Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
File: 4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft (raw, json)
Hash identifier: aMkir66l3Mdq5vFbOUEK9QZxEvY4joLY/EgRP0VEufo=
Subject key identifier: 18:F4:FC:7D:C8:15:C4:0A:2B:E2:64:3A:A1:5D:43:51:32:04:AB:FD
Authority key identifier: E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
Certificate issuer: /CN=e31722d79bff4384a597cb544d9e7974490d8734
Certificate serial: 01A0D2005FC8DC0140F1C92ED00F272F457D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
Manifest number: 133B
Signing time: Thu 24 Sep 2026 06:00:34 +0000
Manifest this update: Thu 24 Sep 2026 06:00:34 +0000
Manifest next update: Fri 25 Sep 2026 06:00:34 +0000
Files and hashes: 1: 4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl (hash: qQbTGtcE5oqUdhq1F6HltVtHsJaCAt8QQTfDUQi4u4w=)
2: DN7ZfyoDKyJXUkj1EC6pJ1I4DkQ.roa (hash: bY5wbQ98GBM8x3W74YxZg+qztKUip/POgTeTbjHHMZI=)
3: p6fcvhDFcw8Oq1fwe3BO8PpHz3U.roa (hash: 9OCWuqN8cdwaFpWbH6S/GLnMMyvjYjVk46dDsDdpR/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:5f:c8:dc:01:40:f1:c9:2e:d0:0f:27:2f:45:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31722d79bff4384a597cb544d9e7974490d8734
Validity
Not Before: Sep 24 06:00:34 2026 GMT
Not After : Sep 25 06:00:34 2026 GMT
Subject: CN=18f4fc7dc815c40a2be2643aa15d43513204abfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:d3:51:a7:0d:36:72:d7:dd:17:e3:e8:cc:
2f:13:9b:1b:1e:62:48:07:77:d7:9a:84:25:1c:f1:
f2:89:9f:58:0b:db:69:61:8d:0f:51:97:1c:91:29:
38:10:f3:dc:7c:58:77:a7:a3:ab:7a:de:90:71:09:
87:73:b2:7b:2c:7a:4f:b0:f3:44:58:89:8d:c1:28:
be:ce:1f:0c:4f:c0:fb:88:df:af:b8:2d:51:b7:42:
04:5d:ad:d8:a1:c5:55:2a:db:f8:e9:68:7c:ac:7f:
8d:d2:7b:15:ec:2a:96:49:0c:99:9b:2f:6f:ab:ae:
fd:f4:74:43:3c:ec:c1:d1:5e:af:73:67:87:d7:a2:
86:22:b7:27:63:da:69:b3:ae:f5:37:5c:c0:72:94:
09:32:53:5c:d5:39:c5:3e:73:fa:a7:13:0f:48:56:
63:e5:08:b0:b2:31:09:52:87:63:2f:5b:78:38:23:
3e:03:0a:46:b9:03:86:ef:d2:c3:da:26:13:0d:30:
8d:dd:4e:c0:70:87:4c:1a:73:d6:85:e9:a0:32:cb:
77:49:82:1b:e9:1d:4a:5b:58:db:5e:05:5a:a1:3c:
33:5e:09:76:ec:fb:76:23:c2:a8:10:ef:70:a5:99:
43:c8:6d:98:cb:0e:30:e3:e2:85:70:5b:7d:13:8e:
46:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F4:FC:7D:C8:15:C4:0A:2B:E2:64:3A:A1:5D:43:51:32:04:AB:FD
X509v3 Authority Key Identifier:
keyid:E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:fe:6b:bd:76:d7:f0:f1:2f:15:a4:a3:79:fd:17:fa:d3:c1:
37:c2:30:32:b4:fb:7c:2e:6c:e1:07:f1:e2:f6:d1:9b:a9:03:
db:ed:02:ce:f9:27:67:32:77:52:3b:8a:27:0f:8f:49:87:a0:
1f:fb:6e:73:a1:3a:27:3f:5b:81:fb:2a:b9:36:c6:20:8a:22:
dd:16:36:69:fd:f8:a7:ed:9e:de:38:39:3e:a1:5e:7a:dd:a6:
dc:93:24:5a:dd:2c:8c:a8:ba:17:e4:d4:3c:08:f7:71:65:53:
fa:87:52:d0:8b:a2:cd:3e:75:62:01:64:9f:4f:55:59:17:98:
2e:d1:56:84:f2:1b:38:d6:54:92:b3:7c:e9:44:82:b9:c8:86:
62:56:08:b1:d8:20:7a:23:45:bc:ac:26:a1:90:0f:15:22:d7:
9c:c6:a9:eb:78:d3:50:47:e7:0a:16:f1:1a:54:dd:d7:36:10:
97:c4:a7:f9:34:69:87:92:bc:2e:ab:b9:9c:01:55:15:9a:14:
4f:5b:3a:5e:9f:d5:28:3f:d9:ab:d6:07:8d:15:2a:8d:30:84:
9b:b5:eb:a7:ca:0d:66:32:61:c2:58:e3:3a:dd:20:33:26:92:
95:08:9d:36:6d:03:11:b0:5d:93:b1:72:bb:30:ca:f6:88:c8:
09:c0:d8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:22:44 2026 by rpki-client