Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
File: 4imzfrYwaGsTKDOEcbUtqV0gSRE.mft (raw, json)
Hash identifier: cCJ9h09dJ+fij6bkF0Z10X8YQ6AEvRcI3/b1mapNpdk=
Subject key identifier: B5:57:23:61:C5:72:53:F0:66:A2:87:8F:67:38:AE:FC:FE:AD:88:C6
Authority key identifier: E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
Certificate issuer: /CN=e229b37eb630686b1328338471b52da95d204911
Certificate serial: 01A0D4CAF267344679E08D391F5D7AE1BE4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
Manifest number: 0F80
Signing time: Thu 24 Sep 2026 19:01:05 +0000
Manifest this update: Thu 24 Sep 2026 19:01:05 +0000
Manifest next update: Fri 25 Sep 2026 19:01:05 +0000
Files and hashes: 1: 4imzfrYwaGsTKDOEcbUtqV0gSRE.crl (hash: Yy3+iQcdCMMVWS5ptyESlIRKIz58fsRX/HTKMhnuuAk=)
2: 9WoXYCC1VJqnbGFNUpMF4rAgukA.asa (hash: 4Zq19YZTaukYMmJEdYX0CF4BWbwlExA/FZSk3vxkg/k=)
3: C9aXP0xnVks0GG--bUI7lSn9Og4.roa (hash: 7iquRG4sj7MdDkAUl6cu4d537zzGxzoS3U6EkDKWErY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:ca:f2:67:34:46:79:e0:8d:39:1f:5d:7a:e1:be:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e229b37eb630686b1328338471b52da95d204911
Validity
Not Before: Sep 24 19:01:05 2026 GMT
Not After : Sep 25 19:01:05 2026 GMT
Subject: CN=b5572361c57253f066a2878f6738aefcfead88c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a5:75:e6:ad:b9:0c:87:b6:a4:72:18:92:aa:
30:ae:69:fb:aa:16:09:dd:cc:ea:da:17:29:c8:44:
de:8f:34:d7:05:04:9e:b1:d7:8b:38:3f:60:6d:fa:
fa:b5:78:c2:3b:b8:f8:4b:8e:9c:63:3c:43:be:70:
ea:7d:29:f8:34:f1:50:6f:e5:12:58:9d:b0:81:74:
34:06:3c:3a:c8:06:2f:9d:da:58:5b:41:fa:5a:26:
e1:d7:b1:77:6d:28:b7:4d:e0:0c:f5:e1:7f:71:ff:
9f:ab:76:ed:5e:bc:48:76:71:05:33:42:4f:a0:46:
47:87:c6:c4:0e:0d:c8:1d:76:f3:a4:1e:95:aa:22:
47:a0:6d:77:5f:a3:30:77:20:40:32:f9:35:cf:ac:
96:7a:3e:fa:2c:46:60:71:db:36:34:21:21:8e:8e:
dc:1e:66:16:ff:a1:42:9d:96:39:02:08:f1:47:29:
1c:9d:29:d9:ea:49:c3:fc:04:9e:f2:cf:e1:3e:d4:
8f:f8:c6:20:47:f6:03:42:42:d6:cf:02:ad:0d:bc:
42:c9:70:56:6d:ee:7c:bc:15:a3:f6:03:ad:e9:b8:
15:cc:ee:96:fa:d3:b6:e8:56:11:c6:82:66:f4:d3:
e7:7d:cc:3a:e2:25:67:13:61:91:f3:3d:15:c9:32:
ed:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:57:23:61:C5:72:53:F0:66:A2:87:8F:67:38:AE:FC:FE:AD:88:C6
X509v3 Authority Key Identifier:
keyid:E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:17:ef:ef:ec:4c:4f:e3:f3:68:a9:e4:35:7f:51:81:2e:1e:
5e:b3:f9:46:3c:b7:82:37:b6:f4:4e:0b:e1:1a:53:08:c4:37:
01:f9:82:45:cd:bb:69:2f:87:6a:d8:bd:fc:9b:f8:5b:93:57:
c4:32:4c:77:8f:44:09:14:17:d0:b6:0d:a9:33:ba:6a:02:d1:
a4:1e:f3:77:fb:50:11:9a:9e:57:dc:74:cc:e7:ba:fd:5b:94:
e7:22:29:60:a6:25:aa:69:ff:a7:fc:b1:f9:73:1b:ca:f0:10:
67:8f:a7:46:f0:5b:67:32:c4:4d:92:46:3e:3a:d5:7d:02:21:
0e:c2:14:a7:2e:a2:5a:c9:ff:8f:16:b1:ff:9b:d5:02:f5:aa:
39:fb:d3:13:8f:53:58:90:f4:27:a2:5c:ef:fd:69:df:4b:33:
48:ad:42:68:43:f0:4f:9d:2f:95:d0:89:8d:8b:90:7d:6f:49:
79:34:68:9f:ee:59:81:3f:c8:54:10:ae:e4:93:0b:8c:3c:fd:
77:1f:2b:9b:f1:45:db:ba:58:d7:bf:6d:96:d7:9a:88:13:19:
14:b4:a6:af:b3:d3:63:73:4b:ce:33:2a:90:94:47:46:bd:f2:
50:76:cd:3f:38:ad:08:5e:bd:65:fb:75:42:32:34:1e:84:41:
54:a6:ff:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:58:30 2026 by rpki-client