Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
File: 4_GcxeONj5wdZUcXdmX4khHeyJk.mft (raw, json)
Hash identifier: 4lzvsDyaGx2jDvlMODp7w74hbR+yee+7wEMiiIIuzfo=
Subject key identifier: 11:56:15:F9:BC:83:BC:B3:3B:14:D4:64:70:95:DD:E0:A0:6C:A4:2C
Authority key identifier: E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
Certificate issuer: /CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Certificate serial: 01A0C369694E727D308EC03FE090D8C7D10D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
Manifest number: 12D3
Signing time: Mon 21 Sep 2026 10:01:00 +0000
Manifest this update: Mon 21 Sep 2026 10:01:00 +0000
Manifest next update: Tue 22 Sep 2026 10:01:00 +0000
Files and hashes: 1: 4_GcxeONj5wdZUcXdmX4khHeyJk.crl (hash: CGs84kBCnh7wNj1FqWP6hqZz1HjZF54gsEMA9mDqp5o=)
2: 6jWcTCuvnIbvDAxZuWYVZRLhDLU.roa (hash: LkG1rsHegbWJdLC+vukY1wOXCMcnkOUFAcxz3/K326I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:69:4e:72:7d:30:8e:c0:3f:e0:90:d8:c7:d1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Validity
Not Before: Sep 21 10:01:00 2026 GMT
Not After : Sep 22 10:01:00 2026 GMT
Subject: CN=115615f9bc83bcb33b14d4647095dde0a06ca42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b3:5d:31:9c:a1:31:ce:1a:ae:b0:4d:79:b8:
62:c6:24:d0:a5:ae:56:8a:8e:a2:ad:b5:d7:ba:40:
5f:0e:f6:70:1f:f7:4c:13:52:e1:1a:b2:82:e4:b8:
b7:43:23:59:9c:ba:1e:74:82:48:7e:d8:9e:f3:a5:
4c:bb:9e:a0:b7:fa:9f:d2:2f:95:6e:14:5f:25:b6:
22:b7:a3:99:a3:88:b4:0c:05:00:e7:41:fd:13:b5:
2a:09:41:06:b5:d2:de:e7:41:0f:a6:4b:58:fb:f5:
e8:5c:58:01:b6:35:72:26:ec:00:d7:a8:f1:b8:89:
4f:c7:6c:6c:88:e4:44:88:18:57:ef:d9:37:62:b0:
be:83:e5:68:d0:c2:93:d8:5b:35:c6:48:ab:38:b7:
3b:e3:ee:23:10:a4:57:42:12:c8:49:a5:a6:51:ac:
63:2e:71:cf:a5:92:86:d6:b5:e6:a5:21:dc:c9:6e:
58:9c:cf:53:35:ee:71:39:7e:46:e8:fd:57:d9:51:
ed:30:84:8d:3e:80:60:25:b1:5a:a1:75:5d:9f:c0:
7f:ee:0e:13:5d:03:86:26:9b:3a:aa:d0:fb:bc:3f:
2b:35:5e:d3:1b:bd:bc:25:eb:a8:d0:c3:ed:76:53:
24:3d:41:a0:a6:14:fa:26:21:9a:ba:46:00:18:45:
36:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:56:15:F9:BC:83:BC:B3:3B:14:D4:64:70:95:DD:E0:A0:6C:A4:2C
X509v3 Authority Key Identifier:
keyid:E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b9:42:7e:be:01:89:b4:64:79:19:ee:d1:8c:6b:2b:cf:e4:
a8:26:dc:0b:af:f1:f3:5e:f2:a5:ee:6c:f4:e3:4d:db:be:71:
0f:28:72:13:c9:db:a0:cc:40:3e:27:f0:49:46:81:bd:fe:91:
21:97:21:5b:f1:44:05:fe:ef:52:0c:9e:f9:d2:af:bb:d3:aa:
5c:cb:5e:f6:cb:ec:ac:7f:15:bc:97:1b:a5:73:79:3e:c8:a7:
8c:0c:84:25:5f:9c:e3:aa:cc:81:a4:94:f0:09:e4:8a:f2:b1:
d0:c2:e7:34:ac:04:16:c4:27:a0:94:55:37:7b:52:1e:36:34:
70:b8:07:44:7a:dd:84:db:33:1b:55:ec:0c:d7:2e:90:1a:6b:
c2:b1:e6:9e:46:39:4a:8b:35:04:ee:c9:05:bb:7d:70:c4:23:
f0:95:f3:8c:d7:1e:82:bd:3d:82:69:60:86:0f:20:7a:45:55:
e7:e7:a7:f3:8e:04:84:f6:9c:f6:fc:cf:a2:3a:77:02:cd:43:
ae:4a:b4:09:9b:b8:52:80:ce:31:fb:94:cd:1f:f2:30:db:84:
2b:58:fc:4c:3c:f6:d7:9b:af:ca:63:76:a8:8a:b1:c1:8e:13:
77:9a:9d:01:fb:74:4b:43:f0:3d:0a:84:eb:78:73:43:0a:9d:
af:4a:c0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:42:15 2026 by rpki-client