Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
File: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft (raw, json)
Hash identifier: KkZ0BB39oD5dVQv1Gah17+XxxYH0u6hwayOeJLl6XiA=
Subject key identifier: 1D:96:18:EB:DE:D1:BE:71:98:DF:4E:EE:48:07:AC:D4:DF:81:9A:2A
Authority key identifier: E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
Certificate issuer: /CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Certificate serial: 01A1DE7136C10C2DCA572C93D5B8F83E34F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
Manifest number: 0920
Signing time: Sun 15 Nov 2026 09:02:03 +0000
Manifest this update: Sun 15 Nov 2026 09:02:03 +0000
Manifest next update: Mon 16 Nov 2026 09:02:03 +0000
Files and hashes: 1: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl (hash: XOAhL5NszByCo29PrABWMgOHHtFWAzY5J1a0PFzlP+Q=)
2: QzeP51koEMjHeE88RWvwCqM_qGQ.roa (hash: nwOrnYkRQHY2ElWIiV63spIPWkoVMJum1Nxinn4biHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:36:c1:0c:2d:ca:57:2c:93:d5:b8:f8:3e:34:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Validity
Not Before: Nov 15 09:02:03 2026 GMT
Not After : Nov 16 09:02:03 2026 GMT
Subject: CN=1d9618ebded1be7198df4eee4807acd4df819a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:75:6b:a3:a3:b0:ca:30:85:ba:ff:6d:81:b4:
82:ea:10:1f:0a:56:c1:77:d5:6f:2c:9a:00:b0:7b:
7e:55:f7:ea:1e:45:78:0f:5c:5a:26:02:9f:c0:9b:
d6:0a:09:14:6a:22:10:bf:ef:92:f2:66:34:0f:98:
4b:38:a7:1e:03:bc:8f:fb:26:7a:77:4c:7a:05:a2:
3e:d2:3f:17:b4:7b:fa:32:a7:8e:f9:98:80:6b:b2:
4c:9a:c9:82:7e:8a:e5:a6:04:d7:bd:a2:cd:c5:c1:
98:79:9d:76:88:64:a5:cb:e2:f4:cc:1d:fd:da:63:
c7:eb:e7:86:54:24:a2:eb:8f:3a:a3:07:1c:a6:f8:
ac:3f:e6:24:83:c4:7f:64:2f:db:c6:c9:d8:98:90:
95:f5:8b:de:72:cd:0f:18:ed:f7:a3:9a:fa:8e:64:
72:1b:18:16:8f:68:ac:a9:95:5a:4c:2d:f2:a0:57:
c7:5c:0f:75:93:15:4d:a9:c7:17:cf:6e:da:3e:ed:
c4:34:03:f7:52:82:a8:33:b9:0b:fe:18:05:38:da:
a0:41:b5:68:09:a3:6d:da:17:a5:8b:61:7c:f6:7b:
c1:0b:0b:83:cd:7b:a6:76:4b:98:40:89:e1:aa:dc:
3b:98:94:45:00:c4:63:b9:e3:d9:c8:8f:8f:f1:ed:
d2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:96:18:EB:DE:D1:BE:71:98:DF:4E:EE:48:07:AC:D4:DF:81:9A:2A
X509v3 Authority Key Identifier:
keyid:E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:64:6a:76:90:a5:79:17:4b:3a:40:88:b6:0b:6b:4d:02:fb:
21:7b:4c:f5:46:1a:5d:a8:19:8c:25:b7:3d:bc:e0:98:bd:71:
85:51:a5:88:bb:54:18:56:3c:a3:23:f2:f8:f6:ad:91:ab:8e:
8f:52:46:c1:4a:d6:2b:cc:3f:e9:8c:9f:23:e4:76:58:f4:42:
84:15:e6:eb:dc:6b:30:44:00:9b:90:c6:d7:0c:c3:3a:aa:0d:
d9:7d:2e:fd:ad:ee:fb:e5:be:42:b1:79:bc:a7:3f:6f:b7:e3:
a5:12:54:d3:9d:6a:e7:08:9f:8e:7b:d8:d4:37:43:85:e0:c6:
b9:9c:40:9b:96:db:81:e5:69:96:3c:72:34:42:82:a8:9a:c1:
8e:a0:0b:c4:6e:e4:61:e3:ef:36:45:1c:9d:bf:df:48:be:79:
50:12:7c:89:ea:2a:bd:89:36:0f:93:12:ab:e6:86:39:c1:fe:
03:68:06:2f:18:5f:7c:ca:4f:7d:5c:c5:cd:20:1d:9b:16:9d:
c3:60:ee:a9:b4:58:73:19:b7:d6:9d:7d:d3:c9:2f:73:1c:a1:
4a:a8:3b:82:47:90:6a:89:22:27:ab:b3:33:6f:57:81:69:0c:
94:8c:f4:2d:25:0d:a7:06:09:51:e8:20:55:dc:9b:84:e5:db:
63:87:b2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:35:47 2026 by rpki-client