Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
File: 4oNEKXdeZVXldCSSKGJUsdqfGQM.mft (raw, json)
Hash identifier: 3XOY61k708nAxaO1lbXrGlE8Mos2B73TbZvGiEVoF+g=
Subject key identifier: 91:C5:D0:D3:FC:0D:6C:5B:25:EA:C5:6E:CA:4C:05:85:AE:FB:44:74
Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Certificate issuer: /CN=e2834429775e6555e5742492286254b1da9f1903
Certificate serial: 01A1C09C7AA325894F4AF47C131B6C871418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
Manifest number: 13A3
Signing time: Mon 09 Nov 2026 14:00:42 +0000
Manifest this update: Mon 09 Nov 2026 14:00:42 +0000
Manifest next update: Tue 10 Nov 2026 14:00:42 +0000
Files and hashes: 1: 4oNEKXdeZVXldCSSKGJUsdqfGQM.crl (hash: Z/j/8Gh8fPvzU4n4POCatdF3KemQxGYo99Fj4G3ZHHY=)
2: uTD6khWcd31ZzRZAtfj7o4AtIHw.roa (hash: 69oOJR8ncC7sjtYVQ8SZHCT4Cq2KZtCn6uWehRleXPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:9c:7a:a3:25:89:4f:4a:f4:7c:13:1b:6c:87:14:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2834429775e6555e5742492286254b1da9f1903
Validity
Not Before: Nov 9 14:00:42 2026 GMT
Not After : Nov 10 14:00:42 2026 GMT
Subject: CN=91c5d0d3fc0d6c5b25eac56eca4c0585aefb4474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ed:2d:c4:18:dc:3f:da:4e:96:b8:a6:31:00:
16:1a:02:82:7b:4d:52:bf:20:cc:7c:ba:61:88:5b:
44:ef:2b:4f:4c:ef:3c:ff:59:2c:2b:00:c8:38:30:
41:cb:1f:11:23:41:75:34:ef:2c:e0:88:9c:a6:b2:
02:60:a4:bb:4a:b9:a2:f2:37:07:66:71:33:58:8d:
dc:e9:d8:be:c2:e4:eb:0c:d0:5e:7d:e0:c7:86:9a:
fd:94:33:42:3b:ac:a5:b4:01:3a:38:5e:ab:e1:d3:
8a:93:92:73:f8:53:2c:69:12:db:64:8c:db:5b:dc:
9a:08:85:b1:9a:22:49:a6:6a:3b:eb:26:56:50:fb:
cd:2e:6f:39:d0:4c:54:c3:3a:29:9b:e1:88:a3:1a:
38:12:bf:d9:1b:bd:a0:cc:1d:8f:13:23:68:39:c0:
cf:6b:4d:0b:36:31:f1:28:1a:4f:67:c5:c3:8b:79:
1c:4a:fa:78:c3:f2:30:93:2c:cb:16:6e:16:1c:0b:
4b:40:e3:ff:ed:4c:76:eb:43:98:68:b0:73:cf:31:
6d:8e:e6:89:63:5d:15:dd:28:5e:00:7e:a4:5c:b2:
bb:14:ce:bc:ce:19:43:c4:7d:cb:a5:1c:2a:b9:cd:
e3:ca:21:ca:b8:16:c3:d0:56:db:4b:f1:e8:fa:cf:
52:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C5:D0:D3:FC:0D:6C:5B:25:EA:C5:6E:CA:4C:05:85:AE:FB:44:74
X509v3 Authority Key Identifier:
keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9a:e4:c8:60:c0:de:b1:7d:e2:27:46:c9:8f:9f:ff:f4:3e:
09:79:8d:95:2d:7a:91:c2:99:33:32:8e:37:d3:d3:e0:2d:9b:
c1:c6:25:73:98:46:9a:d8:49:8d:15:df:2f:42:05:cd:8c:4a:
35:ac:55:ac:55:87:de:64:c8:61:71:85:70:50:4b:ae:ee:7a:
f7:8a:10:fa:e0:d4:57:bc:9a:df:4e:67:0c:39:fa:8f:bb:ae:
61:c0:59:66:4a:12:37:70:bd:e0:9e:76:f6:1c:c2:c0:d8:17:
f0:d0:f2:29:2f:af:52:d1:89:5e:b3:97:96:e6:95:d5:9c:8f:
82:d7:dc:ea:f7:17:85:2a:f2:aa:a2:48:4a:d8:93:03:1b:0b:
14:73:f3:48:dd:8a:12:0b:99:f0:b8:27:97:8d:6a:b2:d2:0f:
8d:1b:a6:02:f1:56:83:ca:fd:ec:87:4f:ec:37:47:92:59:f5:
f0:ec:dc:49:cd:76:d5:5b:8c:56:a2:41:0f:35:f2:4e:ec:90:
e7:d5:ab:0f:11:25:18:5e:cc:bc:12:f3:21:3c:91:71:b6:f8:
b9:ad:66:a4:68:4e:ad:25:28:97:e8:1b:e1:d2:dd:be:39:7e:
6d:4e:52:29:dd:22:eb:06:7d:fd:bb:e1:f6:15:e7:56:16:e9:
d6:a1:3f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 22:24:56 2026 by rpki-client