Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
File: 4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft (raw, json)
Hash identifier: i2inMplVFTNfdEpyW5k2RYlexLuDH0WP+WcVITH4hQs=
Subject key identifier: 9B:0A:01:E2:90:EC:68:85:95:86:64:B3:B9:4F:4A:97:FC:37:C4:6C
Authority key identifier: E3:1D:A2:BA:05:7E:9A:54:A6:17:0F:25:7F:F9:78:56:DC:97:E0:68
Certificate issuer: /CN=e31da2ba057e9a54a6170f257ff97856dc97e068
Certificate serial: 01A0C746B8F710462D23EFFF8256D355F9DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 04:01:35 +0000
Manifest this update: Tue 22 Sep 2026 04:01:35 +0000
Manifest next update: Wed 23 Sep 2026 04:01:35 +0000
Files and hashes: 1: 4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl (hash: DgCq9fxGrIyqIg3ij3IbLJjB6U+9uxEHMQs5dxpj2Tc=)
2: limcXQL5irLoJkXVtLb_HxKT9Cc.roa (hash: aQ8BkEO1FUkjaNo1mk5XdjSymKmGcpWue4kgaoY47rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:b8:f7:10:46:2d:23:ef:ff:82:56:d3:55:f9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31da2ba057e9a54a6170f257ff97856dc97e068
Validity
Not Before: Sep 22 04:01:35 2026 GMT
Not After : Sep 23 04:01:35 2026 GMT
Subject: CN=9b0a01e290ec6885958664b3b94f4a97fc37c46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:69:95:8a:ca:55:47:f8:53:95:57:e4:8d:90:
0d:9a:70:b4:ed:b1:0c:57:59:8d:ea:2e:42:9e:d3:
e8:bc:c1:aa:46:08:39:76:cc:49:2a:ec:0b:06:c0:
18:a7:95:f8:58:36:6d:84:ad:91:4c:23:b6:04:56:
f6:e1:88:49:5d:ad:46:68:ab:f2:ec:c8:bb:42:53:
d3:05:cd:6b:9d:aa:a0:84:8d:e0:43:f3:ca:f4:61:
56:c9:8b:ef:24:2e:05:65:b0:e4:89:1c:7a:fe:09:
80:bc:17:39:b3:cd:7f:93:49:05:cf:f5:bb:24:9d:
79:a2:76:5f:a7:c9:a7:40:9a:1d:ad:54:1c:0a:8b:
82:fe:c6:f8:82:63:5b:34:b9:8d:13:1d:64:a2:b1:
a2:ab:c1:91:ba:a7:aa:4c:dd:6c:8f:b0:63:84:e0:
4b:da:02:81:38:b3:93:c1:3c:08:f5:32:3e:4d:a8:
0c:bc:5a:82:fd:74:b7:c1:3a:c3:37:be:9f:76:d9:
c1:7d:f6:4b:11:39:f9:4a:ad:dc:fe:5b:1b:66:f9:
e3:55:4c:ab:c2:da:a1:7b:58:93:5e:ff:d3:a6:00:
85:40:99:84:bd:b8:c1:47:c1:61:23:89:21:b0:b8:
4e:08:b7:a2:9a:5e:e2:0d:82:9f:a9:d9:b5:f1:4f:
48:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0A:01:E2:90:EC:68:85:95:86:64:B3:B9:4F:4A:97:FC:37:C4:6C
X509v3 Authority Key Identifier:
keyid:E3:1D:A2:BA:05:7E:9A:54:A6:17:0F:25:7F:F9:78:56:DC:97:E0:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5b:b1:9a:ef:b3:bb:d1:49:0b:c3:99:9c:39:62:39:60:5b:
f3:9a:ab:24:a2:63:5e:46:d2:58:52:f8:e8:f5:9b:1b:a2:a1:
ee:68:0e:ec:b5:0f:9a:df:41:1b:99:a9:18:b2:84:8e:04:31:
d3:72:d2:6c:a2:e4:15:cc:de:fc:51:1a:e0:5b:a0:40:4d:88:
81:8e:f6:a6:a2:06:94:40:a3:f4:f6:d7:13:c9:6c:c7:15:ce:
f9:ae:a4:50:9e:20:87:b2:60:2f:0f:a5:46:6c:80:7d:8f:a3:
03:04:5d:2d:c6:e2:92:b2:1e:9f:1e:06:8d:70:83:b4:dd:45:
7b:60:c8:e0:78:7d:35:ef:8e:57:10:ef:65:66:ae:33:5d:24:
55:12:ce:9a:13:f4:0e:39:12:97:ba:07:2c:2e:3f:69:5a:06:
93:ee:78:8d:b3:d1:36:b6:cc:7f:02:16:74:c2:45:5b:2f:04:
01:5e:cb:fa:4c:42:dd:40:0e:9b:50:2d:47:61:d0:29:be:dc:
53:e6:dd:d1:01:ca:b3:9f:11:8b:5e:0a:f5:46:89:33:4a:5e:
b3:1f:ed:58:46:e3:1e:ee:a5:62:79:c8:02:b0:c9:c4:28:63:
c0:55:a0:d9:b7:00:04:8c:68:c1:fb:37:57:4d:9b:d3:8d:e4:
8c:9a:53:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:27:53 2026 by rpki-client