Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: mE1IlBwAe2PwGrxIU4CQqIiv+7puFqq1qB0Nn9WLkFA=
Subject key identifier: FF:F9:3B:D3:0A:AF:31:01:40:48:CC:D8:F3:4D:0A:CE:2A:5D:FE:06
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 01A0C8FCE580A054165032DE4C8FD4520EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 1458
Signing time: Tue 22 Sep 2026 12:00:12 +0000
Manifest this update: Tue 22 Sep 2026 12:00:12 +0000
Manifest next update: Wed 23 Sep 2026 12:00:12 +0000
Files and hashes: 1: 0nQ5HrpSfmi0t1lgfzKwG4GEEHA.roa (hash: rFJp94wINDC3ecjBHnwWODJLBayKpyALDaZAihUD5C4=)
2: nPVHMKh_KfMvRao_vET8GSNdB60.roa (hash: CNFNDT0hozsG/GOj4JydTWPL4u34Bu99WDiqKSdCSGY=)
3: nT0dZV9vpJOe4Ur34PRwza0i0vo.roa (hash: NbPGPMvzh32ZwAt9Bg1XTBpSWoDxY/0tDyiOFU+i+30=)
4: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: Ucax1DnpT7QmDP21UDa4WlrAb0RKqwpmAAHbyFlkXRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fc:e5:80:a0:54:16:50:32:de:4c:8f:d4:52:0e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Sep 22 12:00:12 2026 GMT
Not After : Sep 23 12:00:12 2026 GMT
Subject: CN=fff93bd30aaf31014048ccd8f34d0ace2a5dfe06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:34:f5:23:4d:82:86:5a:b7:64:57:b7:47:70:
69:fd:87:19:cb:dc:87:1f:6d:88:dd:1e:4d:32:ae:
13:9a:91:d9:63:79:7a:18:1a:2f:5f:ca:83:e8:19:
ee:39:8e:9f:de:ae:9b:9e:f0:43:f5:a9:9e:69:44:
c9:7f:32:8b:c1:0e:cd:33:b0:8f:51:f4:a2:84:0e:
f3:de:25:17:86:04:47:1e:ee:12:eb:10:7a:18:dc:
80:09:e1:eb:a8:3c:5d:38:10:f0:d7:82:54:49:1d:
ff:52:24:ba:e0:11:36:89:5c:36:f6:b4:15:05:3a:
b3:2a:76:05:f8:ef:5e:28:b9:4a:1a:a7:15:d7:23:
b7:50:f1:a5:f3:79:9d:56:1e:d6:ec:67:2d:36:84:
46:ea:db:d7:df:03:9f:e3:da:59:92:b1:08:d2:98:
69:85:21:ae:82:5d:42:18:6d:9d:00:a0:f4:2f:9d:
3b:2a:d8:94:78:49:88:52:d3:1a:89:75:61:80:7b:
23:bb:d2:53:46:4f:76:bd:1c:1d:2b:7e:2f:56:d2:
d1:20:89:c4:01:af:fc:06:77:63:1e:bc:ce:e2:2f:
81:39:46:50:b8:ed:33:a3:f6:84:21:7a:31:97:b9:
1a:61:1d:82:9a:60:67:ed:42:6e:21:27:2e:3b:6b:
39:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F9:3B:D3:0A:AF:31:01:40:48:CC:D8:F3:4D:0A:CE:2A:5D:FE:06
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f7:cc:a7:3f:b1:13:1a:b0:8c:6f:67:28:eb:eb:9a:21:e3:
2b:6e:2b:f7:75:d1:ca:75:ab:18:bc:1c:66:2f:fb:dc:44:37:
38:b1:72:45:fd:e1:75:a3:01:3f:c7:71:b1:0e:36:40:f8:e5:
cc:49:dd:d3:ea:7f:b6:72:fa:e0:3b:d5:de:b1:be:35:93:cd:
59:62:db:0e:c4:2d:02:1a:ea:3f:2c:12:62:b8:93:22:b6:d5:
d3:65:3e:db:bb:be:20:5f:4b:0b:4c:aa:b4:4b:00:09:b6:15:
4e:e8:28:90:2c:6c:bc:74:64:82:26:8b:41:96:95:35:4e:9c:
3e:42:a1:b3:b1:6e:88:9a:f5:68:58:5e:36:ca:86:f2:49:1f:
6b:c3:36:ee:4b:4c:ea:04:66:ed:f4:3d:f2:96:9f:4f:3e:53:
9c:9d:b2:79:b8:1d:13:ab:6c:40:02:64:a5:2e:12:65:fe:31:
66:4b:b8:97:ab:b1:ca:ba:bb:69:c6:fa:c1:49:9b:39:13:91:
be:2a:86:a7:e3:be:3c:1d:bf:3e:34:e8:66:03:c4:89:c5:00:
1f:62:d9:3a:b1:4a:b0:96:17:9f:01:b7:64:b9:83:04:59:d5:
51:7f:3c:c7:bc:88:81:6e:d1:ce:c3:42:20:96:cd:2f:30:29:
34:1b:ea:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:21:52 2026 by rpki-client