
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
File: 4HUznawWU11FeuiGK1NbzlHhIg8.mft (raw, json)
Hash identifier: yXruugSJbcVBRdGd1iyAnmzbhOoKRBqET/413b9cagI=
Subject key identifier: 37:2A:B0:6C:A3:94:2B:BC:17:61:01:9F:09:D3:0E:9F:54:5E:B4:1E
Authority key identifier: E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
Certificate issuer: /CN=e075339dac16535d457ae8862b535bce51e1220f
Certificate serial: 01A13CDC57E82F6D92A1BB9A6E7BE879E6FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
Manifest number: 08EA
Signing time: Thu 15 Oct 2026 00:00:35 +0000
Manifest this update: Thu 15 Oct 2026 00:00:35 +0000
Manifest next update: Fri 16 Oct 2026 00:00:35 +0000
Files and hashes: 1: 2mEadFySpEWsuPH6ldVwsZTSUzE.roa (hash: ip58kYIdg4i0vj70PKOUYbGKVF2v+wgNn3j2A07Pob4=)
2: 4HUznawWU11FeuiGK1NbzlHhIg8.crl (hash: slVoo6oNCSvSkoBIczQLT3NIRgG5bxASgIEpBljjUYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 00:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:57:e8:2f:6d:92:a1:bb:9a:6e:7b:e8:79:e6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e075339dac16535d457ae8862b535bce51e1220f
Validity
Not Before: Oct 15 00:00:35 2026 GMT
Not After : Oct 16 00:00:35 2026 GMT
Subject: CN=372ab06ca3942bbc1761019f09d30e9f545eb41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:e1:d7:96:1b:8e:5d:9d:52:48:38:b1:39:
17:07:d4:92:fb:78:c6:fa:14:f3:3f:e3:7a:85:2f:
af:1d:ed:52:3f:a8:b8:6c:7c:ba:72:17:ab:77:25:
be:f8:9b:27:27:ea:f9:b8:b0:40:97:62:48:7b:d9:
a3:b6:47:fc:75:82:07:93:0e:38:7f:92:e8:a1:5c:
b5:6d:0c:06:bd:a1:c3:b2:96:21:24:90:4b:dc:4a:
7d:63:1e:66:15:19:f7:80:33:d1:ab:25:6d:87:40:
e4:e8:8c:fd:f8:96:7d:77:4b:07:4a:ed:15:f7:31:
0b:8f:45:e6:4f:d3:3e:76:97:8d:87:4e:e9:1e:e8:
4b:bf:c1:bc:ad:23:3e:51:27:e9:e2:16:38:a3:4f:
2b:8a:9d:b6:6a:b6:60:41:c9:41:58:05:d5:4f:f7:
86:7d:67:7a:e7:a4:d2:3b:7c:05:cb:ae:66:67:95:
8d:2a:56:7f:e4:3d:b2:f6:da:f0:fc:93:8e:2a:ac:
93:b2:2e:58:25:5f:13:bb:62:58:a5:3a:66:85:39:
7e:78:f6:52:98:29:72:19:5a:0c:11:20:b7:76:a5:
96:02:7d:02:68:13:d1:ab:01:51:e2:09:11:a7:a8:
a5:10:1c:da:cb:e5:45:98:9d:a6:fa:20:4b:4f:78:
34:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2A:B0:6C:A3:94:2B:BC:17:61:01:9F:09:D3:0E:9F:54:5E:B4:1E
X509v3 Authority Key Identifier:
keyid:E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:87:02:9f:15:82:ef:4b:ef:ce:21:74:52:53:93:18:69:eb:
a2:40:48:82:77:bb:a9:99:54:37:48:b9:d7:63:9b:82:86:08:
80:f8:9c:f9:9b:88:ed:c1:ad:97:f8:86:4f:db:2d:14:07:97:
7e:d5:09:6f:86:0c:58:ef:97:0d:92:30:b8:a3:91:2c:bc:49:
14:ba:5a:20:00:72:de:61:95:32:77:95:39:b2:42:d2:bc:43:
13:f9:7f:62:82:13:60:1d:f6:7f:42:df:60:e7:32:95:74:3a:
95:9b:c1:fd:46:b5:c1:1a:ba:02:16:ff:20:e6:c5:f5:5f:f6:
f9:6d:a5:2f:99:92:3e:52:8a:78:09:c2:9e:e7:26:c2:57:3a:
5b:d4:55:10:c5:4d:a0:0e:33:83:2a:5f:c3:e9:ac:9f:88:7e:
0a:40:0a:25:af:b2:b3:d2:b2:f5:73:70:3b:1e:94:28:ce:69:
b6:aa:65:01:cc:a5:27:23:c1:b7:06:62:90:ec:2d:d0:af:b9:
7e:62:62:13:84:fd:64:a9:86:7e:c7:a6:ca:5a:4f:a1:d2:8c:
68:1a:de:d1:3a:f8:c3:0d:18:85:66:c1:0d:db:c4:0f:9b:ca:
0d:ec:b2:a9:23:29:e0:a7:80:f0:6c:87:88:55:1e:3f:85:62:
99:9e:3a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:50:26 2026 by rpki-client