Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
File: 4m4BgY9rbo42iNfzYfdTwSNeDNw.mft (raw, json)
Hash identifier: L6GZ4IlQ+yVCuCyUaR9Z4pbwf+gd5LukNiIkbBa3H8g=
Subject key identifier: 5A:B5:52:D7:4E:B4:62:AF:21:4C:35:4E:5F:62:21:A9:EC:8D:DA:CA
Authority key identifier: E2:6E:01:81:8F:6B:6E:8E:36:88:D7:F3:61:F7:53:C1:23:5E:0C:DC
Certificate issuer: /CN=e26e01818f6b6e8e3688d7f361f753c1235e0cdc
Certificate serial: 01A0D72757A3DE687853641243A0A752D650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4m4BgY9rbo42iNfzYfdTwSNeDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
Manifest number: 025E
Signing time: Fri 25 Sep 2026 06:01:14 +0000
Manifest this update: Fri 25 Sep 2026 06:01:14 +0000
Manifest next update: Sat 26 Sep 2026 06:01:14 +0000
Files and hashes: 1: 4m4BgY9rbo42iNfzYfdTwSNeDNw.crl (hash: 0sbjZ4d50R9I0jo/V+b9uzCkKJ5cp4LUavD3ZehLcXI=)
2: 55lgQHjawIWIBPegmtUWO19P1qY.roa (hash: xr29hGNw/G2B+5szsIy5zpkogZqhj2L/lLvicw1+OJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4m4BgY9rbo42iNfzYfdTwSNeDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:57:a3:de:68:78:53:64:12:43:a0:a7:52:d6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26e01818f6b6e8e3688d7f361f753c1235e0cdc
Validity
Not Before: Sep 25 06:01:14 2026 GMT
Not After : Sep 26 06:01:14 2026 GMT
Subject: CN=5ab552d74eb462af214c354e5f6221a9ec8ddaca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:3f:3c:fc:e6:09:97:b7:f4:22:d8:9e:11:
e0:49:92:75:2d:59:40:38:46:2a:cd:63:7b:fe:2e:
18:ed:18:8b:02:07:2e:39:78:d1:f0:70:27:c3:72:
31:b4:75:12:0c:81:48:86:e1:ec:6e:1c:77:1b:cb:
aa:e2:95:20:a7:ed:73:49:ba:ce:82:60:a5:c1:da:
6f:b7:c4:1e:37:29:ea:6c:68:2d:e0:be:ec:20:f5:
66:27:14:e6:82:c9:6e:83:33:bf:8e:31:11:82:b5:
2c:39:73:5c:57:48:d5:47:1a:06:8e:09:39:54:61:
9d:61:ea:7c:78:5f:14:ff:c7:b4:0c:f2:30:5b:0e:
8b:54:f9:ae:28:04:c4:b0:0e:4c:6b:9d:d0:2d:76:
7b:61:42:80:66:60:ae:28:40:5d:b5:b9:aa:39:71:
11:18:4e:17:8a:88:4a:b9:db:d8:0f:47:e4:c5:20:
c0:aa:a7:0c:91:fc:25:65:b8:dd:ca:95:5c:06:8a:
36:45:f9:d8:f0:72:e7:61:c2:70:f4:27:3e:61:8c:
48:2f:ff:77:0d:d5:e7:9b:58:89:eb:9b:a8:de:51:
e9:e0:da:bf:fa:a3:38:e7:d0:62:15:89:e9:56:16:
db:8b:91:b7:1a:a7:d3:2f:e8:b6:19:e1:30:e1:17:
3e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B5:52:D7:4E:B4:62:AF:21:4C:35:4E:5F:62:21:A9:EC:8D:DA:CA
X509v3 Authority Key Identifier:
keyid:E2:6E:01:81:8F:6B:6E:8E:36:88:D7:F3:61:F7:53:C1:23:5E:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4m4BgY9rbo42iNfzYfdTwSNeDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c3:6f:db:d5:2f:58:71:63:fa:9c:51:68:3c:23:68:c1:9b:
a0:a6:3e:27:16:66:10:80:e3:55:34:ec:7f:ae:03:82:f7:6f:
48:e0:83:51:f7:a1:1e:68:30:74:9d:c7:c4:02:d3:5f:7a:88:
40:4c:4a:3c:c2:7b:77:31:21:a0:25:79:33:b1:ae:9e:99:46:
95:61:e1:46:40:27:78:38:7c:2b:ae:a2:f0:85:5c:b2:1a:84:
f9:15:a4:f1:b4:f2:e1:67:ff:45:9b:1e:b4:f0:67:00:9d:11:
54:29:e6:8a:4b:23:98:a1:5d:42:a0:e1:d3:34:06:fd:64:62:
3c:14:94:84:75:e8:b3:19:93:33:ca:66:42:9e:7c:bc:f5:4e:
e4:a7:9e:b3:d9:6f:0a:ee:0b:c9:2b:9a:63:a8:aa:dd:d4:d7:
0b:1e:07:24:f4:6d:d8:1a:d4:49:b5:9f:9d:7d:59:cb:ff:a1:
97:c0:20:48:e7:e4:2f:ca:4e:3c:ed:dc:a3:b2:ad:42:38:06:
d2:05:0f:a8:90:01:96:81:74:7f:97:52:c5:9a:b3:b8:56:99:
31:f8:93:91:cc:0b:e4:4e:ab:8f:3b:b9:99:ef:4d:20:ed:b9:
25:b2:4b:3a:8d:8e:9a:89:85:ee:cf:c0:9e:fb:d1:c9:1e:21:
ad:0b:b5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:42:37 2026 by rpki-client