Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
File: 4_GcxeONj5wdZUcXdmX4khHeyJk.mft (raw, json)
Hash identifier: YXQMn6VMmzskd7AAuwRApA4p/L1FhT37xUDMJHD0QmY=
Subject key identifier: 4A:5E:6C:2B:7F:A6:77:63:1F:66:4D:36:C2:6D:F6:B1:6C:C2:A6:D9
Authority key identifier: E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
Certificate issuer: /CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Certificate serial: 01A1DD5DFE635BFD71FA4CEFD1B6AB5F9C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
Manifest number: 1365
Signing time: Sun 15 Nov 2026 04:01:27 +0000
Manifest this update: Sun 15 Nov 2026 04:01:27 +0000
Manifest next update: Mon 16 Nov 2026 04:01:27 +0000
Files and hashes: 1: 4_GcxeONj5wdZUcXdmX4khHeyJk.crl (hash: Vdf5I2+CFH+/tatvfrQuL0VXAdIsj/2Ds9wHFDC0zgw=)
2: 6jWcTCuvnIbvDAxZuWYVZRLhDLU.roa (hash: LkG1rsHegbWJdLC+vukY1wOXCMcnkOUFAcxz3/K326I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5d:fe:63:5b:fd:71:fa:4c:ef:d1:b6:ab:5f:9c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Validity
Not Before: Nov 15 04:01:27 2026 GMT
Not After : Nov 16 04:01:27 2026 GMT
Subject: CN=4a5e6c2b7fa677631f664d36c26df6b16cc2a6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:29:39:25:10:a5:39:2a:27:9e:68:42:c9:86:
f6:5b:8b:90:60:b7:9c:cd:5d:4d:37:c7:a8:7c:b0:
a1:10:d8:c5:7a:39:a2:51:53:2c:4a:4c:df:83:6a:
a9:3b:6e:ac:d5:4e:a6:ee:b1:99:50:ed:58:b9:f0:
e5:54:17:bc:25:21:a7:1e:5e:9c:b0:f7:71:84:7f:
39:0e:79:34:43:8c:43:7c:10:77:95:17:88:33:20:
e0:d5:37:d8:a8:f4:50:83:01:af:9f:8f:74:e4:50:
11:5f:55:65:a1:2f:fa:d2:34:ad:3d:4d:d8:12:b3:
f3:5b:9f:d6:18:e2:bc:6a:da:e8:8a:22:05:30:76:
48:8b:7e:46:db:fa:2d:67:2d:21:0c:16:57:31:2c:
d5:8f:1c:cc:cc:c7:10:88:63:18:aa:24:dd:82:06:
ba:a4:f2:1f:3e:2f:94:9d:22:6e:7b:13:d8:11:28:
66:84:7e:81:37:e1:09:05:b3:2e:e8:26:79:da:5e:
2c:a9:5d:63:e1:7d:67:3b:96:c0:6c:10:3a:c1:89:
3b:5c:51:6e:38:5e:c1:f7:ab:31:6c:7e:22:9f:c0:
17:4e:94:f8:fc:57:e9:4d:c3:06:fc:17:cb:e4:cc:
33:3c:f2:71:af:5e:4a:d7:54:9a:6a:b8:b4:1a:c9:
cf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5E:6C:2B:7F:A6:77:63:1F:66:4D:36:C2:6D:F6:B1:6C:C2:A6:D9
X509v3 Authority Key Identifier:
keyid:E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:41:c3:9f:00:d3:e0:ee:97:85:34:8e:3a:a5:f0:94:1b:3a:
d6:6b:00:4b:0f:e1:74:11:a1:65:02:58:81:fc:8b:22:64:f6:
1f:6f:e2:30:42:c3:ed:99:c7:0a:bd:a4:18:aa:63:73:80:ab:
34:f0:85:fc:a8:2b:49:2f:31:76:4b:e0:4f:a4:a0:32:47:1e:
14:5c:c1:25:3f:98:2e:90:e5:43:36:8c:62:ed:83:42:50:9a:
01:b5:0e:a2:f4:a3:5d:37:0c:e1:68:f7:44:e0:a8:ac:32:a9:
97:3e:84:f1:8e:d2:55:59:4d:cc:79:27:11:32:e1:87:76:41:
66:9b:19:31:3d:71:03:33:e2:c8:47:b4:2d:1d:90:53:d4:44:
70:0f:f0:32:94:83:0a:3c:ce:62:98:e8:4b:a2:fe:fa:f0:d9:
47:94:fa:b2:d6:68:c9:2b:10:0f:8d:b2:72:2e:3a:99:39:a8:
d4:6d:07:02:b0:f9:a6:a8:29:57:a2:c4:94:66:69:fe:43:24:
dd:53:a0:8e:f7:ec:a6:8e:20:f7:47:eb:e8:fc:dc:3a:c9:d3:
18:16:34:67:5f:61:4a:99:05:2f:00:36:58:be:13:e9:05:b5:
0f:0c:8a:f1:00:29:53:59:33:ee:97:3c:06:10:b1:a7:10:aa:
d8:7f:9f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:54:24 2026 by rpki-client