Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier: rh8XLQibaMC7D1RXT4qjUmiltLrMO/T2I1fRWC1YqGA=
Subject key identifier: F4:DF:AD:02:1F:BF:20:0A:3D:52:49:24:0B:08:D0:9E:F0:4F:F4:ED
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 01A0C3D72B99F463948BD78918E31C0B6D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number: 12CD
Signing time: Mon 21 Sep 2026 12:00:53 +0000
Manifest this update: Mon 21 Sep 2026 12:00:53 +0000
Manifest next update: Tue 22 Sep 2026 12:00:53 +0000
Files and hashes: 1: 0NQU1ASarAJo1UIvicGr69EoQz8.roa (hash: WdkEuOIrig9vUDyn2CAOyE+4Fo/rEVr4Pv+Aia51hm8=)
2: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: M2juW0Alwgnef6Ua9JFeGWIG798AVqWCYQz+xsv0tRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:2b:99:f4:63:94:8b:d7:89:18:e3:1c:0b:6d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: Sep 21 12:00:53 2026 GMT
Not After : Sep 22 12:00:53 2026 GMT
Subject: CN=f4dfad021fbf200a3d5249240b08d09ef04ff4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:12:08:93:ab:a3:ec:50:76:c1:95:97:e2:99:
dd:f4:5f:af:6d:72:14:3e:2c:27:b3:4a:48:65:ce:
c3:a3:cb:5e:94:6e:a0:e9:4a:11:d4:b9:99:ac:c1:
1a:92:df:d7:43:58:e1:f5:03:41:e9:86:61:95:ab:
cd:51:64:ac:14:43:1d:ac:11:39:38:86:c3:b7:bb:
91:88:b7:e8:e3:01:b2:18:92:48:65:a3:b2:8a:e9:
d3:7f:f4:24:ae:ee:94:56:90:57:12:24:ff:47:05:
d2:13:1a:d7:7d:e6:70:5c:ff:6f:ef:39:d0:82:ce:
db:b2:d9:37:21:f7:cf:8d:d4:d8:9a:88:c1:27:2f:
13:37:df:8e:df:7a:27:48:47:f1:63:7b:01:4a:5d:
b4:4f:31:fd:ba:50:c2:23:76:3c:0a:c0:fe:ba:71:
cb:fa:cb:d1:d2:15:42:8b:5a:67:e2:f1:3b:83:f7:
27:87:37:3c:81:bf:eb:cc:c5:bd:8c:db:70:73:88:
cb:6f:78:fc:59:35:59:7e:12:81:8d:83:64:21:48:
7c:dd:f3:98:73:3b:f4:20:b7:79:c5:06:a5:99:07:
77:5b:6a:31:d6:d1:df:4d:c2:d3:c1:e0:8b:46:eb:
26:ad:8b:cc:35:87:07:4c:e8:b4:a4:0f:d8:b9:cf:
7e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DF:AD:02:1F:BF:20:0A:3D:52:49:24:0B:08:D0:9E:F0:4F:F4:ED
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:08:84:b9:87:7e:f1:c6:b8:d7:e6:a5:49:90:ed:e7:fe:05:
13:1a:fa:d5:bd:99:20:42:a1:0b:92:63:b1:23:a5:66:c3:33:
46:36:e2:3a:35:3d:bb:8f:c5:0d:a1:98:0b:cf:b1:7c:7d:d4:
5e:89:96:ac:aa:df:95:2a:f9:f3:00:c4:2d:6f:e2:de:98:2d:
23:24:fe:ee:f6:16:f2:10:d2:6f:3c:85:2f:d5:5d:89:10:e1:
4d:e3:9d:a8:13:f1:a6:de:b8:e6:37:f5:7f:9c:7b:33:f3:10:
3e:e0:7d:68:cb:88:d2:6a:f1:d2:ee:89:ee:46:b6:a7:ea:ff:
13:7f:ca:e4:c3:01:cd:1f:a3:76:24:29:9a:b5:b2:c3:f8:d5:
6a:ad:e3:2f:11:5c:05:95:90:f6:01:2b:b4:38:00:9c:76:e5:
b5:17:23:48:b4:8a:ae:b5:81:99:9e:0d:a0:97:18:7d:df:09:
10:cf:39:85:00:8e:a3:26:76:22:50:7f:05:c4:76:09:02:c3:
fb:c1:a5:59:87:b2:24:3f:84:3d:53:dd:23:5d:bf:75:d1:bd:
84:0f:cc:72:4a:47:5f:48:7b:0c:c4:82:b9:8d:c3:f5:85:81:
b4:62:88:38:c8:06:8e:f0:6f:25:dc:18:37:f0:52:6f:4b:f6:
b9:48:56:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:04:56 2026 by rpki-client