Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
File: 4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json)
Hash identifier: zAOBCHyfyZUpldsoEVMV7+APKqI40CXGikC3MrAxzck=
Subject key identifier: BE:6C:5E:16:3B:20:3F:74:91:7F:40:03:E0:A8:21:F0:B7:1B:5F:4E
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial: 01A0C28E289EC8119CF10F1DF057DB6C301D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
Manifest number: 1423
Signing time: Mon 21 Sep 2026 06:01:31 +0000
Manifest this update: Mon 21 Sep 2026 06:01:31 +0000
Manifest next update: Tue 22 Sep 2026 06:01:31 +0000
Files and hashes: 1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: QXTruH+28h8VID/QEh2LOnI97jxSWBfmn/QMO58EZ6E=)
2: nqVRQY9OL-QYsG10ABRxkJgdhMg.roa (hash: wMAwtClt2rNSLlbeGnfkTll5PRaR6LFumc9JToEyja8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8e:28:9e:c8:11:9c:f1:0f:1d:f0:57:db:6c:30:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Validity
Not Before: Sep 21 06:01:31 2026 GMT
Not After : Sep 22 06:01:31 2026 GMT
Subject: CN=be6c5e163b203f74917f4003e0a821f0b71b5f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:93:02:ff:ad:68:97:29:3d:b9:75:25:a5:7c:
69:6f:87:99:13:82:09:5d:0e:c1:31:b0:3f:de:3d:
89:8b:0f:c3:7b:85:25:e5:03:4d:99:ad:39:22:f9:
f0:6c:7b:46:16:47:6f:1c:a1:2d:a5:fb:83:47:c3:
10:1b:8e:7e:6b:81:61:af:9b:ea:4d:41:38:02:03:
73:5f:25:c6:cf:c2:f4:a9:95:0a:83:3e:e1:61:37:
c0:d9:4a:8e:25:a4:24:6c:d9:2f:b1:10:2f:c1:d4:
25:02:0e:78:5c:69:db:8b:42:38:b0:e4:ef:64:39:
11:26:6d:d2:58:c3:9b:a9:a6:11:37:a6:ba:e1:f0:
66:d0:b5:62:1d:d2:a3:97:67:74:1e:d7:53:22:a3:
be:61:ee:e1:af:20:f2:0c:78:57:dd:d4:67:39:19:
cf:69:22:fb:f5:63:45:fd:6e:cb:81:63:8b:34:97:
22:e8:0e:f4:e9:f7:4a:ab:55:15:bc:b5:78:b2:55:
06:ca:55:a3:5c:ff:e7:ef:76:3e:6e:cf:71:53:59:
4c:fc:fc:e3:b2:5d:62:98:1e:31:5c:33:8e:eb:04:
45:35:33:ae:96:85:de:5a:fc:6d:66:01:06:fc:ab:
bd:9c:a1:0c:e5:9f:c5:85:8c:69:b5:17:b7:c9:e2:
46:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6C:5E:16:3B:20:3F:74:91:7F:40:03:E0:A8:21:F0:B7:1B:5F:4E
X509v3 Authority Key Identifier:
keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6b:08:12:a6:fe:9d:d6:d9:06:44:0d:6a:a3:df:23:d0:b2:
dc:d0:cc:27:cb:21:69:c2:ef:3d:57:aa:55:1f:4b:24:74:11:
6b:66:3e:73:7d:95:1f:23:cf:a0:60:c3:99:3c:de:40:53:2f:
6f:39:e0:e6:c7:09:07:67:bb:cd:4b:75:d5:0a:d3:b0:54:7a:
e7:84:5b:81:72:10:d2:6e:82:f4:31:53:a4:ea:99:97:8b:bd:
04:16:98:93:f5:58:bc:e3:50:f9:c5:3f:21:53:1f:07:92:a2:
d6:9e:74:36:6d:8e:0f:f1:51:be:a9:30:9c:0d:95:1c:31:c4:
5a:34:9d:b8:30:a1:3d:3b:15:89:ad:e4:d7:1b:1b:98:ce:a4:
5a:a7:82:0c:40:ab:11:4d:9a:99:a6:80:9e:2e:71:cf:e4:af:
3b:71:8e:1f:a0:69:3e:14:46:d8:ad:36:1d:e9:10:18:67:42:
e1:06:ad:d5:b9:ae:54:fb:ac:45:10:d7:68:6a:a2:82:7f:dc:
51:fa:69:8b:5a:95:11:1e:d3:da:6d:3b:e4:4c:95:a9:ed:5a:
94:f5:86:45:2f:74:86:ee:4c:7e:6e:71:a1:1e:52:f2:02:40:
b6:17:c5:ea:da:fb:1c:97:18:3e:a6:1e:7f:ef:b3:9a:0c:8e:
73:fd:a8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:59:55 2026 by rpki-client