Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
File: 4Genud52frl9tk5RZHhJRjO9VOo.mft (raw, json)
Hash identifier: PdPgNouySutFpxmoYYeM783dZ6/M+sdU7jBEjNuDrno=
Subject key identifier: 0C:D3:EB:69:60:C7:82:A3:F7:74:57:D4:23:DD:1E:1F:08:3E:D9:1C
Authority key identifier: E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
Certificate issuer: /CN=e067a7b9de767eb97db64e516478494633bd54ea
Certificate serial: 01A0CBFDFF4FD2299515366DE2809411B61E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
Manifest number: 106E
Signing time: Wed 23 Sep 2026 02:00:15 +0000
Manifest this update: Wed 23 Sep 2026 02:00:15 +0000
Manifest next update: Thu 24 Sep 2026 02:00:15 +0000
Files and hashes: 1: 4Genud52frl9tk5RZHhJRjO9VOo.crl (hash: 16CMJrqjKAI2BOZwoc4xE/y/E5RjdB6Oc8WWfJxfxCE=)
2: fqd_p4Wrb6OXddN1aeuYEJC8YH4.asa (hash: jmbRwKrDPkjso/zUasnqP+cDaGWkVpbGq+nQ2VGiSLw=)
3: mqWwX3c1BOwgAKEJ3FuyfvO_MKs.roa (hash: 05RPu7PASUup4/F6w6O5WKp82l03RTgAZ/jZKw8NCyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 02:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fd:ff:4f:d2:29:95:15:36:6d:e2:80:94:11:b6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e067a7b9de767eb97db64e516478494633bd54ea
Validity
Not Before: Sep 23 02:00:15 2026 GMT
Not After : Sep 24 02:00:15 2026 GMT
Subject: CN=0cd3eb6960c782a3f77457d423dd1e1f083ed91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:f5:fd:83:dc:58:34:b8:7a:8e:e4:21:28:
61:bc:06:2c:67:87:d6:04:1d:ed:29:e0:3d:ce:54:
2e:bc:4f:a2:d1:9b:be:c0:0e:78:cd:05:76:32:8c:
7f:89:f2:df:77:f1:bb:59:9d:8c:95:e6:fd:ce:a3:
16:e2:9f:ea:b6:8a:60:7b:fa:11:ca:80:c1:d8:7e:
c3:aa:5b:26:c1:55:58:42:50:5f:31:a6:aa:d6:ad:
a0:23:26:21:04:aa:e1:87:3e:01:55:6a:6f:13:ae:
4e:3e:a0:13:1e:0e:3e:73:a7:f4:56:11:65:6c:95:
ea:eb:d3:b4:5d:a6:d4:c5:ca:72:87:59:24:87:f1:
b0:c3:90:1f:2b:d1:9c:4f:48:e4:60:20:3a:dd:fa:
18:d9:00:97:61:c3:0d:94:0b:14:0e:be:d9:7a:62:
30:aa:cd:7e:b1:20:b5:48:40:3f:63:1f:96:25:00:
3b:88:e7:27:cf:87:60:44:c2:9d:42:cb:05:8c:f0:
83:d8:4b:b2:59:8f:c6:01:15:8d:6f:31:a7:70:5b:
8d:80:26:41:e4:86:12:2a:77:14:99:e0:93:cb:d4:
7a:49:47:66:c0:d8:1f:a5:ca:87:00:7c:12:af:55:
73:cf:4d:f2:2c:bf:14:f8:f1:96:e8:09:56:c4:b8:
c9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D3:EB:69:60:C7:82:A3:F7:74:57:D4:23:DD:1E:1F:08:3E:D9:1C
X509v3 Authority Key Identifier:
keyid:E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:2e:56:0c:3f:3f:13:c6:08:dd:a0:ae:f1:ac:61:1d:a0:12:
64:a9:5f:d4:ae:f1:0e:1c:ad:c8:c8:ce:0a:24:38:82:c3:d1:
ac:6e:54:68:37:1a:c2:49:b0:f9:32:e0:d1:f8:c2:b6:5d:28:
c7:7a:3d:13:bf:f1:b8:da:21:e9:19:73:ba:ae:4e:06:cc:e0:
cb:25:d5:7d:9c:de:89:4f:44:9b:55:c3:48:18:ee:16:49:23:
4b:04:50:95:0f:23:58:d9:e2:59:c0:cb:e2:85:59:44:d1:c4:
de:49:2d:49:68:20:48:e4:d8:e9:07:64:73:09:37:79:8f:ad:
96:56:08:31:4d:76:33:8d:be:2f:36:e0:a8:35:50:fe:02:10:
4e:46:83:02:7f:5b:d9:a3:88:a0:5d:c4:4f:55:57:39:56:2c:
2a:3b:0d:ac:ac:81:56:93:11:d8:df:1b:95:97:04:0c:06:74:
b6:57:bf:0d:2c:e8:34:99:9c:6a:db:73:84:32:10:0e:d4:77:
8b:7f:86:d7:aa:3e:ec:a3:8a:06:b7:5d:70:97:4c:ff:32:fe:
cd:07:28:dc:93:3e:40:fc:72:28:82:8b:3f:22:ee:b8:f7:a5:
e4:ca:0f:60:05:67:8f:ff:a0:4d:34:6a:61:e1:53:c1:e1:fb:
eb:d8:2e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:18:55 2026 by rpki-client