Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
File: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft (raw, json)
Hash identifier: l1qqHTiCRlBuHyxJTw3kHgHWWT9F0iA39F7Ym5nkqJQ=
Subject key identifier: 48:46:6A:E5:64:56:B3:3A:1D:1B:C3:E9:74:AC:B0:B5:06:6A:10:3C
Authority key identifier: E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
Certificate issuer: /CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Certificate serial: 01A1DA25B2B68BFEB45E425A5EF1D89556E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
Manifest number: 0A54
Signing time: Sat 14 Nov 2026 13:01:05 +0000
Manifest this update: Sat 14 Nov 2026 13:01:05 +0000
Manifest next update: Sun 15 Nov 2026 13:01:05 +0000
Files and hashes: 1: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl (hash: yySU/Sqv17P1ekmVw/aQo9QoCLZf1V3EsgYdlffQuqo=)
2: Um8x4FnVBBKSkcy47VZrVv_LDxE.roa (hash: tfl71U6Q8ML7hqI6qdxoHZc1rgsYETV4BNFwPX3unlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:25:b2:b6:8b:fe:b4:5e:42:5a:5e:f1:d8:95:56:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Validity
Not Before: Nov 14 13:01:05 2026 GMT
Not After : Nov 15 13:01:05 2026 GMT
Subject: CN=48466ae56456b33a1d1bc3e974acb0b5066a103c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:c0:72:7d:67:a3:79:a4:09:d6:3a:08:ce:
e8:18:97:45:92:4b:ef:91:63:62:2f:b8:e7:78:fc:
d0:eb:0b:3f:56:10:11:07:e7:f4:1a:39:10:03:3c:
32:59:48:a2:50:e9:80:42:4c:63:be:8a:76:a1:80:
3c:6f:5a:c2:57:03:83:b6:14:a0:5f:29:0c:e3:0c:
c6:ea:24:b2:2d:86:22:5a:1c:ab:f0:c3:56:7b:37:
60:b6:89:c3:92:fe:17:be:9d:95:68:24:e2:dc:1b:
a7:73:85:90:1d:dd:7a:d6:28:52:55:78:8d:67:34:
f6:03:e0:79:f8:ae:d3:c9:51:6f:8c:48:c0:a9:7a:
f1:b8:51:da:50:ec:a2:5b:d5:37:27:83:ba:26:c8:
c0:7a:c9:28:6a:60:6e:78:0e:f5:16:41:d4:4d:66:
b4:88:5d:1b:bd:1e:2c:5f:8c:86:55:93:17:39:d9:
0e:f2:b3:2e:ec:bb:9c:09:69:e6:38:40:54:6c:6c:
5f:94:3d:94:d7:86:66:d8:8d:33:77:a5:1e:ec:d0:
d3:f5:c7:09:0f:03:45:81:8f:6f:d0:c1:af:89:3e:
40:c0:75:6c:78:b7:43:33:43:75:5c:58:5d:6a:ac:
77:9e:c5:ab:f5:dd:49:2c:66:d4:d8:fd:48:f6:d9:
7c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:46:6A:E5:64:56:B3:3A:1D:1B:C3:E9:74:AC:B0:B5:06:6A:10:3C
X509v3 Authority Key Identifier:
keyid:E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:17:92:98:dc:a3:31:57:4a:71:a7:01:35:02:62:44:6a:b9:
eb:b8:37:5c:fd:2f:73:60:0c:8a:0b:2d:3f:8e:52:12:47:9f:
35:93:5e:7f:b7:f7:35:9a:7e:6c:86:75:a8:de:50:2b:90:04:
4c:d3:69:7e:f0:1a:6a:53:bf:47:70:59:e0:ff:a7:4a:00:ff:
51:fe:56:97:04:fc:fc:1e:d7:69:bc:8e:c6:30:ed:79:6a:41:
e9:e5:ca:5a:53:ed:58:51:cb:b6:98:66:e4:3e:d4:01:9a:78:
0e:e7:d8:c9:8d:85:c1:1e:9a:34:76:59:03:8e:78:2d:f2:d0:
df:7b:6a:3d:65:e6:78:84:df:84:46:31:f2:75:fc:f1:77:54:
a6:d4:e4:45:c1:99:e4:6a:9b:fc:d5:f4:e4:96:dc:d2:d4:64:
6c:4b:d8:0a:cd:cc:d7:db:25:71:da:b3:d8:e6:9d:08:51:45:
ea:9f:58:aa:46:e0:77:8a:ba:5b:42:6a:19:e3:26:b6:52:f3:
b4:e9:ec:e3:94:b3:3b:70:e7:14:e4:6d:11:2e:4f:24:d3:b4:
d9:86:bc:3f:52:67:df:39:18:2d:8f:0a:50:9f:13:87:4e:53:
23:21:6b:66:ef:73:2e:c5:cc:9e:24:00:76:48:dc:fa:6e:cc:
2c:a8:2a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:40:58 2026 by rpki-client