Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
File: 4jDeX9PCRVFzumlqmUQdliDYHTg.mft (raw, json)
Hash identifier: Vi0I4yxesBRaV0hrGIBnckrkdx2nWdRXPhBw7jsyzl8=
Subject key identifier: F4:46:A5:83:4D:D4:B4:B5:96:7E:8A:DC:7B:93:6B:00:03:41:B7:43
Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38
Certificate serial: 01A0C66ABE8CBD654D49FC7B312F88FFCC4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
Manifest number: 107E
Signing time: Tue 22 Sep 2026 00:01:19 +0000
Manifest this update: Tue 22 Sep 2026 00:01:19 +0000
Manifest next update: Wed 23 Sep 2026 00:01:19 +0000
Files and hashes: 1: 28qciXJsiY_HinbmOHfVFSyJkQk.roa (hash: UYVCwyOsNlY276CdR8TOzS4Rj720VMSX5696EeMarho=)
2: 4jDeX9PCRVFzumlqmUQdliDYHTg.crl (hash: PFoDjv5Lchjcz6Yxh2s9GvAa6Y6ONIn/ZzXAJPgym3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:be:8c:bd:65:4d:49:fc:7b:31:2f:88:ff:cc:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38
Validity
Not Before: Sep 22 00:01:19 2026 GMT
Not After : Sep 23 00:01:19 2026 GMT
Subject: CN=f446a5834dd4b4b5967e8adc7b936b000341b743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:d8:fd:bf:dc:91:b5:56:93:9e:ba:52:3f:
84:22:db:75:81:b8:18:07:5a:e3:64:ad:67:d7:1b:
b5:0d:4d:e3:0a:fd:94:b7:40:5b:22:5c:0b:6c:55:
ad:0d:24:0a:bc:16:a0:bc:c8:fc:c5:4e:ae:d1:92:
df:4a:f2:55:02:2b:73:cb:2c:64:26:b1:37:72:97:
4d:27:8b:0b:fe:7b:9e:c5:30:39:75:06:7b:66:cb:
3d:97:5b:5e:22:02:26:a0:f9:c3:e5:2c:47:36:42:
40:58:6c:08:c4:8f:af:e9:6e:fa:db:fb:85:e2:52:
60:f1:28:0e:c0:c7:7b:a8:54:7a:45:80:79:c8:40:
4b:ac:45:3d:ee:3c:60:53:4f:03:b6:0c:2f:78:fb:
91:92:fc:dc:61:3c:f0:c3:27:a2:68:fb:2f:cc:8d:
86:82:d5:8a:ad:c8:fa:44:b5:a7:da:8d:4b:99:45:
55:c8:4c:8c:dd:de:72:94:36:b6:f8:22:9d:66:97:
d7:8b:61:ef:35:64:7c:86:cf:90:b3:55:dd:7a:d3:
83:d8:9f:21:65:1d:49:23:e7:6a:49:49:d8:6e:79:
35:f7:65:b7:ec:75:37:47:33:88:db:e4:02:a0:66:
ec:10:fe:84:e1:eb:23:38:c7:5c:1f:f5:29:8d:79:
71:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:46:A5:83:4D:D4:B4:B5:96:7E:8A:DC:7B:93:6B:00:03:41:B7:43
X509v3 Authority Key Identifier:
keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:19:31:17:e3:6c:af:5f:0d:5d:bf:a8:21:bc:69:33:b5:d8:
44:b8:b3:07:6c:de:45:41:ef:79:4d:42:ae:6d:81:02:31:5d:
e8:20:0c:25:00:d0:b6:90:f5:74:e6:73:a7:36:05:a9:0f:f6:
7c:95:6f:c3:1b:f5:ae:73:f0:ec:16:e5:6c:c9:c9:5a:05:27:
ae:71:91:5f:10:e2:65:da:fa:51:6a:4c:60:04:f4:bd:92:d8:
17:55:e4:95:fa:25:49:27:30:3f:57:e2:74:1f:f5:6c:6c:ee:
cb:7b:6f:de:0b:ff:21:3c:25:4c:48:b3:20:b1:91:49:b8:41:
4d:02:e5:c4:e2:95:80:bb:ef:a5:36:0e:3c:c1:4a:c5:e4:a1:
c3:87:d7:80:fb:02:88:74:4e:3b:d1:71:81:68:85:a0:a1:1c:
bc:6c:24:02:9f:e9:32:99:c6:fb:99:7a:bd:cc:09:4b:12:57:
8e:71:c7:62:71:b4:a4:2f:5c:44:16:1b:69:69:80:98:c5:42:
31:3e:fc:4f:91:71:c9:6b:5e:08:1c:39:5b:f7:1d:aa:86:38:
7e:fe:e9:0b:1e:d5:e0:c1:c7:fa:52:28:21:c2:18:7a:a4:29:
ad:59:4d:74:1e:bc:b7:4c:c2:86:45:3f:a8:7f:98:11:d8:4d:
8e:18:d5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:31:15 2026 by rpki-client