Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
File: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft (raw, json)
Hash identifier: tJdPEB2PiUQJDgUve9uyADeOOElkeR6n/g4duJHjxSw=
Subject key identifier: 3C:23:CB:67:63:04:BE:F8:57:67:5A:1C:2A:A2:C3:DC:31:AA:AB:04
Authority key identifier: E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA
Certificate issuer: /CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
Certificate serial: 01A1404C53CDE1948605492D58318692EFC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 16:01:46 +0000
Manifest this update: Thu 15 Oct 2026 16:01:46 +0000
Manifest next update: Fri 16 Oct 2026 16:01:46 +0000
Files and hashes: 1: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl (hash: 8vY+QxU5jIUDIelXQhwqcmPEkQ4Xk4ZYiJpSaihv4Z4=)
2: vhW7lS-JBYebJEO-U1J2yweu6Yo.roa (hash: hv3bo8RYqKbVjpyma1UuE8rn8DDYyjzn6U1qa0IMKCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:4c:53:cd:e1:94:86:05:49:2d:58:31:86:92:ef:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
Validity
Not Before: Oct 15 16:01:46 2026 GMT
Not After : Oct 16 16:01:46 2026 GMT
Subject: CN=3c23cb676304bef857675a1c2aa2c3dc31aaab04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:f4:df:d7:df:4c:74:ab:63:a1:b4:76:05:
7f:61:0d:aa:78:57:f8:e0:e1:17:92:09:a8:2b:b2:
44:4d:1d:e6:03:a7:d7:b1:2b:0c:bf:f8:e2:24:59:
1b:8c:0c:7f:36:73:0d:d0:54:8a:05:df:28:6a:d4:
98:61:d5:c8:d4:e8:a3:05:5c:27:58:39:fb:26:65:
16:6a:d9:25:03:55:88:b5:77:6a:b5:3d:0d:ab:eb:
a7:f3:95:fd:b6:d0:84:f7:7b:60:96:45:00:42:56:
cb:fa:b0:db:24:2a:72:ac:44:38:71:84:1a:5e:32:
f8:16:f5:ae:2f:73:03:bd:df:db:93:7a:f6:4a:5f:
64:cb:90:03:85:7a:2b:06:81:f2:54:3c:1e:4a:e6:
72:01:94:6f:f9:17:44:a6:ce:ef:10:c5:95:64:dd:
40:16:97:72:b1:f7:ac:26:6a:c9:f9:6c:fd:67:14:
42:54:3a:4e:3a:1f:8c:f3:3e:8c:a5:fe:01:dd:5a:
4e:72:27:79:2e:7a:a6:4d:44:23:f6:03:f5:d2:24:
38:29:ed:88:e4:6d:5e:80:04:1c:85:21:5d:7b:8a:
30:1e:64:ea:2d:bc:c8:a7:e7:b6:b2:85:2a:1a:7c:
4e:55:9e:e7:7c:e9:dc:84:cf:f3:9b:ac:1c:4e:7b:
b5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:23:CB:67:63:04:BE:F8:57:67:5A:1C:2A:A2:C3:DC:31:AA:AB:04
X509v3 Authority Key Identifier:
keyid:E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4e:23:6a:92:d0:3e:98:e8:7d:e8:b8:a8:94:eb:7a:89:b1:
8f:1a:5b:06:67:0e:14:14:07:60:49:54:06:5d:1c:19:57:80:
0d:74:53:0c:ad:33:3a:0e:01:d7:48:d2:9c:a8:dd:fa:d5:ba:
19:6c:91:ae:d9:b7:0a:1a:b7:d0:4f:44:a7:c3:98:7e:40:85:
d6:9e:05:41:74:a1:11:83:16:31:75:9c:4e:32:27:c7:89:c3:
2a:60:2e:80:f3:6a:8c:f7:a4:07:c6:f0:a8:df:4e:f8:ce:bc:
e2:c9:a2:0d:43:02:a8:41:3d:7a:c2:6f:be:aa:58:75:a0:af:
63:ca:d4:7d:03:af:dc:85:66:7f:13:ce:2c:ce:c9:67:e9:e6:
d3:04:d9:c8:5e:4d:bd:fe:97:7a:31:06:96:5e:30:0f:5c:9a:
22:97:9f:19:91:4e:fe:20:3b:f7:4e:42:8c:29:51:6f:5a:1e:
f7:35:9c:9d:93:3c:c9:ec:7d:fd:8f:4c:c4:f4:02:45:41:9d:
2d:59:31:74:fd:ae:ab:f7:54:5d:af:f1:e4:91:f8:33:bd:73:
56:06:a2:e3:c4:c8:0a:c1:cd:ea:9e:6e:12:3d:43:b0:a8:44:
d6:af:ac:11:ff:93:39:03:d0:14:e3:5e:b4:45:7c:96:a9:ae:
7f:41:40:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:18:07 2026 by rpki-client