Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
File: 4HUznawWU11FeuiGK1NbzlHhIg8.mft (raw, json)
Hash identifier: jch/oWvctL6Bdf6cMyTLombJvYfYdjdmcaUbkZggXM4=
Subject key identifier: 7D:2A:61:CF:52:4F:8B:CF:27:9A:67:50:17:BC:33:48:80:97:FC:F6
Authority key identifier: E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
Certificate issuer: /CN=e075339dac16535d457ae8862b535bce51e1220f
Certificate serial: 01A140B9C75C22FE0D4799BAA30E5CD27878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
Manifest number: 08EC
Signing time: Thu 15 Oct 2026 18:01:19 +0000
Manifest this update: Thu 15 Oct 2026 18:01:19 +0000
Manifest next update: Fri 16 Oct 2026 18:01:19 +0000
Files and hashes: 1: 2mEadFySpEWsuPH6ldVwsZTSUzE.roa (hash: ip58kYIdg4i0vj70PKOUYbGKVF2v+wgNn3j2A07Pob4=)
2: 4HUznawWU11FeuiGK1NbzlHhIg8.crl (hash: UmzzqvdBTeMToXzrGbZ51hnCYoTRC+8BYUE2GDHuZUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:b9:c7:5c:22:fe:0d:47:99:ba:a3:0e:5c:d2:78:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e075339dac16535d457ae8862b535bce51e1220f
Validity
Not Before: Oct 15 18:01:19 2026 GMT
Not After : Oct 16 18:01:19 2026 GMT
Subject: CN=7d2a61cf524f8bcf279a675017bc33488097fcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:32:29:8e:70:be:ca:bf:cf:6b:da:91:d4:2a:
55:3d:f9:b2:b2:48:96:d9:6e:54:8f:17:fa:ae:b0:
55:23:8f:9c:b8:15:fd:7b:7e:99:a3:ca:40:ba:68:
2c:c3:d7:87:c5:d9:44:52:4b:52:7a:18:97:4b:4c:
0a:9c:58:f2:28:c1:ea:03:a7:f8:f0:d0:b3:93:b5:
31:ce:e1:b8:a8:3a:cf:a5:72:88:46:a3:8f:57:04:
8d:12:58:1f:7b:a6:7b:15:79:06:5f:d2:cf:b2:fa:
bb:dc:34:07:1d:81:5f:6b:09:8e:90:45:8d:07:7f:
82:2d:34:02:f4:9d:0a:be:92:f6:04:79:24:cd:fb:
35:b7:a4:84:ec:bd:0d:d4:f0:47:ed:53:e5:81:90:
91:03:a0:d0:59:5e:9b:b8:3e:11:90:85:fd:10:00:
82:ae:e5:e3:fa:75:d6:17:b7:6f:9f:b0:16:98:5c:
18:0d:d7:9c:b3:ca:90:05:02:99:1b:42:16:b8:59:
50:c1:a7:e0:b2:0d:ca:e3:80:98:88:dd:28:7f:eb:
c1:cc:e4:68:6d:95:6a:bc:f6:f1:9e:8b:58:32:42:
c4:dc:7c:aa:cb:70:c3:46:e5:d3:14:cd:37:45:4a:
ea:de:6b:4d:06:5c:a4:6e:d7:51:d2:85:9b:ad:48:
ec:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2A:61:CF:52:4F:8B:CF:27:9A:67:50:17:BC:33:48:80:97:FC:F6
X509v3 Authority Key Identifier:
keyid:E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:07:94:b1:15:0b:d6:6b:3f:30:11:9b:2f:df:8f:e2:5c:cb:
a8:b2:27:20:5d:a8:12:c9:21:92:25:b4:ba:f6:b3:0b:b7:76:
67:d1:fa:44:dd:44:60:e0:eb:f6:cc:82:e3:b1:19:b1:ff:aa:
e3:56:6a:f4:6a:07:79:84:57:10:54:39:ad:57:2c:fd:09:69:
60:59:79:2f:5c:f7:2d:87:b7:94:d2:6d:40:e6:0b:71:a0:f8:
f8:30:8d:de:d0:f8:e2:dc:49:20:35:79:89:d1:13:5c:09:53:
12:ce:21:90:a1:25:6e:ba:eb:58:36:d1:0b:6f:5b:88:00:8f:
73:0c:d5:a3:50:8d:4b:4b:e7:ab:0b:ab:d3:6c:3e:bb:03:69:
48:db:d2:a6:2a:68:9b:78:3a:18:58:bd:77:e3:71:d8:7e:e2:
29:14:d1:4e:45:f4:55:be:9f:70:3e:ec:df:c3:cb:1f:e2:3b:
a3:d1:ad:a6:b6:38:5a:3d:ea:03:fb:ce:41:98:b8:db:93:a4:
0f:5b:6a:5f:72:5a:c4:98:94:02:dc:cb:86:c2:c7:3e:d2:7b:
11:81:ae:ea:fa:e5:33:16:7a:de:f8:2a:46:09:61:62:a0:87:
3c:08:22:1c:e1:68:3d:1a:40:40:b9:3e:7f:28:75:e6:db:52:
01:6f:d3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:27:09 2026 by rpki-client