Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.mft
File: FS1RhIHO0vhNARBPhx1k1EMB2zs.mft (raw, json)
Hash identifier: j11ePi0qzo7F0KQP1qyiYyEmzF1Xu1gET8EONLzE4YY=
Subject key identifier: 5D:DA:DD:0A:D1:15:F4:A1:02:3C:25:3B:9F:CC:35:D5:63:CA:32:B2
Authority key identifier: 15:2D:51:84:81:CE:D2:F8:4D:01:10:4F:87:1D:64:D4:43:01:DB:3B
Certificate issuer: /CN=152d518481ced2f84d01104f871d64d44301db3b
Certificate serial: 01A0C3A02590EBAEB34AFC5CF8245B69AD82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS1RhIHO0vhNARBPhx1k1EMB2zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.mft
Manifest number: E4
Signing time: Mon 21 Sep 2026 11:00:47 +0000
Manifest this update: Mon 21 Sep 2026 11:00:47 +0000
Manifest next update: Tue 22 Sep 2026 11:00:47 +0000
Files and hashes: 1: FS1RhIHO0vhNARBPhx1k1EMB2zs.crl (hash: Xwhnz9rKY0vwLBQYvtnNrd4D3WqyeQQvVQFws0u8WhE=)
2: Gn-JfhxZjfa_l49iGuP-mlcrUow.asa (hash: WdyF4QoD68QIqQ9eYYsah7gnKALS9GuIQ9LM9ZYre7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FS1RhIHO0vhNARBPhx1k1EMB2zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:25:90:eb:ae:b3:4a:fc:5c:f8:24:5b:69:ad:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152d518481ced2f84d01104f871d64d44301db3b
Validity
Not Before: Sep 21 11:00:47 2026 GMT
Not After : Sep 22 11:00:47 2026 GMT
Subject: CN=5ddadd0ad115f4a1023c253b9fcc35d563ca32b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:a1:9f:52:0a:b2:65:8a:e8:51:b0:11:78:
90:ac:58:eb:0f:40:8f:7e:d0:22:ed:f3:84:49:12:
8f:37:1b:a5:c5:cc:13:c5:89:27:2f:6b:ed:a7:69:
30:83:62:3d:c4:b4:96:72:b0:8b:93:ab:1e:d9:62:
13:82:94:ea:85:99:2a:db:4b:25:6a:ec:af:bf:4c:
51:3f:3b:ee:2e:e5:3e:35:bb:07:de:aa:f7:fb:42:
59:e6:6d:b3:e3:f5:9f:20:e4:5d:f8:2b:c0:a3:c6:
cf:5b:c5:fb:d9:cc:59:e7:f0:1b:51:ce:f9:22:ef:
10:a2:17:9c:e1:0f:ae:dd:33:6e:53:5d:19:d6:dd:
a4:1f:3c:4d:a8:81:fc:6c:d9:26:a6:05:dd:ee:c2:
be:b6:80:c2:aa:b6:dd:27:f2:1e:3b:4b:40:98:31:
46:06:10:da:f1:f0:1e:05:a4:11:c1:00:87:31:5d:
1b:90:61:3f:97:6a:bc:e4:9f:d9:b1:3a:bf:ad:cb:
27:37:0b:9a:e6:56:88:f2:ab:a1:10:53:ff:1a:8f:
a9:1e:e6:02:64:fe:0c:28:2c:2c:07:17:04:e2:de:
9a:cf:97:c4:b2:cc:f8:00:2a:57:61:18:ac:2c:5f:
6c:95:62:fc:d8:2f:a6:af:43:eb:9f:cd:97:81:a7:
ce:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DA:DD:0A:D1:15:F4:A1:02:3C:25:3B:9F:CC:35:D5:63:CA:32:B2
X509v3 Authority Key Identifier:
keyid:15:2D:51:84:81:CE:D2:F8:4D:01:10:4F:87:1D:64:D4:43:01:DB:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS1RhIHO0vhNARBPhx1k1EMB2zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:51:e7:32:40:ec:52:c1:c1:b5:f6:77:3a:a5:8d:ad:55:6a:
79:13:12:f7:75:77:cd:34:42:40:23:fb:ac:a5:34:06:be:4a:
43:0c:71:46:6b:14:9c:10:ce:2b:8d:db:94:aa:5b:7d:9b:d1:
a4:74:d7:09:fe:e4:75:0f:96:0a:9a:2b:a8:7d:4f:8b:63:85:
c6:1a:88:28:60:9a:3d:56:95:66:05:39:df:cb:96:13:2a:98:
7d:9a:69:88:ce:ee:91:62:5a:df:8b:8c:47:88:55:d9:5a:aa:
86:c1:8a:f5:f3:fe:ee:15:f9:76:a1:c2:ba:71:30:c2:8e:e0:
7f:24:45:b8:d0:8f:76:df:cb:fb:a5:94:de:2d:71:fe:c8:d8:
8f:56:ee:a6:5e:0a:a0:5f:4f:61:31:d8:35:c8:b8:18:8c:e2:
29:18:ab:3a:e6:2a:15:af:3d:f8:61:a5:f7:11:4c:36:14:35:
1d:5a:2b:2f:c0:9d:26:e8:70:7b:a5:e7:ca:ff:87:96:67:23:
aa:73:21:4a:20:8a:8d:22:df:aa:23:a3:71:ee:f1:94:5f:ee:
6c:e2:10:6e:28:ea:04:47:85:2d:af:b8:94:6a:47:15:6f:29:
73:17:7d:f7:fb:86:19:51:ef:17:1c:de:92:9a:57:ca:25:77:
d9:92:cb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:11:37 2026 by rpki-client