Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
File: 4NQ1eE2owhjg_xB83P4kykVpyUk.mft (raw, json)
Hash identifier: qjTV3/K8JgTxaTtbsX7EaQO1MiGb3D5teNXPwaK8NEo=
Subject key identifier: 7F:75:48:10:A5:7F:DE:EC:FC:6A:74:2E:D7:6B:4D:45:D9:70:77:97
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial: 01A0C2FAD295450B754B544BDCB3AA29237B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 08:00:12 +0000
Manifest this update: Mon 21 Sep 2026 08:00:12 +0000
Manifest next update: Tue 22 Sep 2026 08:00:12 +0000
Files and hashes: 1: 4NQ1eE2owhjg_xB83P4kykVpyUk.crl (hash: 25dcC2xbdfcguuMv+cOSoUfCmm2qSccdikNbsz+BYNg=)
2: HQvqu0FyNTgLxOCtIkfc5EdcDj0.roa (hash: 130FHhBXUMCrMDc50ZJnqMVOCj69/WSdEuG7otm6jac=)
3: JDb5A2keqNNHHn7egHMcEGsac60.roa (hash: ArdL/hAkNPkcLPWJJnXPFWGPHSAOP/P5AYcbgtu+Yug=)
4: MbiryQPvDhyE4fWE2RUNJytt6AY.roa (hash: OrXM+BXuK0a9EBtLr+v3zOe94bGU/tMcOd4waL7ij94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fa:d2:95:45:0b:75:4b:54:4b:dc:b3:aa:29:23:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Validity
Not Before: Sep 21 08:00:12 2026 GMT
Not After : Sep 22 08:00:12 2026 GMT
Subject: CN=7f754810a57fdeecfc6a742ed76b4d45d9707797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4b:19:ff:97:29:4e:15:dc:2a:65:b3:fa:34:
6f:e9:b9:a6:c8:bf:3e:2c:15:bb:07:b0:d7:fa:d7:
17:b0:e8:56:5e:e8:e2:e3:f0:13:d3:0e:87:1f:1f:
2b:f5:27:bd:ff:f2:42:ac:33:e4:c3:04:67:f3:61:
3c:68:8c:9f:aa:51:84:16:1e:9e:65:4d:6a:52:df:
ed:90:31:a7:9b:a5:5d:3a:0a:d6:be:24:b6:63:32:
79:dc:60:82:b9:76:9c:86:7d:3b:4e:f0:4c:ec:04:
60:a4:3c:30:1f:21:ad:96:21:3d:0f:57:ee:cf:99:
7a:52:1f:e8:1f:ab:66:6e:e7:c4:25:56:37:da:8a:
b0:d4:d5:53:71:a2:94:58:fd:01:4a:ac:94:93:78:
17:ef:bd:97:06:71:43:02:13:1f:05:e2:eb:f7:54:
a0:38:41:17:db:03:d3:ce:ba:22:01:78:71:94:ed:
91:b4:42:c4:2b:82:48:3e:d9:fc:16:41:a7:7c:d0:
58:73:9b:7d:b8:68:4c:fb:37:7b:8c:6f:d8:9a:51:
63:ec:c3:6a:60:ed:a9:e3:85:99:e7:b9:d8:98:a0:
b3:b3:53:d0:98:27:2f:f5:67:ce:83:0e:0d:54:f7:
d5:d2:1b:e9:a2:cd:6e:5a:b4:17:7c:02:c0:a9:91:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:75:48:10:A5:7F:DE:EC:FC:6A:74:2E:D7:6B:4D:45:D9:70:77:97
X509v3 Authority Key Identifier:
keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fb:bf:8d:5f:0f:6e:3e:69:0f:9e:de:95:09:70:15:ea:2c:
7e:a6:52:fa:72:0d:23:0f:5f:d8:bc:7b:2b:e6:fb:8b:1f:da:
95:61:87:f8:50:c8:b3:99:b2:8c:71:62:40:29:83:2a:8c:40:
a5:e0:3f:46:80:5e:a7:5e:65:c9:6d:ee:19:d3:b2:a9:b6:14:
bf:b1:d5:16:47:0e:b7:a1:25:5e:8f:95:61:9c:40:26:cc:b4:
98:cc:4c:11:cd:0c:ce:27:ac:05:f6:b2:40:38:5e:d0:30:60:
37:8a:19:7c:ff:8d:40:05:9c:12:56:dc:d7:24:67:d0:0b:51:
4c:f6:82:09:e3:3c:f0:9c:54:0c:6f:32:f3:05:7c:3b:94:d1:
94:01:1f:d6:23:eb:5e:8b:8c:81:75:a2:e7:cc:62:3e:2a:c2:
59:b1:0f:42:f2:85:8e:0c:e6:98:90:1e:0e:c8:ab:c4:44:49:
c9:06:77:fa:69:3c:cc:7b:15:be:18:bc:f9:f9:d4:7a:c0:ca:
e1:8e:f2:36:49:7d:fd:f4:3f:74:5c:01:d5:9f:ca:2c:01:74:
b3:a7:e8:36:5f:81:94:b6:ab:c2:c4:ac:39:8e:28:ab:c8:68:
47:b0:fd:4a:86:ab:ca:c4:c0:03:b7:c1:b7:6a:71:1b:aa:57:
39:c7:7f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:49:01 2026 by rpki-client