Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.mft
File: 4BGYDkOhYAqXZWfbBqNKARRf14o.mft (raw, json)
Hash identifier: MkL1GTx3wtZNT3rSA5GcRGHamx3Zohj023Fphm5Rl+M=
Subject key identifier: 97:51:C9:43:F1:F4:41:60:1A:B7:73:01:6E:5D:84:FB:DD:B3:17:DC
Authority key identifier: E0:11:98:0E:43:A1:60:0A:97:65:67:DB:06:A3:4A:01:14:5F:D7:8A
Certificate issuer: /CN=e011980e43a1600a976567db06a34a01145fd78a
Certificate serial: 01A1DB38AA059DD67B152214BF75DE4EFC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BGYDkOhYAqXZWfbBqNKARRf14o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.mft
Manifest number: 0378
Signing time: Sat 14 Nov 2026 18:01:26 +0000
Manifest this update: Sat 14 Nov 2026 18:01:26 +0000
Manifest next update: Sun 15 Nov 2026 18:01:26 +0000
Files and hashes: 1: 4BGYDkOhYAqXZWfbBqNKARRf14o.crl (hash: 11EPaZ5O0dAxOnrp4qFAD18Uk9sIacb6Wltcj+uWeBY=)
2: aoCwhi5evCru6LgJTjJ8MV_C6jc.roa (hash: yQEGzqfXX6MkFbhFn963xnKD2YQsIROLhxeJWGdhd6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BGYDkOhYAqXZWfbBqNKARRf14o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:38:aa:05:9d:d6:7b:15:22:14:bf:75:de:4e:fc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e011980e43a1600a976567db06a34a01145fd78a
Validity
Not Before: Nov 14 18:01:26 2026 GMT
Not After : Nov 15 18:01:26 2026 GMT
Subject: CN=9751c943f1f441601ab773016e5d84fbddb317dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ef:d9:93:01:da:75:ff:e2:0f:32:b6:9d:fb:
51:b4:ea:13:ed:c3:25:71:2c:db:54:42:74:c0:22:
8d:a0:93:de:e4:14:23:c8:71:d3:19:48:36:42:81:
55:12:59:a1:f7:d7:18:11:4b:cf:cf:a0:f7:9a:69:
7e:fa:d5:f5:7c:5b:11:a3:07:68:69:6c:3b:2d:86:
ac:a5:3b:c5:f6:8a:3f:a1:80:77:8a:0a:64:5a:a9:
cc:14:39:e6:38:2b:30:56:bc:f9:02:82:5b:8c:86:
16:d0:f5:43:36:71:c5:d0:f0:86:87:d9:0b:4d:23:
52:53:a7:2b:e7:39:97:4d:b2:34:da:82:fe:74:70:
ae:bd:f2:11:a4:8e:22:41:e2:6d:81:71:43:e3:d2:
db:51:99:b1:4a:d9:92:13:7d:81:f9:6a:75:5d:5c:
6d:19:68:f8:93:33:a0:d6:0f:af:ac:f0:93:05:6a:
33:b4:83:29:e8:41:41:3e:7a:5a:a4:ac:94:ff:0d:
3f:e1:00:59:3b:4f:6b:00:ef:f4:e1:03:48:0a:f1:
d1:6d:09:7e:57:d8:e6:19:f0:00:32:09:56:5e:97:
4c:ac:f9:eb:78:3a:92:e4:32:a8:65:5e:88:22:c6:
71:b5:db:7d:72:fd:4f:4e:f8:db:59:a5:9e:dd:e2:
dc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:51:C9:43:F1:F4:41:60:1A:B7:73:01:6E:5D:84:FB:DD:B3:17:DC
X509v3 Authority Key Identifier:
keyid:E0:11:98:0E:43:A1:60:0A:97:65:67:DB:06:A3:4A:01:14:5F:D7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BGYDkOhYAqXZWfbBqNKARRf14o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8b:5a:56:86:70:3c:87:a4:3f:39:3e:36:47:9f:8b:aa:04:
e1:06:6e:e3:44:65:56:ca:77:15:b4:d9:7b:76:5e:af:f4:9b:
78:e1:29:1f:17:66:27:be:c3:ce:ee:19:59:d7:64:7a:b7:6d:
2d:92:c3:bb:56:42:78:04:da:80:e3:fc:28:1f:ec:4e:0f:0b:
e6:d5:b5:33:8b:16:da:f1:8e:11:f7:35:6c:27:c8:0a:38:35:
11:46:d6:98:ee:a9:48:a6:c4:59:df:ed:af:98:f6:37:c1:fb:
5f:6b:fb:3c:cb:87:3c:0e:cf:2a:69:75:82:24:1d:93:34:dd:
38:6b:22:18:7f:26:a2:0a:34:cc:f2:63:86:b7:ae:5c:60:ed:
67:b8:05:75:0d:0e:57:e0:cb:d5:f1:62:0f:25:53:03:32:0f:
9b:b1:4a:d4:fb:a7:fb:0b:83:ad:0f:cd:6f:e3:c8:c3:d9:03:
42:05:8b:f1:fa:96:df:ce:7f:84:8d:cb:63:72:bd:3e:f6:fd:
a9:e9:36:e7:02:39:cb:39:1a:ee:be:f5:46:08:e2:6b:39:c7:
7e:90:f1:59:f9:22:f7:62:1d:3c:bf:f3:c5:ef:76:4e:9a:d6:
6c:0d:f9:d2:43:4e:43:6b:d7:0c:bb:eb:7b:93:fc:7a:24:f5:
81:9b:f5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:40:58 2026 by rpki-client