Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
File: 4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json)
Hash identifier: lF/enkCr0w5RbMgoxTmCSTW6VpMpLZKrDvXJnIIMynU=
Subject key identifier: CA:2B:82:F6:83:E6:E1:8D:B6:0F:5D:23:E3:44:CF:0D:52:BF:C0:7D
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial: 01A1DE707784D5D30A36F782E8C116F48134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
Manifest number: 14B6
Signing time: Sun 15 Nov 2026 09:01:14 +0000
Manifest this update: Sun 15 Nov 2026 09:01:14 +0000
Manifest next update: Mon 16 Nov 2026 09:01:14 +0000
Files and hashes: 1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: P3wyPl+F9qmjsgDB2Ma7RzATDsvIXHalMcQ+lIbeaj8=)
2: nqVRQY9OL-QYsG10ABRxkJgdhMg.roa (hash: wMAwtClt2rNSLlbeGnfkTll5PRaR6LFumc9JToEyja8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:77:84:d5:d3:0a:36:f7:82:e8:c1:16:f4:81:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Validity
Not Before: Nov 15 09:01:14 2026 GMT
Not After : Nov 16 09:01:14 2026 GMT
Subject: CN=ca2b82f683e6e18db60f5d23e344cf0d52bfc07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f5:73:52:3e:c9:db:a5:a7:03:e1:8f:75:d6:
3e:eb:f8:4e:c5:02:3d:4a:14:23:98:63:60:d7:98:
5a:a2:3a:3b:f4:4e:29:e6:a8:c2:76:b7:f6:d4:e8:
1a:84:35:b2:ce:d3:db:d9:60:b2:b1:ab:6a:86:b5:
19:39:3a:77:d9:24:4e:81:89:c2:f7:fb:a0:85:cf:
e3:7e:f6:47:18:4d:e3:02:28:ad:3b:1a:5b:55:3a:
15:93:05:15:0e:df:aa:96:8b:c4:b0:c7:b7:ff:f5:
a2:c9:59:2d:24:90:37:1e:09:1a:50:09:b3:b2:bc:
61:4f:58:54:a1:13:40:d1:93:0c:0d:94:2c:cc:05:
ec:ff:1c:bd:c2:60:a4:fb:64:d6:26:20:61:82:46:
45:94:e2:70:8b:a4:25:a5:da:c2:d7:3f:87:d2:cb:
62:42:45:e2:78:fe:56:e2:2e:ee:2e:52:7c:27:23:
e9:50:3e:89:a0:2e:78:87:48:02:7c:01:e7:5c:fd:
33:dc:f2:0a:11:ee:88:34:3b:6c:86:46:1f:10:24:
2a:12:4e:16:9b:b5:06:7f:60:70:59:62:df:3c:28:
bd:dd:80:79:17:83:81:c9:4a:fd:7b:09:d3:0e:1b:
1b:e8:26:a2:6e:29:05:91:19:b8:d1:b3:71:bc:f8:
71:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2B:82:F6:83:E6:E1:8D:B6:0F:5D:23:E3:44:CF:0D:52:BF:C0:7D
X509v3 Authority Key Identifier:
keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1d:e0:e7:eb:bd:dc:c4:d7:2b:86:7d:2a:0f:e5:eb:28:83:
e4:97:6a:e4:2f:8f:52:e6:3c:f8:34:71:a0:27:f3:1a:38:38:
08:cc:2e:a1:2e:8c:66:c1:38:46:15:07:8b:57:38:46:ec:78:
b0:f0:08:31:0e:23:bc:6c:94:c8:05:2f:25:ca:05:a2:f2:6f:
56:b9:60:7f:7c:56:cc:2a:85:48:18:f4:7c:d7:42:08:6e:69:
cb:46:79:a0:24:db:b1:d6:1a:61:b6:d4:cf:7e:b6:47:f9:e2:
28:89:30:b7:e8:28:bc:27:6a:42:4b:b0:40:f7:46:f2:7d:44:
98:51:6f:a4:41:2e:44:30:0f:b4:68:6f:3a:7b:96:71:8f:e8:
91:8b:90:91:ae:24:f5:9d:db:27:0d:3e:f6:80:9e:55:08:3a:
64:5b:48:30:c8:e7:64:bc:0b:19:ac:26:ab:86:99:44:52:d0:
c8:0e:32:e1:c5:fa:5e:69:da:98:93:b0:2c:8a:88:30:ab:40:
20:c6:69:65:80:8a:6e:fc:28:fe:dd:12:73:e2:cf:c4:e2:78:
3b:ba:44:f1:dc:df:44:e1:e2:a3:b1:63:ee:1c:75:ac:44:de:
a9:a5:0a:37:9e:0e:d9:cb:a9:d9:b1:14:5c:34:4a:6d:72:2a:
d7:1f:18:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:51:54 2026 by rpki-client