Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json)
Hash identifier: BtzUZ0xp9esVeTFJm7Z8vy/NFscOyhrw10/89UCkSKc=
Subject key identifier: 0B:36:EC:60:89:EE:6A:B0:05:CB:7C:43:22:4E:AB:B3:D3:85:30:EA
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 01A0C70ECD8AB2ED85AE1995FF5BF9D8639B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
Manifest number: 0ACD
Signing time: Tue 22 Sep 2026 03:00:31 +0000
Manifest this update: Tue 22 Sep 2026 03:00:31 +0000
Manifest next update: Wed 23 Sep 2026 03:00:31 +0000
Files and hashes: 1: 1FYfIdL8zbkSOUaiU4Dqwqal0zE.roa (hash: /XeBvwgyOqHyg56chvGRDFMd+7ExlJpVYmiAYZyhDGM=)
2: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: YbCvd46xCi4Q3okOxNWTrd6yOAPJW2/8VegF588F1MQ=)
3: cgkSjyInxeBAfsrMtADKQej1dQA.roa (hash: NJBBWIxm8P9FWZLPw5DFC5dmcCI2sjb8UDnkU7sydo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:cd:8a:b2:ed:85:ae:19:95:ff:5b:f9:d8:63:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: Sep 22 03:00:31 2026 GMT
Not After : Sep 23 03:00:31 2026 GMT
Subject: CN=0b36ec6089ee6ab005cb7c43224eabb3d38530ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:eb:30:c8:6f:fa:f3:28:a4:71:fb:68:80:
2a:7e:1e:07:3c:61:30:e4:93:42:08:4d:b3:e2:15:
48:35:96:42:b7:d6:95:c6:3b:2b:9d:df:03:f2:5e:
56:20:ec:76:01:e4:7e:2a:bc:f0:e2:eb:a6:d0:61:
18:95:bd:8b:1c:4c:ad:ea:d3:36:ed:97:81:7b:78:
cc:68:dd:29:84:12:1f:26:28:cd:5d:d1:a5:a4:97:
63:45:3d:72:52:06:60:c1:42:71:98:17:d2:63:12:
5b:c4:32:8b:cf:b1:56:90:bd:11:7f:64:dc:fd:ed:
35:bf:0f:b2:d0:3c:e7:06:d0:6f:9c:f1:99:c0:83:
be:70:75:a2:a7:46:59:dd:b7:4e:9b:99:10:de:d1:
23:19:60:42:e5:68:de:79:3e:ba:f5:b3:3c:63:b3:
9c:1b:d1:48:02:04:91:89:e5:d0:83:83:6a:d8:91:
3a:f3:49:07:ea:4a:e1:b0:ef:ad:ea:bf:42:7a:6d:
e1:4c:ac:e6:ea:fc:e6:c2:95:b1:19:d6:d8:f3:ad:
93:3a:f9:32:c1:ac:e2:92:8c:13:57:f6:02:4a:c7:
a4:a5:d3:8a:a2:d0:07:9c:b9:78:23:4e:db:6d:2d:
fb:db:c6:6e:c6:be:ae:6a:d3:06:26:7a:28:29:51:
42:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:36:EC:60:89:EE:6A:B0:05:CB:7C:43:22:4E:AB:B3:D3:85:30:EA
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1e:e9:8e:66:8e:95:de:24:12:8a:59:28:f3:ff:5f:5c:ed:
61:f4:cd:c9:0b:53:af:a4:a8:13:ae:01:f1:3e:89:59:c1:42:
aa:2e:ae:04:5c:88:b4:fc:07:23:eb:fc:80:96:af:c7:49:a1:
ac:03:6a:5a:47:0d:c4:d7:1e:27:75:04:3a:64:88:e3:0e:c4:
50:80:c8:3a:33:2e:04:3b:ff:79:bf:99:25:ed:76:7f:e3:eb:
2c:32:b0:75:3f:d8:26:66:bc:3d:b0:3c:30:be:35:9e:31:aa:
03:99:c6:98:82:ac:0d:e6:43:81:a8:e6:54:7f:32:36:bb:05:
e9:11:1f:40:6c:08:76:db:66:5c:56:19:e0:a2:27:c4:a5:0e:
11:26:8e:27:0b:66:c9:e9:75:68:52:67:00:c3:d6:e9:d8:14:
d5:4b:6d:70:62:92:3f:8e:17:fe:92:c8:63:e4:80:ec:ed:24:
3e:d5:c5:aa:0d:c0:35:55:32:82:4a:c8:8b:ce:76:4c:e7:90:
eb:92:ae:83:9e:1c:c8:0c:e9:c5:41:75:e6:21:0b:3a:df:8d:
72:9c:93:2e:74:c0:63:bd:a4:07:3f:e9:de:09:01:e6:69:cf:
75:79:f2:98:62:27:a3:70:f4:c8:93:5a:83:da:57:ee:4a:b0:
85:3f:ff:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:46:56 2026 by rpki-client