Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
File: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft (raw, json)
Hash identifier: cWoTwYWG/NNn09Aq5hlUuKBxB0h9oju92K8+HO0YozA=
Subject key identifier: 70:13:E6:F4:10:78:31:57:F0:3B:F5:E5:21:3D:1C:4B:CC:9F:10:30
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial: 01A0C8FDA25F095B2FAEC47F49F861BC3B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
Manifest number: 15C4
Signing time: Tue 22 Sep 2026 12:01:00 +0000
Manifest this update: Tue 22 Sep 2026 12:01:00 +0000
Manifest next update: Wed 23 Sep 2026 12:01:00 +0000
Files and hashes: 1: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl (hash: xe0ACDGe8Rm+v4oWKAJPJGSz0y2F5/Hy43N9IgwXYgQ=)
2: _2TjfVrCZo9B9qI9aJsIIj8RhAk.asa (hash: M/M1jD58xwzQOF/SAmLUskPi5EjlgSXMDxr/H80Jdlc=)
3: i4Te7iMl8ghbqa21Y6HDg_6pHHs.roa (hash: w8gWgmF42nIarY6Emvf1fz/wNEfrJpHlyRzan9puCwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:a2:5f:09:5b:2f:ae:c4:7f:49:f8:61:bc:3b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
Validity
Not Before: Sep 22 12:01:00 2026 GMT
Not After : Sep 23 12:01:00 2026 GMT
Subject: CN=7013e6f410783157f03bf5e5213d1c4bcc9f1030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:71:f2:dd:33:e5:e5:3c:fb:ca:f7:4d:8e:53:
e4:5c:ec:a4:5b:5b:84:9b:a1:6e:b6:23:5d:db:26:
82:75:28:3a:bf:2a:ce:ef:db:c3:0b:dc:12:c3:aa:
5e:a6:46:a0:eb:a3:f3:8f:63:6b:7d:fa:6b:b8:8b:
9e:14:2a:32:0e:da:41:dd:6c:54:45:15:24:01:69:
af:a7:0e:e0:1b:02:78:64:35:f1:f6:c7:ee:66:61:
0f:20:7e:ce:76:75:b5:e2:6b:60:f2:e7:5d:27:a3:
ee:83:f8:4d:4b:4b:47:52:f9:12:11:5a:b1:19:16:
6c:25:80:43:7f:bd:f7:6e:17:18:ba:99:f8:88:48:
49:dc:0e:2b:f9:0d:dc:12:3e:69:61:67:24:67:89:
8f:64:39:6c:ff:a2:28:6f:27:83:3c:0e:d9:a5:ef:
26:c0:1b:3d:54:38:fc:1a:1e:59:60:3e:d7:29:91:
a3:d7:73:16:0e:66:70:f6:59:f8:37:10:3d:68:c3:
d7:50:6c:cd:b1:aa:7a:6e:e6:3c:ce:4e:d8:8d:15:
e3:62:8f:30:74:5e:3d:30:43:7a:21:43:f8:57:65:
b0:fe:a6:8b:22:53:26:df:b1:6c:75:d6:91:b0:e5:
e8:42:47:c8:b2:49:37:a2:e1:bf:eb:02:75:dd:85:
19:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:13:E6:F4:10:78:31:57:F0:3B:F5:E5:21:3D:1C:4B:CC:9F:10:30
X509v3 Authority Key Identifier:
keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ce:d9:4f:97:b9:30:3a:a8:2e:bf:29:3e:d0:44:12:6d:83:
a7:01:89:6d:77:aa:3d:83:73:03:38:8a:7c:24:fc:f5:73:b4:
5e:7b:4f:57:09:61:d4:e1:1a:cb:75:e0:2b:3d:7a:ad:98:59:
45:e4:4d:06:f7:7a:58:8b:4d:cb:8d:94:59:36:77:47:ca:43:
1c:a7:ba:ea:07:bf:e7:93:89:49:01:ab:71:93:1e:86:39:32:
bf:2b:04:2d:18:00:04:68:ca:5b:a7:a3:d9:96:51:0b:1f:36:
54:7a:71:6e:6d:35:74:54:6e:4d:4d:d6:33:43:70:2f:97:cb:
55:5d:bc:ab:03:92:79:07:45:2d:d1:60:39:59:bb:39:3a:42:
e5:0e:5e:40:a2:2a:c6:2e:e1:ab:44:5c:10:ab:7f:c9:8e:77:
e4:af:e9:f0:5b:3c:bb:de:7d:33:85:56:d6:18:b4:0b:f4:1d:
8f:1a:b2:7b:d3:13:08:2a:fc:35:b9:23:b7:c6:80:17:de:5b:
ce:cf:6b:36:8e:8b:17:e6:44:02:80:7c:3b:1a:19:ac:f1:86:
49:2c:d6:c3:10:01:01:80:56:20:f8:97:5d:a8:de:36:92:07:
65:76:55:d9:41:81:6f:1c:93:58:6e:5e:b5:21:44:94:c4:f2:
23:ee:ac:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:41:59 2026 by rpki-client