Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
File: 4rWwjcQz-On3dyfLUfa6JL3V85o.mft (raw, json)
Hash identifier: 4gCjsEgGvfU8q8r/J8XwLJ2GL5uu9pHn340fXIB6JH0=
Subject key identifier: 58:E8:9C:26:F0:93:2C:97:FB:54:B3:14:06:E2:07:6C:EA:41:6B:6D
Authority key identifier: E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
Certificate issuer: /CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Certificate serial: 01A0C9342FE5E6522D2C8E752F2606C5F753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
Manifest number: 0A82
Signing time: Tue 22 Sep 2026 13:00:35 +0000
Manifest this update: Tue 22 Sep 2026 13:00:35 +0000
Manifest next update: Wed 23 Sep 2026 13:00:35 +0000
Files and hashes: 1: 4rWwjcQz-On3dyfLUfa6JL3V85o.crl (hash: abzAZSezdl+hwai2ibLxr2sj/R7rdv1OiMG+imgLPRY=)
2: BxZPTQDdLKKz_KzmvAmu63Br_30.roa (hash: RJzmMfXa1i3UOXt5apo9yzIAminXwO5ap7oBJzJBEJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:2f:e5:e6:52:2d:2c:8e:75:2f:26:06:c5:f7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Validity
Not Before: Sep 22 13:00:35 2026 GMT
Not After : Sep 23 13:00:35 2026 GMT
Subject: CN=58e89c26f0932c97fb54b31406e2076cea416b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4a:bb:41:a6:b3:dd:a0:0f:ef:8e:28:19:d0:
73:ce:8c:85:66:34:c3:bd:0d:62:5b:79:1f:b8:e1:
4c:28:38:55:b4:4a:68:df:6a:c0:46:ab:5a:ce:48:
4b:62:c7:8b:d5:c7:4d:6f:7f:29:e9:d6:53:24:fa:
c4:af:54:e2:a7:e6:6e:77:7d:75:91:73:6b:52:92:
be:7b:6a:4e:34:c9:a9:5c:65:51:ac:24:65:f2:9b:
9c:24:ff:a3:95:45:69:00:b1:93:e5:93:58:e2:ed:
37:1c:9d:b2:8a:4b:a3:0e:f9:53:37:70:a5:7d:11:
36:c1:b5:5b:44:ab:1d:b2:07:1d:24:61:f4:ba:2e:
be:71:88:c3:44:47:bf:3a:1b:38:bc:a0:e5:cc:fc:
c5:08:a1:c0:ad:b6:92:27:a9:c7:81:71:4e:a3:76:
92:65:2a:f7:5b:88:5f:e1:0c:c0:38:f3:11:28:bc:
1f:4d:be:aa:8e:fc:4b:e7:33:d7:d2:3f:82:29:eb:
3d:21:fe:92:da:41:35:4c:4f:4c:a2:8c:57:88:a6:
9c:01:79:51:20:ca:9a:92:e6:ad:97:3e:47:d9:06:
ce:3b:2b:7c:8d:47:b0:e7:42:a8:f9:dc:c6:42:53:
08:8d:e3:87:37:2b:58:73:29:b0:68:64:ca:4b:87:
46:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E8:9C:26:F0:93:2C:97:FB:54:B3:14:06:E2:07:6C:EA:41:6B:6D
X509v3 Authority Key Identifier:
keyid:E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:22:cf:e5:19:11:8a:14:3d:3f:0c:69:49:ac:5e:c9:53:af:
4e:3a:e0:6e:74:6f:b8:04:1c:52:4d:48:66:50:62:c3:ae:bd:
cc:92:2c:6b:22:a4:25:54:60:8f:d7:36:7e:69:37:01:43:4e:
1c:bd:e4:f3:27:f5:3a:33:fa:4c:e6:2e:73:ba:0d:31:ad:5e:
e6:fc:1f:f1:5e:ce:40:b5:14:56:e8:b9:19:5a:b9:a5:64:0e:
7b:5b:a9:54:b2:78:4c:84:ad:01:cc:e2:11:2e:ad:87:bc:99:
b4:ac:c1:b6:1e:aa:36:f3:4d:32:74:78:9b:e7:ad:dd:61:71:
16:1e:99:60:d4:41:6b:4e:a4:63:61:5a:21:ea:f2:5e:4b:7b:
eb:99:6b:75:0a:32:6c:d7:d8:c1:56:90:6c:65:ae:09:b1:46:
b0:94:2b:b5:20:97:5e:11:41:2e:92:78:c1:e2:de:b5:7b:37:
42:6d:96:73:d1:74:4c:a3:7a:b8:b4:2c:eb:be:8d:08:6c:07:
1c:2f:24:51:0e:f6:bd:49:9f:f9:00:c3:fa:8f:b3:79:94:f2:
e8:d3:07:a5:54:13:dc:5e:99:12:b8:2c:44:5a:5c:2c:43:d2:
f7:7c:e8:6a:32:e9:ea:ed:7a:d7:26:d2:e6:e4:b5:03:50:57:
38:40:04:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:41:49 2026 by rpki-client