Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
File: 4ucXSfgCklOQH3HUZBA56Q8al_o.mft (raw, json)
Hash identifier: APAAzagfp//naQ4kff1T4bgatlq+wRcEYSZ5TBsfgBA=
Subject key identifier: 5F:0D:10:C7:ED:0E:0A:0D:C2:E9:89:8B:8A:EE:B6:C1:73:DC:73:C1
Authority key identifier: E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA
Certificate issuer: /CN=e2e71749f8029253901f71d4641039e90f1a97fa
Certificate serial: 01A1212E55FA44950192F1102F719CFA4558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
Manifest number: 02B9
Signing time: Fri 09 Oct 2026 15:00:46 +0000
Manifest this update: Fri 09 Oct 2026 15:00:46 +0000
Manifest next update: Sat 10 Oct 2026 15:00:46 +0000
Files and hashes: 1: 4ucXSfgCklOQH3HUZBA56Q8al_o.crl (hash: i3QGdVP2gDXzHlhLP5X4OOmS7VSZCPsFRjgcj1hdv0k=)
2: JcRsIAV11TxO42T56xBXGNtE8kc.roa (hash: 3pabyOSkwOQBV5aehMnDFgC88a6tehv2gFnKarnZZow=)
3: XbFlHyCBOID9fwZAWWJUvKR3I1U.roa (hash: d1XG1P6bU90g/zeLcvn00HiiT+uT6qBEWhZA1fPBjyc=)
4: ivRHLwQWI9cVsBzw0XGDFOtrOBs.roa (hash: Ilz4iptmtb2hDf1QiYufOvE04YvbCXcLVA+AVaG4uKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2e:55:fa:44:95:01:92:f1:10:2f:71:9c:fa:45:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e71749f8029253901f71d4641039e90f1a97fa
Validity
Not Before: Oct 9 15:00:46 2026 GMT
Not After : Oct 10 15:00:46 2026 GMT
Subject: CN=5f0d10c7ed0e0a0dc2e9898b8aeeb6c173dc73c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6c:32:60:79:21:15:fa:6f:e7:0c:cc:ba:e5:
39:e8:10:e7:45:57:ca:07:65:98:c2:77:da:50:64:
cd:b2:fb:b4:2c:7d:e9:98:d6:5e:2b:93:92:cd:82:
74:ce:84:4d:f2:fe:2e:36:f1:57:ca:eb:c2:3c:9c:
56:50:70:4a:e4:49:f7:67:b2:bb:7b:0c:ca:4a:f1:
b2:78:bf:36:d2:14:1d:96:41:65:5a:00:fb:2f:e3:
82:d3:e3:78:02:6b:c3:35:b5:48:e1:27:01:a5:eb:
9f:fb:30:a6:ac:48:d6:16:98:07:c3:e8:2d:05:7a:
82:c7:71:20:b8:8f:2f:2e:ce:c1:d4:b3:48:64:92:
e7:fc:c5:0e:b4:4f:5a:91:34:62:9b:a8:90:5f:5c:
49:3f:7f:88:88:a4:7e:ca:dc:42:e3:22:d1:80:a3:
e5:7f:f5:a4:d1:f0:e7:33:6b:c3:c2:43:1a:3f:f3:
10:73:40:06:b4:a7:3d:7a:be:ee:32:57:71:27:ba:
8b:bc:e8:8d:ff:a0:e8:c3:7e:37:a9:6b:60:1f:0a:
15:7a:65:f5:dc:5e:71:5a:23:94:24:f2:44:f0:85:
19:f6:7b:e5:b1:5c:91:18:d1:7c:87:01:80:69:2d:
64:ee:3a:33:5b:f2:dc:a0:f2:fb:21:1c:17:64:45:
d5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0D:10:C7:ED:0E:0A:0D:C2:E9:89:8B:8A:EE:B6:C1:73:DC:73:C1
X509v3 Authority Key Identifier:
keyid:E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5a:84:13:a4:4e:9e:b5:2a:bf:80:11:08:0e:41:37:e2:8a:
b5:44:69:97:9d:e5:5b:97:18:c4:80:0b:c7:c2:59:be:ab:9b:
66:8e:7d:f5:93:15:48:33:1a:56:d9:f0:50:36:4e:aa:f1:de:
08:07:2b:e2:b1:2b:ad:4f:0a:5c:41:6c:07:af:47:3a:aa:ea:
c5:30:f6:61:37:a4:8e:48:54:5c:4f:70:40:fb:50:54:71:1f:
07:89:06:a2:e5:55:73:f9:c6:03:7e:f4:bf:60:c4:6b:2d:f2:
85:22:9e:9a:7f:22:00:3d:68:86:f2:04:d6:39:e2:69:25:46:
2a:f8:d6:d7:23:57:97:bc:a6:df:c0:a8:be:6e:ca:de:ae:43:
73:5c:b0:f6:89:03:0c:e4:4f:7a:3c:91:83:e6:50:65:d0:e9:
4d:73:38:09:27:8e:95:be:5e:4f:08:9e:e0:4a:54:12:74:21:
66:6a:ec:2e:85:c3:d3:32:d6:2f:5b:3b:3d:3f:be:11:c0:89:
9e:69:a2:6e:ad:53:f8:94:77:67:60:86:6e:dc:b3:17:7b:19:
ca:f8:7e:9a:e3:74:a1:e1:aa:4c:7d:0e:46:92:88:2a:f2:aa:
d5:7e:70:7b:0d:b6:b6:dd:93:d8:84:48:7a:f2:c0:ef:cf:e6:
a4:9b:d4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:15:33 2026 by rpki-client