Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
File: 4OkqeIpBBX0ndk8W87HSo-9jRdY.mft (raw, json)
Hash identifier: 4hP4Snuf6bw/FgPb/7jlWLvFHpz0sxOYeNXaCh7W4Zs=
Subject key identifier: 39:2B:FE:C8:A6:17:67:AE:00:B0:D1:0E:DF:1A:DA:76:8C:B3:BF:0D
Authority key identifier: E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
Certificate issuer: /CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Certificate serial: 01A0E8889D07F31B13E4258412198ACF26D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
Manifest number: 1A78
Signing time: Mon 28 Sep 2026 15:01:02 +0000
Manifest this update: Mon 28 Sep 2026 15:01:02 +0000
Manifest next update: Tue 29 Sep 2026 15:01:02 +0000
Files and hashes: 1: 4OkqeIpBBX0ndk8W87HSo-9jRdY.crl (hash: noKYSXEX+LWdsV5++gQSqQsKXnIA95qT2yS1db9HnLU=)
2: Dv6DzYWC8QD9B_MZto_ESNK4j6k.roa (hash: punip1kHRpKApQYHrsUHwLPlb8qszTQ5w8o2U1ESN+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:88:9d:07:f3:1b:13:e4:25:84:12:19:8a:cf:26:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Validity
Not Before: Sep 28 15:01:02 2026 GMT
Not After : Sep 29 15:01:02 2026 GMT
Subject: CN=392bfec8a61767ae00b0d10edf1ada768cb3bf0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9f:df:12:b0:23:26:6c:df:c1:0f:e5:f4:19:
b6:78:11:0a:3c:a6:a5:97:db:37:3a:d7:fc:d2:f5:
88:9f:ad:a7:86:04:c5:67:bb:c5:63:ed:fe:3c:6f:
5c:a6:48:ad:be:15:70:49:d7:2e:30:ab:69:aa:f1:
7e:12:58:32:52:1d:f9:6d:7a:62:56:cf:ed:9e:21:
a0:0b:e1:34:90:5f:bd:3f:fb:63:98:7f:ef:e3:fc:
55:ad:56:fb:25:b3:02:aa:54:64:fb:ef:13:fc:30:
c3:99:f3:04:ea:da:66:0b:bf:08:19:c3:8c:77:0c:
b5:db:da:25:8a:4b:4a:ce:73:72:37:91:96:e2:b8:
e4:26:bd:3f:70:5f:d6:8f:0d:97:8e:0b:c9:f1:ec:
d9:58:49:9b:6b:67:6b:19:d6:3f:aa:d8:0f:c4:bd:
02:ce:70:76:c4:bf:66:2d:64:2a:f8:d1:39:21:9e:
c5:72:43:85:7e:05:41:ca:4c:c8:a1:a7:c3:96:9a:
94:a5:87:e6:89:84:12:e2:b5:50:9f:43:eb:56:2c:
a0:fa:82:9f:a7:42:70:47:bf:15:89:32:0b:df:12:
53:9a:89:be:f3:0b:db:6b:20:2c:96:3c:b1:0c:9e:
d6:a4:f3:b7:8c:4c:8e:a4:78:26:65:55:c6:e0:d0:
b7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2B:FE:C8:A6:17:67:AE:00:B0:D1:0E:DF:1A:DA:76:8C:B3:BF:0D
X509v3 Authority Key Identifier:
keyid:E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:33:db:a5:7e:5d:e6:d3:95:f0:86:68:5c:a2:cb:1d:89:30:
72:0f:18:38:a8:dc:44:0b:6f:8e:55:52:97:07:bf:a8:af:47:
ae:c5:ce:d5:d8:31:09:a2:f0:f3:f5:fb:24:09:c8:aa:4a:7b:
cd:79:e4:07:31:8b:28:ea:e8:9b:54:61:28:2f:d1:9d:1a:fc:
7d:17:5b:9d:ce:93:80:53:13:a3:c9:7f:c8:5a:90:db:61:1d:
65:6f:c9:f3:fb:d7:75:ec:98:7c:6c:e5:12:ff:3c:f5:53:c7:
cf:75:ae:46:40:07:b9:d2:2e:e0:3e:9b:48:6b:16:7a:9a:3c:
0f:e0:f0:85:86:10:00:de:ee:cf:8d:28:ed:4b:d9:e0:d2:f5:
bb:26:87:90:b4:ff:2e:23:9b:b5:bb:52:87:51:c3:c2:da:13:
cb:42:0f:2a:a6:77:4e:4b:f0:6c:a2:a9:3e:0a:ed:3d:af:13:
55:52:fe:e8:37:ad:76:38:0c:5b:9b:9d:fb:a2:d1:03:3c:61:
6c:4a:bd:ad:06:a1:0a:b9:37:94:b4:5c:86:b1:b5:74:d4:70:
68:17:3d:ae:ef:fc:e4:02:58:4c:e6:e5:9a:d2:e6:c5:fe:ae:
8f:b2:96:8e:85:0c:96:d9:e7:ca:83:b2:d8:22:0e:ff:8c:e3:
c2:bb:da:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:18:50 2026 by rpki-client