Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
File: 4uSsYiT-GURCDcOpjdY6uuSvfgA.mft (raw, json)
Hash identifier: 7rNcyMVtj3qyVDT7NgmfV8Hl6Grww3URT+ZiM9AhLtE=
Subject key identifier: 49:9E:33:D2:D4:59:8A:7E:D6:C0:4F:06:21:21:7C:3E:C0:D6:89:B3
Authority key identifier: E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
Certificate issuer: /CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Certificate serial: 01A1DD2727172C18DBB0171A11EB0C750734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
Manifest number: 1724
Signing time: Sun 15 Nov 2026 03:01:32 +0000
Manifest this update: Sun 15 Nov 2026 03:01:32 +0000
Manifest next update: Mon 16 Nov 2026 03:01:32 +0000
Files and hashes: 1: 1-TdHN98FGVFEolCtJz5D4Qn8oUU.roa (hash: XtPiDy65/rIGNdB1DOR8MKSXwZBD4oJVNpwQPU3xeNQ=)
2: 4uSsYiT-GURCDcOpjdY6uuSvfgA.crl (hash: 1vImgiTBoh9eT1I05sebqrssS1/5wb6htRFPtim4pmc=)
3: RWwBA-mE5T1DeX90DO491TVULLY.roa (hash: MNPZj/RKM4/KkE55j9h8f2IORoXisvl/h9C3t/o3a6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:27:27:17:2c:18:db:b0:17:1a:11:eb:0c:75:07:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Validity
Not Before: Nov 15 03:01:32 2026 GMT
Not After : Nov 16 03:01:32 2026 GMT
Subject: CN=499e33d2d4598a7ed6c04f0621217c3ec0d689b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:15:08:94:ea:94:db:80:69:c4:dc:f2:84:41:
2e:35:8b:47:d3:4c:9f:30:e2:31:d3:1c:d5:55:3d:
6f:32:8b:16:b0:6a:78:36:f3:aa:69:f6:70:94:0d:
5d:1a:78:17:fd:d4:6f:36:bc:f5:60:0a:ef:75:cf:
5f:ec:45:d9:ad:e4:45:8f:2e:79:30:44:11:46:bf:
56:38:25:5e:94:96:c8:d6:57:ba:ee:18:89:3f:48:
7e:46:29:68:34:fc:ef:80:14:8a:4b:9f:31:b1:02:
2d:05:6c:a9:d1:6a:00:97:cf:59:bb:85:6b:af:3c:
3a:6d:29:9c:c5:09:18:43:72:93:fd:70:a6:bb:5c:
e4:60:35:9c:12:df:78:e9:60:5b:55:be:35:ff:c5:
64:25:a5:9d:d0:34:ed:02:a3:0a:5a:9c:85:76:be:
af:22:1e:a2:df:80:10:52:d8:93:ff:7a:24:7d:9f:
a2:05:26:30:56:6b:3a:9f:a7:09:03:89:21:fb:28:
5c:bd:9b:80:04:35:5c:14:ff:fe:78:e0:4f:59:f9:
e3:88:81:46:67:a8:10:93:f0:87:31:74:2e:b5:01:
07:71:69:24:36:4d:14:d8:a3:c5:0f:a3:54:52:e4:
08:a4:54:cb:f7:fe:2e:43:cc:02:4c:1e:22:e1:cf:
05:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9E:33:D2:D4:59:8A:7E:D6:C0:4F:06:21:21:7C:3E:C0:D6:89:B3
X509v3 Authority Key Identifier:
keyid:E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c4:3c:73:d1:08:18:1b:b0:cd:26:1d:b8:84:9e:0a:5c:df:
ef:24:16:98:8c:85:36:72:75:c9:e8:fd:5f:1d:a1:cc:67:46:
30:9f:bf:4e:f6:5d:14:cd:18:3e:cb:59:cc:eb:fd:47:2c:09:
bb:95:fb:f4:de:ad:7b:5a:13:18:e0:68:14:8c:62:ea:c2:dc:
8c:d6:d9:5f:5f:47:a8:8f:1a:2f:c3:4e:a7:73:c7:44:b2:b2:
1f:41:54:72:36:18:c8:92:11:8e:7c:e3:f8:24:d2:8a:6e:9d:
09:56:89:b6:1d:ef:f6:32:15:ca:1c:95:ae:90:6e:53:ec:f7:
06:1c:b8:de:86:7e:30:73:77:6d:bc:16:87:8a:fc:b0:94:8d:
e1:73:83:35:8a:c7:b6:9c:c3:5d:28:b2:b7:c7:d5:70:6f:71:
74:85:02:83:40:f0:54:3d:97:68:6d:41:e8:d2:27:10:64:ed:
7c:64:d6:1a:c5:91:f0:04:35:1a:9d:19:12:00:5e:02:d5:3c:
09:10:e1:fc:b5:95:49:ea:50:3b:c9:b6:5c:17:be:20:a1:b0:
b6:cf:e9:4b:a4:ce:14:42:8c:6f:4d:c3:2e:66:bf:26:6c:04:
9a:b7:90:5a:15:af:a8:39:ae:61:13:60:8d:ea:57:84:28:c0:
46:6a:ab:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:08:28 2026 by rpki-client