Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier: BtNxjKJxSKziD0mD6XMkuzDShc6258QMG4tlRiqt7hQ=
Subject key identifier: 25:7D:2A:02:03:61:FB:D4:C9:09:A2:69:32:E3:20:2D:A7:F7:69:98
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 01A0CA46F9FC0079A0EB3CC660DDF72BE81C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number: 1A73
Signing time: Tue 22 Sep 2026 18:00:44 +0000
Manifest this update: Tue 22 Sep 2026 18:00:44 +0000
Manifest next update: Wed 23 Sep 2026 18:00:44 +0000
Files and hashes: 1: 1-5V3M6zE3wKBEweDO-7_cCen51c.roa (hash: LwMI3fPGMvfyxbI/YBNs8zyBRZxgnVuUyiN/3FDRb40=)
2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: Ad1n5fR5UTldZLO8xb98USLPPYgrmw7kfalYosqV1iM=)
3: tJXMZewUy_qQorxapIfDeK0TRA4.roa (hash: 2jFBZw5YSsGd1/9a3dRJA3x3ClgECy8D4Vl48wSzo0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:f9:fc:00:79:a0:eb:3c:c6:60:dd:f7:2b:e8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Sep 22 18:00:44 2026 GMT
Not After : Sep 23 18:00:44 2026 GMT
Subject: CN=257d2a020361fbd4c909a26932e3202da7f76998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:77:0f:46:55:72:09:74:7d:4a:c8:b3:a8:
15:e9:47:40:f9:81:07:5a:fa:26:9c:65:b9:cb:4c:
29:c6:a5:c7:8b:5e:71:dd:b1:ad:bf:8c:4e:52:b5:
4c:77:4f:0c:9e:82:2a:50:41:9b:59:27:13:fa:82:
95:9e:5b:6c:6a:07:d1:91:4e:d3:ae:6a:ab:7a:19:
81:53:06:ce:6d:16:d1:f1:c3:6c:71:b6:7a:84:19:
5d:fa:6d:61:c1:4b:ad:d9:15:cd:0f:cd:64:2c:18:
3b:a4:31:0e:34:d8:27:24:f5:06:6c:dc:21:bf:a3:
05:73:40:f4:49:03:62:85:2a:1d:9f:ee:ce:ab:4c:
81:18:df:df:3a:ce:7f:56:c6:2d:ee:2e:14:1c:31:
9b:89:01:ae:02:73:62:e7:49:83:52:fa:11:0d:a8:
dd:71:b4:d6:46:39:f7:bf:a0:74:5e:6b:26:c2:b9:
c9:39:a6:da:51:f1:17:61:be:93:e7:24:89:95:72:
9d:a6:f0:91:0a:ef:31:db:eb:6c:89:3f:3e:4a:2d:
6d:cc:bf:0c:13:07:bd:ae:55:8a:d6:16:44:19:16:
b3:69:cb:f5:19:5d:47:4b:9b:a6:11:20:90:08:42:
a5:84:66:88:d7:04:f1:71:f7:c0:20:37:95:6a:30:
ee:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7D:2A:02:03:61:FB:D4:C9:09:A2:69:32:E3:20:2D:A7:F7:69:98
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6e:e0:59:da:07:87:81:00:23:4f:e6:57:d4:d7:b0:cf:b7:
d8:e6:be:f1:0c:51:13:47:70:39:48:30:3c:25:1e:76:d5:7a:
ca:ae:10:1d:14:7e:33:44:1f:ff:e5:77:5d:ca:5d:ca:9c:2a:
17:6c:8a:d9:1a:c1:c2:6e:cd:1b:79:90:9d:ef:f8:1c:87:04:
89:96:e9:56:3b:6d:f3:f0:8f:b5:39:38:4f:7f:c7:2f:46:dc:
eb:ce:72:3d:80:b7:64:b8:a2:45:7f:9f:3b:6f:92:ae:16:09:
0e:99:60:4c:7b:64:ef:87:fc:b4:2a:b7:4c:b2:f1:d0:77:fb:
0c:47:ef:83:7e:5e:57:8c:16:6b:15:c6:6c:f7:5c:5c:4d:60:
80:7a:71:10:a1:6b:22:de:bd:fd:ed:d4:fa:21:92:db:0e:11:
2d:a0:18:7d:52:c2:99:75:84:00:de:51:74:de:0a:d7:5f:0e:
aa:0c:de:a5:90:bd:8e:2c:3b:d9:99:c6:72:63:59:df:e5:83:
82:5e:95:6f:0e:f7:ea:8c:50:d0:e1:a8:db:3d:af:bc:63:83:
41:f0:22:94:86:0b:9e:0b:1e:c0:17:12:71:25:be:34:6f:ab:
7d:b0:59:4d:00:00:10:2c:1d:c0:2b:ce:2e:1c:19:b2:cc:c7:
95:64:81:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:11:29 2026 by rpki-client