Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
File: 4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft (raw, json)
Hash identifier: WZY4a5PLpYNrLpsxufFF640iHhZIrC+UKlAIqPd61vo=
Subject key identifier: 70:A0:AD:65:F3:12:8D:88:03:6C:4D:12:7A:2F:44:42:5E:C0:91:16
Authority key identifier: E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8
Certificate issuer: /CN=e1d15e36cdb388276f04a606b02266260e2a19f8
Certificate serial: 01A0C88F1B3029F7A32E287258F210D26668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
Manifest number: 0349
Signing time: Tue 22 Sep 2026 10:00:16 +0000
Manifest this update: Tue 22 Sep 2026 10:00:16 +0000
Manifest next update: Wed 23 Sep 2026 10:00:16 +0000
Files and hashes: 1: 1-IhTXgGcHna0z1HZ0_9dxgp5QcU.asa (hash: 6m+rYZuTH6ZFe+0jPO7RV/O142SmgbtLoMG4QGsoGg4=)
2: 4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl (hash: 0JeK+ss4/WOHaFRlI/aTVNBbzRAgBn6L67bUukjYYy8=)
3: YQM4WIIUNaL9-PCZN-_YZ52UVSY.roa (hash: 6uJ//EEMyi6s/7I5zLsMnq2mwES70jTLQRVEP2+rnOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:1b:30:29:f7:a3:2e:28:72:58:f2:10:d2:66:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d15e36cdb388276f04a606b02266260e2a19f8
Validity
Not Before: Sep 22 10:00:16 2026 GMT
Not After : Sep 23 10:00:16 2026 GMT
Subject: CN=70a0ad65f3128d88036c4d127a2f44425ec09116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d5:b3:d9:77:af:12:7b:23:c5:50:2d:fb:c1:
38:a1:93:87:69:bb:7d:8b:32:5e:87:4b:31:21:9d:
36:45:e5:94:a5:eb:f6:26:c9:2d:02:a0:d6:46:fd:
e5:02:2c:7a:2a:f4:75:43:b9:c9:83:cb:fe:dd:44:
a1:18:a8:88:22:94:7a:af:fe:15:86:d8:52:a0:4b:
84:2e:70:e8:6a:ff:fc:bc:68:ea:98:70:f2:ac:81:
6e:b1:9a:1d:bd:b6:b8:26:0d:64:e3:dd:3c:9b:06:
c9:c7:bf:ba:5f:81:1c:e4:39:6d:26:9c:19:a4:94:
83:c6:0d:e4:aa:79:28:93:d6:9f:e8:48:d9:1e:57:
61:81:50:1d:b3:36:93:bc:9b:6c:c5:f7:12:7e:9d:
1a:91:ea:77:12:c2:d2:9d:7f:7a:7b:d9:76:ce:f0:
2e:cd:eb:e0:fb:4e:3b:4c:66:a9:fc:7e:66:12:dd:
c8:a6:cf:3c:f0:5f:b7:4d:1a:14:c3:39:a5:49:85:
01:57:d7:b6:83:11:db:a9:9d:77:b2:a3:7a:63:7d:
61:6e:e7:3e:65:16:14:78:0d:d8:ce:d0:06:e3:20:
47:34:22:bd:67:8c:a7:1a:01:ee:78:78:bf:da:ff:
7b:75:96:d8:4e:6b:8c:f1:84:24:6d:74:d6:ec:e0:
e5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A0:AD:65:F3:12:8D:88:03:6C:4D:12:7A:2F:44:42:5E:C0:91:16
X509v3 Authority Key Identifier:
keyid:E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:90:9d:38:e7:22:40:43:95:f2:20:55:75:49:be:78:a8:13:
47:ea:eb:74:38:fe:28:ce:75:0e:3c:5c:1a:ac:71:d7:be:cb:
fe:6e:30:7e:6c:86:96:b1:d0:a8:08:56:f4:9b:8c:14:35:0a:
98:9f:04:9b:01:a8:ae:10:f4:b6:c4:bf:32:a3:0b:45:0f:7f:
56:49:1c:80:65:e4:c0:b3:0e:a3:fb:e8:f5:47:ca:46:37:44:
1e:36:fc:06:f5:6c:76:95:03:f5:1e:4d:05:0b:85:3e:bf:3a:
b7:e0:16:06:38:36:5d:7b:c4:d5:3e:c9:62:44:9c:06:29:ce:
9e:ec:3c:0b:4c:72:2c:dc:4e:a7:ec:73:49:85:23:f0:ba:e3:
8e:26:42:51:ff:3f:8a:05:f2:6f:59:0e:3d:45:ad:74:8a:e4:
61:15:1c:61:0e:b2:29:3d:41:af:b4:a2:e8:6d:d9:d8:4b:17:
fc:de:f7:8b:47:2d:9f:49:22:c6:31:f5:9a:36:c5:31:a9:1a:
63:da:9f:1e:19:fe:8f:56:2f:73:82:9c:e9:04:b2:66:a9:6c:
44:89:2a:df:34:f6:d3:4d:88:42:cb:c0:ac:a1:0f:3b:9a:6d:
e6:da:ac:27:99:dc:9c:e7:25:d2:5f:f7:91:70:ca:42:fa:4a:
fe:c9:00:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:54:04 2026 by rpki-client