Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
File: 4I6QfA_lCJGna9mbKQhwCmrGLjg.mft (raw, json)
Hash identifier: buIDjmzPJ55is6l264HkAVwQa14pzNzEj+gpeC184C8=
Subject key identifier: CF:68:1E:B6:8C:2C:CC:F0:5C:16:4A:05:78:E9:4B:85:8E:37:3E:80
Authority key identifier: E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
Certificate issuer: /CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Certificate serial: 01A0C47BD000075A108E5325935F3FB36D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 15:00:43 +0000
Manifest this update: Mon 21 Sep 2026 15:00:43 +0000
Manifest next update: Tue 22 Sep 2026 15:00:43 +0000
Files and hashes: 1: 4I6QfA_lCJGna9mbKQhwCmrGLjg.crl (hash: 2fTkaQ263Pgsf1pSF1MRHWOyDrVxiOUT1BxAiEE9lPg=)
2: azb1_WO3_kwPuSAgYoVTIRPk0go.roa (hash: 1/nAUytly79O0AERwCaGs88tFerHBFBw3HoH4Qov+gM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:d0:00:07:5a:10:8e:53:25:93:5f:3f:b3:6d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Validity
Not Before: Sep 21 15:00:43 2026 GMT
Not After : Sep 22 15:00:43 2026 GMT
Subject: CN=cf681eb68c2cccf05c164a0578e94b858e373e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0f:ac:a1:6b:e2:56:3a:ce:7b:26:0d:74:a4:
57:c4:13:c2:05:6f:25:aa:e6:a5:81:74:f0:67:aa:
2e:2e:50:05:e3:77:74:d8:5f:b4:6c:b4:9f:c3:de:
f1:3f:b0:04:7e:d6:c0:a1:ed:93:39:dd:96:b8:b6:
63:79:2c:db:ca:dd:55:59:3b:e1:37:4a:5b:2d:7e:
c0:5d:14:c1:7f:bd:d8:2b:e5:ca:8a:eb:fa:43:39:
1c:69:cf:15:91:f9:ba:b4:9b:14:49:62:35:f5:cc:
b3:ec:6a:e5:c0:7b:e2:64:cc:e3:06:09:cd:6d:ab:
ef:5d:1f:78:10:87:5c:7f:a2:ed:1d:55:17:3b:60:
43:ba:a0:e3:50:ff:96:37:99:4e:41:33:d9:dc:94:
b1:03:bd:ec:21:8c:36:8a:ef:42:31:be:d0:fd:67:
62:17:74:85:92:9b:c9:4b:b1:97:4e:49:72:7e:ed:
10:8b:89:01:7e:8b:b1:24:11:79:56:d1:b9:b9:e3:
28:69:ed:0b:a5:de:33:6f:af:a2:c9:de:ca:d3:56:
cb:0a:11:8a:07:7f:e4:7e:20:d7:b3:1f:50:6c:44:
e4:6c:83:23:70:62:27:9b:53:0d:80:f6:20:a8:a6:
92:d4:90:16:fc:ce:05:c7:d1:2f:de:72:a3:c7:dc:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:68:1E:B6:8C:2C:CC:F0:5C:16:4A:05:78:E9:4B:85:8E:37:3E:80
X509v3 Authority Key Identifier:
keyid:E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a6:05:46:2b:da:b6:69:10:04:56:3e:a8:a4:da:69:33:84:
09:3e:f1:38:04:2c:86:3e:30:a9:df:fb:78:2e:62:d0:ce:fd:
9e:c9:bf:7f:9e:fe:15:90:6b:4d:0e:ae:5e:1f:ad:45:88:56:
1f:14:d6:45:cc:21:4f:96:ba:8d:17:57:8e:5f:78:da:fc:fd:
67:71:53:da:c1:b9:23:2f:16:e8:44:2d:a7:ab:23:4c:a6:95:
c9:17:44:37:96:62:03:06:0a:f2:64:a0:98:1c:d5:78:5c:85:
b5:2e:4a:91:78:86:f2:e1:49:42:49:ea:ab:49:e4:43:ab:4a:
65:58:67:a3:a4:36:ee:37:91:b3:64:c2:22:f5:19:96:dd:7a:
97:ac:b9:8e:b3:59:43:85:7f:0a:c0:bc:93:e5:b4:79:57:73:
79:10:b1:a9:8b:f3:a8:c8:4a:4e:d1:27:70:68:ba:42:f7:c6:
e3:2e:0a:fd:75:3f:1c:70:79:59:de:9f:fc:af:5f:11:52:31:
45:98:a0:70:49:a4:7e:7d:4e:22:da:49:df:37:14:ca:9e:d0:
7d:78:96:ec:bc:9c:c7:01:3b:ae:1c:51:a6:f4:01:f8:23:23:
d2:f4:d3:37:a0:09:9b:68:88:1d:4f:6a:e5:9a:96:b6:3e:13:
93:e8:4c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:48:39 2026 by rpki-client