Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
File: 4fP23EYQ9sm7qkUyERc45JO2rfA.mft (raw, json)
Hash identifier: 6W9z6zwP13i1gcPXFHEeIAoIRfNSx5p1IujCuSKIg/k=
Subject key identifier: 95:F5:42:62:A0:96:E8:21:67:04:6A:FF:C0:7A:C7:C3:B6:13:6E:31
Authority key identifier: E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
Certificate issuer: /CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Certificate serial: 01A0C5C525981B0242322CA8C89888614BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
Manifest number: 0868
Signing time: Mon 21 Sep 2026 21:00:26 +0000
Manifest this update: Mon 21 Sep 2026 21:00:26 +0000
Manifest next update: Tue 22 Sep 2026 21:00:26 +0000
Files and hashes: 1: 4fP23EYQ9sm7qkUyERc45JO2rfA.crl (hash: 1flbtM28g17wPfpXhHcQ9Tmi1Wa3zYyuJXpnYk9Ioq4=)
2: Ev9DIl3UcKO2QOG-vO3Xbh6afQ8.roa (hash: imyx+MqhErllzPgURUbLOjPqBlQ0hxwFitun79GI6bQ=)
3: pIH-PyJ-S7KYRBMhx3HzyVyBgpM.roa (hash: 1cLs+Wdw+wnP8h4XUUBLHG3PCH085TENzzZDNYgitoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:25:98:1b:02:42:32:2c:a8:c8:98:88:61:4b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Validity
Not Before: Sep 21 21:00:26 2026 GMT
Not After : Sep 22 21:00:26 2026 GMT
Subject: CN=95f54262a096e82167046affc07ac7c3b6136e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:46:c6:d6:16:9d:57:5b:bc:b0:4a:3d:85:
50:bf:49:08:7c:90:29:57:e0:20:b0:ea:f4:23:2f:
01:b0:a8:ce:c8:2b:27:73:8b:c0:4f:a9:53:72:ef:
c3:45:60:0a:f8:44:a9:ba:11:18:5d:3b:75:80:d7:
aa:ce:f4:53:1c:b8:00:ee:11:c7:cc:d2:ed:44:73:
f5:fe:e8:ea:83:fd:e4:57:91:ef:23:18:5f:7d:a9:
a3:6c:9b:f6:57:75:96:54:ac:18:da:bb:98:fb:47:
7b:e9:f3:dc:87:b8:cc:39:47:b6:2a:fb:ab:ee:8e:
49:27:6e:6b:48:82:cc:29:4d:d5:2b:5b:0f:0e:61:
bf:de:96:07:59:56:d9:79:b4:27:32:99:92:f0:15:
4b:dc:a0:85:cc:9a:df:16:40:8f:3e:bc:3a:57:18:
19:09:0f:f8:93:b9:ad:a9:77:30:21:10:17:30:63:
a9:b3:47:75:3d:33:fd:e2:a9:bf:64:c0:9a:ab:db:
82:5e:0e:22:d7:78:26:a8:7b:14:de:ae:10:75:c9:
09:26:99:91:c8:e5:3a:04:ba:c7:3c:a5:b9:13:8b:
ec:c3:18:44:87:6d:e4:46:45:2f:8d:48:f6:6d:c6:
6c:f4:8b:1a:eb:c0:f0:ef:65:77:52:85:50:21:64:
9a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F5:42:62:A0:96:E8:21:67:04:6A:FF:C0:7A:C7:C3:B6:13:6E:31
X509v3 Authority Key Identifier:
keyid:E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a5:9e:40:7a:af:8f:05:22:43:f7:90:62:bd:28:41:80:c4:
f9:a9:a4:39:a8:23:53:09:23:2c:4f:be:6e:11:bf:af:32:06:
c0:70:35:84:c2:96:c3:2b:42:ac:63:c2:ec:75:32:59:96:44:
19:93:f2:cd:a2:bf:86:26:b4:6f:e3:db:f8:63:b9:59:e8:a0:
92:de:94:15:5c:e3:a1:1c:3a:4b:64:d5:0d:d8:fe:f3:70:87:
f6:50:13:7a:3f:55:15:fb:d0:05:02:2a:4a:20:09:ac:ce:f0:
8f:3b:29:15:ad:4e:05:8f:76:0b:0e:02:f5:e9:35:27:12:55:
18:b0:60:7d:f0:b9:07:fd:49:b5:53:90:d7:32:4c:d4:f1:3c:
53:55:9c:a1:a6:d3:75:a1:be:57:74:37:4b:02:50:da:3c:36:
6e:fa:63:6b:f6:b0:1b:55:09:f5:ab:a4:5d:dc:91:87:ec:f5:
51:8e:ca:5c:ad:c3:53:6a:61:0b:0e:ca:30:60:41:53:3c:34:
0b:23:6a:cd:28:60:35:ed:b1:89:32:d4:e0:37:ea:73:c3:0c:
b4:33:59:8f:e2:02:00:74:f5:b8:b5:42:4d:0c:f5:74:be:a6:
4f:5d:13:8f:15:e6:b2:c4:ca:82:40:e9:57:1e:52:b7:6f:2e:
ad:bc:9b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:05:50 2026 by rpki-client