d:05:96:e1:e1:ff:2d:d6:0e:f9:63:ec:ad:2b:43:
36:bf:71:b1:03:22:7a:60:14:f9:b3:12:aa:6b:c0:
b3:68:62:3e:82:39:34:94:e4:d9:e3:b0:35:cb:2f:
5a:64:1f:8c:db:de:01:e8:0b:86:1b:ef:dd:85:3e:
59:1a:fc:8d:f1:26:09:ad:a9:b4:40:e6:4c:45:53:
96:e3:2e:e3:d6:ef:e6:c6:f9:96:81:f5:41:63:05:
c9:9a:0c:d3:83:53:ba:49:f1:0f:0d:ee:71:f3:ab:
16:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EE:04:18:64:CE:40:C5:58:BF:FA:D1:D0:E9:DF:9E:CF:9B:A6:E2
X509v3 Authority Key Identifier:
keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:87:89:3d:72:33:18:48:01:bd:75:22:c9:ce:25:30:6e:43:
29:91:6e:22:05:48:17:81:c2:df:65:3b:63:50:55:d3:df:7c:
36:51:1a:64:01:a0:68:62:48:56:1c:7c:80:b2:5e:c1:9f:f7:
df:a6:66:5e:25:ff:62:11:b3:75:60:c7:54:eb:5e:00:3a:6a:
11:af:a6:76:44:ed:d9:b4:8d:6b:49:8e:2e:ab:42:ac:9a:3c:
f5:b6:db:6c:f4:19:c6:92:f1:28:33:a4:95:fb:eb:96:04:3e:
78:c6:1a:e2:f6:9e:51:c3:51:63:d8:3c:69:04:be:5e:9d:53:
a5:fe:f1:03:27:f9:15:7f:67:93:ce:da:0f:55:7c:7e:88:be:
38:66:50:39:8b:d8:c0:2e:78:0f:fa:48:81:f2:59:e4:19:e3:
78:4b:26:16:59:74:22:8b:cb:b3:37:47:4d:5e:e5:a2:09:26:
19:4b:fe:a5:4f:57:74:4f:b1:ac:11:f7:98:05:f4:c2:2a:9c:
f1:6b:c5:e9:08:e9:8c:94:e1:13:1b:c4:b4:a3:5d:66:b7:11:
60:92:81:85:c7:f7:0b:75:96:63:8d:f5:fa:6e:b3:57:93:ff:
90:57:70:02:7d:ae:a3:84:7c:3c:dc:25:76:c5:33:60:00:cf:
8a:91:88:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:27:02 2026 by rpki-client