Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
File: 4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json)
Hash identifier: uIHTFcbb7BjkdVrONeK0gk2/NfbqnBp9ZJq8ib5Qupw=
Subject key identifier: 27:EE:94:AD:3D:49:5E:F0:F2:C0:43:42:58:91:19:9A:DF:01:74:18
Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
Certificate issuer: /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Certificate serial: 01A0D1C9495CB2BB4C473D7DCF2287AAB33A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
Manifest number: 0BF1
Signing time: Thu 24 Sep 2026 05:00:24 +0000
Manifest this update: Thu 24 Sep 2026 05:00:24 +0000
Manifest next update: Fri 25 Sep 2026 05:00:24 +0000
Files and hashes: 1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: Cs0R/Y5p4vCdSixmW28N93hq7xPix+wcNSG2l/g39P8=)
2: YWMzYYdq1V4GAPZh68WrmEyhVfI.roa (hash: L4cChRKUEEfDnkwJCOfQ9K/LTDSkENg728c4ezgiFqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:49:5c:b2:bb:4c:47:3d:7d:cf:22:87:aa:b3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Validity
Not Before: Sep 24 05:00:24 2026 GMT
Not After : Sep 25 05:00:24 2026 GMT
Subject: CN=27ee94ad3d495ef0f2c043425891199adf017418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:c3:79:f7:28:eb:86:e5:f8:e8:4e:54:ed:
3d:9a:aa:87:ba:d0:33:1d:19:32:d2:f8:58:3b:20:
b7:77:c3:7b:57:9c:86:6d:ad:1d:8e:73:cc:99:94:
04:09:c4:c6:fe:bd:dc:89:69:e0:ae:81:3b:1c:e3:
6b:86:16:61:67:78:1e:e0:62:bf:6d:df:70:19:4e:
87:bf:f0:82:bd:1e:32:d1:f4:22:ce:23:b2:95:4f:
79:1c:91:77:97:32:00:0b:99:68:a3:00:e8:f6:4a:
30:89:c5:93:09:43:41:75:fb:1c:8e:83:87:a1:76:
9b:9c:11:c7:d6:e9:c4:37:0b:af:1a:c7:af:14:de:
fa:fd:0d:21:f3:b1:7a:5f:5b:e4:3b:ed:8e:03:8a:
9d:ef:1d:4e:dd:f0:97:26:3a:e3:4d:fe:26:49:b6:
3b:ad:50:3f:d5:d4:18:87:9c:bc:de:75:07:a8:9c:
6c:5f:7f:d6:e6:9a:56:26:df:76:27:67:b3:c4:ee:
2a:07:7f:e8:79:80:cf:d2:b1:69:b4:43:28:96:2c:
9c:46:43:22:bd:8a:90:37:08:ee:4a:0a:17:15:5e:
2a:49:85:1c:05:0e:2d:e6:7e:0f:2f:bd:6f:81:38:
81:a1:50:fc:2c:ba:64:9a:9f:80:97:dd:34:4a:6a:
2e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EE:94:AD:3D:49:5E:F0:F2:C0:43:42:58:91:19:9A:DF:01:74:18
X509v3 Authority Key Identifier:
keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:3f:3a:6e:6c:9b:cb:c6:3c:73:2d:a8:c6:65:c6:d4:aa:25:
31:86:7e:ff:62:b5:74:a8:5d:99:36:d0:ad:c0:92:81:21:46:
9c:96:be:cc:4e:f9:df:28:50:b9:7b:92:5d:dd:d6:c4:5a:e1:
70:3d:67:a2:0e:1a:15:a7:d2:af:f2:0d:f5:3e:eb:6a:98:e1:
f2:fc:88:12:93:e6:4c:02:3e:41:d8:8b:03:ed:ab:9d:fa:be:
dd:2c:66:cd:44:98:e4:40:aa:94:ef:61:65:e8:82:8b:fa:ec:
2f:c4:6d:cc:5c:4c:18:88:e8:61:45:23:5a:f8:7e:bc:18:f9:
88:cf:19:6c:92:10:67:ba:b9:f0:a0:4c:fc:dc:d6:78:1b:21:
d8:4f:25:16:81:96:b2:eb:f5:e0:6f:3d:27:9e:2f:22:aa:5a:
47:7e:c7:63:fb:43:ce:ff:05:6d:b9:76:18:80:03:2e:32:5b:
70:10:f2:c7:34:93:03:18:fa:dd:ee:df:1d:ba:53:da:b8:b2:
f3:f2:3f:4d:8e:f5:b0:d0:c4:86:5a:5e:63:7b:fb:35:af:05:
41:1e:67:81:69:09:9d:35:d1:0e:f4:54:fc:cd:6e:52:15:ae:
d1:ce:d1:03:a1:15:67:47:0b:72:e5:02:cc:18:c1:d5:9e:73:
70:7b:45:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:10:31 2026 by rpki-client