Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
File: 4imzfrYwaGsTKDOEcbUtqV0gSRE.mft (raw, json)
Hash identifier: /qblN8s52hkG5wbrNxnydzPX2qrs3yd2+4Lz1gCohNM=
Subject key identifier: 82:CD:2E:EB:A7:AD:83:EA:3A:5D:54:6D:F7:29:95:16:95:77:A0:25
Authority key identifier: E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
Certificate issuer: /CN=e229b37eb630686b1328338471b52da95d204911
Certificate serial: 01A0D2DE9BD988883B54350B3DBAD71143D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
Manifest number: 0F7F
Signing time: Thu 24 Sep 2026 10:03:19 +0000
Manifest this update: Thu 24 Sep 2026 10:03:19 +0000
Manifest next update: Fri 25 Sep 2026 10:03:19 +0000
Files and hashes: 1: 4imzfrYwaGsTKDOEcbUtqV0gSRE.crl (hash: QUMR5OAw9q8qRM1Gq5ezRMboxJHiDlfhodBICw52E9E=)
2: 9WoXYCC1VJqnbGFNUpMF4rAgukA.asa (hash: 4Zq19YZTaukYMmJEdYX0CF4BWbwlExA/FZSk3vxkg/k=)
3: C9aXP0xnVks0GG--bUI7lSn9Og4.roa (hash: 7iquRG4sj7MdDkAUl6cu4d537zzGxzoS3U6EkDKWErY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:9b:d9:88:88:3b:54:35:0b:3d:ba:d7:11:43:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e229b37eb630686b1328338471b52da95d204911
Validity
Not Before: Sep 24 10:03:19 2026 GMT
Not After : Sep 25 10:03:19 2026 GMT
Subject: CN=82cd2eeba7ad83ea3a5d546df72995169577a025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:08:48:87:67:87:b5:79:80:e3:c0:be:1b:2d:
5c:b3:58:ff:90:3e:ef:c6:d4:d0:00:50:e3:ac:44:
ee:2f:fc:5c:ed:33:63:25:bc:c3:fb:7c:12:9d:79:
96:65:72:e7:3e:aa:aa:ee:a8:54:58:f9:ec:74:cd:
ed:9e:68:c5:fd:e7:3c:ac:f1:49:0f:d8:ca:6b:6f:
06:30:ce:6d:ad:13:a2:7a:b5:5e:d1:4c:df:b0:0d:
46:e5:28:df:45:81:fb:80:7d:25:de:fe:84:9c:6a:
28:1e:95:4e:05:2d:fc:57:02:03:50:91:d9:51:eb:
30:b7:3c:50:02:fe:d0:ca:f0:20:7f:cc:79:7b:5a:
2f:7f:a8:17:78:bf:b9:ab:02:d6:0d:d4:3c:d2:d0:
12:af:56:2e:6d:8d:9b:5a:19:fb:62:77:36:c1:25:
3e:06:5f:2f:ae:ca:79:98:60:c8:64:98:f3:9c:84:
0f:76:a8:8b:03:49:79:4e:50:e6:18:91:0d:fe:36:
4e:87:b8:e3:0c:26:1d:df:e0:73:b8:69:4e:82:b4:
03:aa:15:bb:07:24:a9:50:80:a5:76:2d:34:0a:b9:
f2:39:a0:a1:cc:a2:d5:95:68:4d:88:07:05:b5:7d:
45:0e:ce:55:ff:73:72:32:51:f0:52:c4:65:89:86:
00:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CD:2E:EB:A7:AD:83:EA:3A:5D:54:6D:F7:29:95:16:95:77:A0:25
X509v3 Authority Key Identifier:
keyid:E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4e:c7:c0:1c:a7:4b:6c:87:b8:12:40:5c:df:5b:bf:69:b2:
65:ca:13:c7:97:f7:52:f5:58:74:96:fe:b5:08:b6:ad:2b:91:
d6:4b:7a:66:cd:a2:08:8a:9e:e2:dc:6e:e3:21:f2:51:9a:48:
e0:e4:81:d8:ae:54:72:38:e0:d5:9d:82:e7:98:74:ca:77:67:
24:a9:94:5d:55:3f:f0:f0:42:3e:19:de:cf:40:ca:62:43:66:
dd:cc:78:ff:da:a9:13:da:21:6f:a6:33:dd:35:29:d6:68:25:
4d:f3:0e:2d:a3:fd:78:0a:9e:4b:44:c2:59:b3:83:48:0d:58:
7e:1f:4f:83:5e:40:3c:f0:14:ff:b8:87:2f:16:51:9a:07:4b:
4c:b8:7f:21:5a:1f:ec:5c:39:20:ec:98:a0:b9:3b:0a:ed:c0:
a4:96:e8:cc:a4:57:4b:16:a1:b5:96:6e:6c:88:f9:a4:5c:ec:
31:e9:9c:52:fc:49:44:d6:1a:6d:f7:c1:01:6c:4a:91:d1:78:
49:1e:30:ad:45:d9:0a:f5:3b:4f:e8:f1:79:62:20:79:d5:4b:
c3:83:23:e5:a0:33:a0:46:71:24:fb:ee:c7:dd:0b:d5:f4:c0:
8d:8a:c0:7e:ab:fd:83:9c:63:17:10:79:64:13:6a:c6:57:b3:
b3:ca:72:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:59:45 2026 by rpki-client