Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
File: 4Genud52frl9tk5RZHhJRjO9VOo.mft (raw, json)
Hash identifier: C0YTxcDBJESlvVeXmj2rUvimH4xbeU6YdCcZL8iQosg=
Subject key identifier: 15:21:4D:FF:52:9E:26:82:AE:48:96:29:A4:41:CD:6D:C5:6A:32:93
Authority key identifier: E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
Certificate issuer: /CN=e067a7b9de767eb97db64e516478494633bd54ea
Certificate serial: 01A0C0683E7EAA09935B28082A44E423D537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
Manifest number: 1068
Signing time: Sun 20 Sep 2026 20:00:52 +0000
Manifest this update: Sun 20 Sep 2026 20:00:52 +0000
Manifest next update: Mon 21 Sep 2026 20:00:52 +0000
Files and hashes: 1: 4Genud52frl9tk5RZHhJRjO9VOo.crl (hash: 4UC2Z1+g86oJR+zZmrhlqpogTh5nH0aDHYUk7yVP/hY=)
2: fqd_p4Wrb6OXddN1aeuYEJC8YH4.asa (hash: jmbRwKrDPkjso/zUasnqP+cDaGWkVpbGq+nQ2VGiSLw=)
3: mqWwX3c1BOwgAKEJ3FuyfvO_MKs.roa (hash: 05RPu7PASUup4/F6w6O5WKp82l03RTgAZ/jZKw8NCyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:68:3e:7e:aa:09:93:5b:28:08:2a:44:e4:23:d5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e067a7b9de767eb97db64e516478494633bd54ea
Validity
Not Before: Sep 20 20:00:52 2026 GMT
Not After : Sep 21 20:00:52 2026 GMT
Subject: CN=15214dff529e2682ae489629a441cd6dc56a3293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:ed:13:bb:29:04:3d:3e:df:eb:52:f6:39:
20:97:ce:6d:58:17:50:48:10:ed:cf:a5:38:51:e2:
ba:8d:7b:ea:98:1b:78:77:4b:e9:2d:9b:16:70:00:
0b:cb:2b:a5:2a:1c:70:8e:53:db:fd:a4:73:02:94:
eb:67:e2:75:96:64:47:9c:7b:da:55:b6:fd:af:17:
c4:56:d2:c5:b9:81:8f:ac:a7:39:48:9a:e6:67:6c:
9b:58:5c:31:c2:07:09:34:df:7b:35:81:a4:81:5d:
cf:6a:13:8d:c9:80:2e:9f:0e:cd:5f:e9:63:ba:2f:
8b:da:98:19:19:6b:2d:e7:ee:8d:25:5a:49:6d:0b:
d8:62:81:29:d1:be:ec:3b:ac:22:e0:c5:55:c7:83:
5a:b3:5d:06:ae:f4:0f:cb:af:be:9c:c7:22:6f:7d:
18:64:5a:07:5b:a5:ad:16:f7:fe:73:d4:36:b7:1a:
82:71:2c:81:1f:04:76:6c:08:84:19:74:60:9d:0e:
5c:eb:c7:31:35:c2:dc:64:34:29:e2:4c:0e:c1:9c:
e6:16:f6:a0:22:41:57:df:76:6f:a1:35:cb:a9:13:
d8:96:d3:85:16:0a:80:49:28:90:cb:78:f8:39:43:
80:9c:0b:e9:84:15:de:0e:26:3e:05:f9:bf:0e:90:
be:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:21:4D:FF:52:9E:26:82:AE:48:96:29:A4:41:CD:6D:C5:6A:32:93
X509v3 Authority Key Identifier:
keyid:E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:db:57:aa:15:27:1d:a2:80:67:d7:08:36:17:e6:4e:5b:91:
92:5a:e8:7e:93:d8:ec:38:f6:e7:fc:29:72:58:13:48:d5:32:
6b:b7:25:9a:2b:3b:86:8d:c1:e9:29:18:82:e7:3e:64:53:bb:
fd:19:fa:33:dd:cc:29:50:7a:25:2b:85:8d:12:c3:fb:f7:ed:
74:5f:82:05:a1:2b:5c:f4:fb:de:ba:1d:81:c8:70:75:be:88:
3d:36:5e:7f:6a:53:a4:90:79:bb:17:bf:e2:d1:9d:c9:d9:48:
99:11:e5:be:50:b5:65:c3:c4:94:7e:d0:0d:55:14:b1:bd:6d:
19:39:3e:63:4d:3e:ae:26:ed:38:d7:78:fe:b1:e7:48:9e:d9:
fb:22:4a:aa:87:ac:9f:e9:0c:73:18:c3:63:64:30:0c:4f:b7:
2d:e5:ed:bc:3e:0b:18:79:4d:52:4f:6a:21:07:cb:39:64:66:
77:35:5d:1d:16:6e:48:de:d7:57:2c:5b:ec:e1:52:8a:ee:22:
74:41:44:8b:77:be:e8:ab:c5:83:43:47:b6:32:06:8e:4d:32:
66:89:48:88:8e:4a:e7:c3:68:28:2a:88:41:c6:7b:26:f1:65:
78:50:fb:3f:26:29:0b:f8:69:a4:df:86:d9:5f:55:75:12:b5:
a0:3f:dc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:19:32 2026 by rpki-client