Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
File: 4RlTX6w_pId5V5vOj8O0At7yy0Q.mft (raw, json)
Hash identifier: ifJgUoxQxhzhma4U7D6gg2yREodEd0DlsC4ioSSkp0k=
Subject key identifier: 4D:E8:D6:E8:DC:65:14:79:39:4F:EF:B3:13:27:F3:F8:EE:6D:8C:BA
Authority key identifier: E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
Certificate issuer: /CN=e119535fac3fa48779579bce8fc3b402def2cb44
Certificate serial: 01A0CE916BAA56281889FF6F4B448B30B6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
Manifest number: 0A42
Signing time: Wed 23 Sep 2026 14:00:31 +0000
Manifest this update: Wed 23 Sep 2026 14:00:31 +0000
Manifest next update: Thu 24 Sep 2026 14:00:31 +0000
Files and hashes: 1: 4RlTX6w_pId5V5vOj8O0At7yy0Q.crl (hash: HwF5UyKKdPX4uYsahPVzM+vHNU3gquggpT0S66jZRi0=)
2: xsczLZy6vYyowOb8czcl6wqwt9w.roa (hash: Mvlo5cxvh4qQACxtbdlZhswtrG2sScu72g8Sl/rtq7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:6b:aa:56:28:18:89:ff:6f:4b:44:8b:30:b6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e119535fac3fa48779579bce8fc3b402def2cb44
Validity
Not Before: Sep 23 14:00:31 2026 GMT
Not After : Sep 24 14:00:31 2026 GMT
Subject: CN=4de8d6e8dc651479394fefb31327f3f8ee6d8cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:9b:c4:39:48:e0:fd:5f:da:91:2b:7e:20:
95:fd:b7:30:be:e7:c3:0a:c1:bc:0b:b9:12:1f:77:
e6:46:3d:ce:48:4c:7a:ca:d5:8b:b9:f4:3d:65:ce:
0b:92:d5:a2:bb:11:61:c7:95:c9:4d:8a:bf:5a:5c:
30:20:48:d2:2f:51:66:89:8c:a8:51:14:2d:d2:72:
79:a4:7c:f7:89:83:2f:12:b2:79:92:84:67:10:0f:
5b:02:0b:cf:7a:d0:ae:da:76:cd:0d:f6:6c:f7:ab:
8e:09:f2:07:2d:e1:a0:d9:dd:da:03:e0:bd:60:9d:
50:6d:3d:1a:09:f3:74:73:c6:b0:cf:22:a1:49:47:
2c:71:ff:5e:8a:b3:48:f1:a1:29:17:d4:18:68:92:
d0:1c:a0:24:40:66:a6:df:09:af:ce:bb:2f:4a:4a:
90:ea:f4:6f:f8:b3:b7:e8:1d:fc:fd:71:50:52:ba:
7e:ae:62:1e:75:eb:ae:5f:ac:3d:ca:15:2c:4f:e0:
27:2e:46:e6:20:48:87:96:54:a4:38:d0:6c:e4:4e:
75:7f:43:bc:ae:d7:29:12:f8:2a:00:b5:44:07:93:
06:52:e8:08:23:2c:32:66:0d:22:1b:77:70:34:dd:
aa:26:11:ad:00:f5:d1:39:87:23:7f:5f:4e:b1:f4:
f0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E8:D6:E8:DC:65:14:79:39:4F:EF:B3:13:27:F3:F8:EE:6D:8C:BA
X509v3 Authority Key Identifier:
keyid:E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d1:c2:63:ac:73:67:16:f8:50:39:c5:5a:10:e6:f2:14:aa:
1b:7b:0d:4b:b1:1d:c1:96:63:36:66:c3:c2:2d:eb:e1:72:08:
25:31:46:3c:dc:04:69:a9:35:c2:f6:75:86:2a:fa:a5:e9:0e:
45:70:0c:69:0d:3f:26:d3:ae:ab:2f:33:d3:b4:50:fd:10:9f:
3e:ce:df:38:b9:cf:3c:6e:e3:28:a9:ca:18:83:f7:3f:d7:ef:
44:50:df:a6:11:55:5f:b2:30:46:35:e6:ae:0c:51:23:26:07:
15:ca:99:ca:d8:65:39:d8:b8:8f:af:f8:4e:31:00:b1:fb:72:
18:15:2f:62:d2:5f:08:58:65:ed:31:f5:e0:e8:ce:a3:fa:ac:
e7:83:3d:b6:d5:7c:03:26:4b:0c:7f:a7:25:ad:4b:c5:33:ed:
2c:1e:8e:48:57:99:36:d0:62:b1:46:a3:6d:51:08:fe:1b:37:
4e:0a:f3:0c:52:c2:a3:47:24:52:8b:22:8b:4f:6d:7a:dc:b4:
93:cd:54:35:47:36:c7:aa:93:78:d7:97:f3:c8:2f:8a:e8:fc:
1e:cb:d5:ea:e8:7c:8f:a8:a5:10:57:84:95:58:26:bd:cb:2a:
c3:4e:83:71:7c:25:be:3a:cd:2b:ab:42:32:f9:2e:a8:61:65:
ea:b1:28:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:20:26 2026 by rpki-client