Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
File: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft (raw, json)
Hash identifier: 8newqebDI9JNKedb3+zKT0mcL2SfECYgxsOegrJ9g3o=
Subject key identifier: 4A:39:11:EB:24:70:78:57:34:1D:D0:FF:91:2A:5D:65:92:B8:15:B3
Authority key identifier: E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
Certificate issuer: /CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Certificate serial: 01A0CA46FFDB8608187B768C4EFA1F2016DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
Manifest number: 0891
Signing time: Tue 22 Sep 2026 18:00:45 +0000
Manifest this update: Tue 22 Sep 2026 18:00:45 +0000
Manifest next update: Wed 23 Sep 2026 18:00:45 +0000
Files and hashes: 1: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl (hash: Vu+vWbSyIG5DWIHVeohsQmr5p15GWR6rLMIqi326VLk=)
2: QzeP51koEMjHeE88RWvwCqM_qGQ.roa (hash: nwOrnYkRQHY2ElWIiV63spIPWkoVMJum1Nxinn4biHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:ff:db:86:08:18:7b:76:8c:4e:fa:1f:20:16:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Validity
Not Before: Sep 22 18:00:45 2026 GMT
Not After : Sep 23 18:00:45 2026 GMT
Subject: CN=4a3911eb24707857341dd0ff912a5d6592b815b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:da:50:cd:67:59:da:bd:9d:f6:0b:fd:06:e9:
ef:21:35:ef:71:75:c1:ce:17:01:8a:3e:65:e2:d9:
bb:d9:b3:dd:0c:e9:cb:c4:af:fa:cf:49:af:b7:db:
ac:d0:7f:2b:67:a6:96:e1:03:51:0d:b2:17:99:b3:
f3:ff:87:47:f3:74:f1:a2:d2:cf:74:5c:eb:9f:98:
85:cf:55:39:79:50:21:8c:ca:f8:38:26:c9:cb:b3:
11:71:78:69:2e:72:63:f3:de:8b:79:4e:dd:d0:c7:
34:20:23:0d:fb:e3:60:79:d7:d8:93:37:a6:2d:a8:
66:44:d4:34:8e:d3:a0:c6:bf:41:a5:7c:32:bd:b4:
e5:24:69:31:aa:6b:8a:96:2c:da:c0:04:6a:f3:3f:
14:e9:d0:54:0c:a3:f6:6f:49:d4:5d:9f:f8:76:6b:
1c:34:96:82:3e:0b:77:0c:79:1c:6b:d0:78:90:38:
99:82:5d:9e:f4:46:50:2e:ad:f4:3a:78:44:e7:bf:
fd:23:17:37:f1:73:c0:a5:c2:fa:97:e8:de:5e:e1:
cf:c7:f0:2c:8b:31:17:96:e5:ee:42:c5:79:e3:38:
5d:40:ab:e9:ad:2b:88:21:1c:c9:b9:6f:d3:18:9f:
35:bc:17:e2:b9:67:ff:84:3e:d3:96:bf:00:21:12:
69:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:39:11:EB:24:70:78:57:34:1D:D0:FF:91:2A:5D:65:92:B8:15:B3
X509v3 Authority Key Identifier:
keyid:E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:78:55:09:39:4b:d1:6f:3d:53:6b:83:94:06:82:2d:03:b1:
23:4d:ca:65:40:a3:9c:c2:d7:3d:77:c0:63:b7:0a:bd:59:c1:
4a:14:b5:6d:9a:18:aa:d4:d3:f6:5f:f5:5f:d1:8d:87:80:49:
b2:9b:3c:15:dd:58:cf:dc:82:18:f0:d2:90:c1:8c:d2:19:ff:
2e:18:eb:42:4e:a5:14:7b:21:b2:51:02:9b:ef:78:9a:f8:cc:
9e:91:ce:73:da:b4:26:5a:91:6c:7c:76:74:ef:c3:26:d5:cc:
22:0f:d2:3e:8a:2a:1b:5e:f6:f8:8f:6f:13:c9:1d:3b:07:b9:
37:f6:5e:b0:ff:20:87:6f:ca:04:34:47:60:a6:25:f5:df:ef:
80:e1:ba:14:6c:b0:d4:0e:d5:46:b5:a3:fd:05:6c:91:cf:05:
f2:56:1e:05:da:92:10:1d:05:51:40:b6:32:d6:8d:30:09:28:
70:fc:e8:b1:60:bc:19:f5:de:02:cb:14:99:d5:fa:95:e8:8e:
a5:8b:d1:f4:4a:67:a5:69:e1:99:53:e1:01:77:be:6c:6c:91:
ea:af:c9:71:cd:af:d9:d3:b8:88:1e:21:9d:8e:77:79:37:43:
e2:62:09:ac:10:ab:36:7e:f8:c4:bb:2e:b7:5f:14:47:01:95:
a5:3c:37:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:25:54 2026 by rpki-client