Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
File: 4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json)
Hash identifier: cTNTn5vPPn8qd474TaN9Y4kGo5+98g9icSyzTclYpFQ=
Subject key identifier: 38:4C:6A:6B:33:B6:2A:93:6A:D8:DC:09:46:4B:2F:A7:0A:25:5B:7D
Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
Certificate issuer: /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Certificate serial: 01A0D3EF9A9751E8B816CDEDA6EC883E92FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
Manifest number: 09AD
Signing time: Thu 24 Sep 2026 15:01:30 +0000
Manifest this update: Thu 24 Sep 2026 15:01:30 +0000
Manifest next update: Fri 25 Sep 2026 15:01:30 +0000
Files and hashes: 1: 1-EjMX3YRkacpuKYO2FH7s4TaoIk.roa (hash: 5s0riiJVWdi9HHDl4S6viqfJpzTBR9zdtDH9C+DcLJc=)
2: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: MCq6wq8Ux7MA6vvBffmcSWW0W4MWhIsybKZ2cZZpMBU=)
3: OBbXBCvcqIaXdkpP01srqqNumYQ.roa (hash: tOeKjUztrQmZUOK5tSU3z7kVcfpLnbmQDA6Js+6Ulgo=)
4: odjrkNL4Yq2CXUVTQsXxPdl9ENs.roa (hash: kP+uJe1dyrOkqr9O36VTGq109yqCnpr2QUsWWtiUKws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:9a:97:51:e8:b8:16:cd:ed:a6:ec:88:3e:92:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Validity
Not Before: Sep 24 15:01:30 2026 GMT
Not After : Sep 25 15:01:30 2026 GMT
Subject: CN=384c6a6b33b62a936ad8dc09464b2fa70a255b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4f:a1:2d:dc:5d:1a:4b:a6:ca:de:20:2c:55:
87:95:ec:8e:98:81:c4:36:20:3b:38:b8:d4:f8:72:
6e:fd:3b:b5:ca:14:89:7b:75:af:d8:ab:b3:ff:12:
e4:3f:8e:47:71:6a:33:49:eb:94:55:42:01:b6:7a:
c8:6b:b2:2a:7a:0a:78:22:19:8f:b0:d9:15:88:0f:
15:7c:f4:cf:2d:8d:61:7c:72:b4:42:87:3b:83:77:
cf:bf:8a:24:d0:47:37:ee:1d:ae:3b:d1:1a:0b:cc:
4b:8c:c1:37:d0:dd:ef:6b:de:9f:15:40:91:46:ec:
c4:b2:f2:2d:15:6b:5a:4b:0d:4a:37:a9:0a:04:f8:
86:73:40:27:e0:35:53:8c:90:fd:be:75:bd:74:b1:
c7:a9:0b:58:e7:6f:90:66:bb:12:b2:37:28:63:f8:
12:30:a0:2a:18:30:dd:f1:10:9c:b3:ba:39:c0:1a:
ac:da:93:f8:b5:c7:2b:cc:8b:ec:3a:62:f9:f6:37:
5e:90:c8:a7:42:66:ed:ec:ef:00:89:e3:ca:2a:a9:
eb:76:52:f8:b6:d9:cb:3e:93:3e:dd:68:8c:09:38:
5f:5f:a0:ea:97:cd:d9:b0:89:01:84:54:d4:1a:e1:
86:ac:00:ec:e6:a4:da:82:d6:a7:d5:ac:32:fb:3b:
b0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4C:6A:6B:33:B6:2A:93:6A:D8:DC:09:46:4B:2F:A7:0A:25:5B:7D
X509v3 Authority Key Identifier:
keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c7:09:c8:a0:c2:5f:63:db:d2:9d:2c:56:bd:d3:4d:21:9b:
f0:a1:6f:37:73:82:b4:9c:f0:72:c0:97:7b:bd:88:7d:41:2e:
4e:25:1f:20:ce:78:88:db:15:f2:7d:f7:e9:3c:a8:29:f8:aa:
7d:27:74:83:50:6e:67:9c:f9:34:7b:d5:0f:4d:5e:f5:63:b1:
9b:fc:48:70:63:e5:b5:97:bb:09:bf:d8:35:5a:32:3f:02:3b:
f4:d0:8c:4a:a1:10:40:55:3e:12:37:47:7e:8e:25:b1:ae:06:
c2:8c:a7:2e:db:ce:a2:27:96:af:74:f0:9c:f6:38:7f:aa:50:
3e:0a:bb:cd:43:42:08:93:b9:b0:3f:e4:8d:c1:81:b0:b6:76:
a6:91:62:1f:83:6a:25:4f:82:1b:51:9b:fa:11:84:2d:1b:e5:
90:00:fe:61:69:72:c8:68:9f:3a:2d:00:ea:1f:98:39:2b:d7:
07:e2:17:a3:ec:0e:41:5c:95:13:41:15:cc:bf:15:64:0c:52:
dc:56:5e:c8:aa:19:4a:3f:cd:55:ee:ec:7e:b6:51:ef:9b:fa:
fa:40:04:e1:d9:b9:5f:83:05:5c:97:0e:46:1c:9c:da:5e:4b:
b9:9a:00:ee:de:64:9f:0a:3b:54:c0:0a:41:b9:2f:be:ed:eb:
c2:9d:a7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:52:30 2026 by rpki-client