Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
File: 4I6QfA_lCJGna9mbKQhwCmrGLjg.mft (raw, json)
Hash identifier: Mckn1IiYJrGvEwNiGG0Bgk2YkcPSALjm6uE0SLId5B8=
Subject key identifier: FB:28:88:7B:B4:7F:CF:A7:3C:83:1D:0B:85:AB:90:2A:A1:9A:1B:63
Authority key identifier: E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
Certificate issuer: /CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Certificate serial: 01A1DE70DFE646D6EF120000CF6264CF7A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 09:01:41 +0000
Manifest this update: Sun 15 Nov 2026 09:01:41 +0000
Manifest next update: Mon 16 Nov 2026 09:01:41 +0000
Files and hashes: 1: 4I6QfA_lCJGna9mbKQhwCmrGLjg.crl (hash: GpaID52ezGRRux/k2FfP5xEYcuPDDvDnXHSKmeqbo7c=)
2: azb1_WO3_kwPuSAgYoVTIRPk0go.roa (hash: 1/nAUytly79O0AERwCaGs88tFerHBFBw3HoH4Qov+gM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:df:e6:46:d6:ef:12:00:00:cf:62:64:cf:7a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Validity
Not Before: Nov 15 09:01:41 2026 GMT
Not After : Nov 16 09:01:41 2026 GMT
Subject: CN=fb28887bb47fcfa73c831d0b85ab902aa19a1b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:28:6c:b4:36:44:25:8f:49:27:ab:1a:de:59:
59:cd:ba:3c:ea:88:5a:4c:6f:6f:72:ee:80:31:b0:
2c:f6:63:34:e3:1e:63:5e:8b:2e:ae:02:05:37:3e:
ba:a7:93:f8:3c:f9:d6:f9:76:de:01:21:38:27:38:
97:0a:1d:5a:f3:33:de:f8:8d:a5:96:1b:73:17:64:
81:19:f1:51:88:2a:a4:c6:4a:c7:e0:02:d6:e9:32:
28:5b:f0:c3:66:4e:f3:be:1f:42:13:55:d7:3a:b1:
9b:2a:87:8e:53:57:92:94:eb:69:35:2a:bd:77:03:
ee:d0:20:72:23:5c:38:2a:76:a5:19:22:cb:98:2d:
41:21:48:47:e1:bc:b0:9c:c5:d0:d6:20:1b:6c:f5:
38:af:48:12:5d:ca:84:e9:5c:3e:5c:b8:49:2a:2b:
ce:52:63:a2:91:10:27:f6:aa:45:de:26:0e:44:e1:
f9:26:4e:72:33:fb:04:8c:4d:f1:3f:1e:9c:98:8b:
23:24:3b:d6:5a:d9:7a:e9:92:c7:4b:4a:f8:88:c7:
cd:01:35:1f:2a:28:83:5b:23:1a:a7:e6:e2:94:f3:
c3:ad:15:de:cc:31:1b:43:ab:22:01:1a:c4:c6:11:
e1:46:9a:51:c2:7a:e0:63:75:db:9a:c3:6f:ad:0c:
26:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:28:88:7B:B4:7F:CF:A7:3C:83:1D:0B:85:AB:90:2A:A1:9A:1B:63
X509v3 Authority Key Identifier:
keyid:E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:15:a5:af:e5:65:0c:1f:ba:57:14:6c:6c:9b:f4:15:ef:bd:
fa:a8:02:9d:03:e0:1b:bd:63:5c:b2:d6:34:cc:32:46:98:b1:
03:ad:73:e4:8f:d8:fb:85:6a:07:90:77:ba:fa:c8:4e:9c:71:
ca:cd:95:13:08:4c:30:b5:63:f1:2f:21:4b:92:34:6f:26:05:
e4:38:4c:0b:2a:6e:c4:36:6a:e8:f5:61:f5:0a:86:73:9a:58:
d2:ef:c7:7d:52:b4:00:fc:d4:4e:07:80:e1:dd:b3:4f:a7:d6:
cc:9b:6f:59:6f:4e:f4:a0:d4:e3:ec:a1:9a:6d:c7:d3:cc:db:
5f:49:24:b7:a1:9e:d5:e3:7f:a3:62:f8:a0:d2:a3:07:df:51:
5e:76:c4:6c:de:8f:ea:94:e7:1a:02:0b:bb:65:04:a7:08:c6:
3b:24:ee:f8:61:0c:32:b6:b4:94:c1:33:45:9f:8d:3c:a5:b0:
ff:39:ee:a9:6e:65:3f:8a:bb:b2:ac:7d:69:ef:d1:db:2f:ad:
e8:84:b0:43:63:45:25:b8:c8:b0:37:4c:e7:19:3d:20:0e:88:
05:5c:c4:10:5c:40:bf:d7:0b:f1:72:d1:d6:08:26:41:80:a0:
22:fc:e0:8d:2a:6b:7f:e0:05:54:2d:5c:ca:d4:3d:f7:69:31:
38:f6:38:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:31:47 2026 by rpki-client