Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
File: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft (raw, json)
Hash identifier: zv7DWBk8rIgerB9+P3aYeiUhZlqvH4h4HfNQzEP2T8I=
Subject key identifier: 98:E4:8C:62:15:30:95:09:FA:DA:68:90:12:D8:F4:28:D0:36:41:80
Authority key identifier: 7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
Certificate issuer: /CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Certificate serial: 01A0C77CF37D301C0655FE8416F20DD31D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
Manifest number: 0696
Signing time: Tue 22 Sep 2026 05:00:49 +0000
Manifest this update: Tue 22 Sep 2026 05:00:49 +0000
Manifest next update: Wed 23 Sep 2026 05:00:49 +0000
Files and hashes: 1: L5BfioWz08XOKOc7LGuDTFScCDM.roa (hash: oJjcndnAKImb4AebXhMuHLKYhu0NzBboRQfoXDCNW0c=)
2: Tcg_tO4TH6VzGp-S2NuzlB5WECE.roa (hash: vf8tQnW7oqoTXI/ZHAP1eVwRqXSdr72IdtoqliIf4Ys=)
3: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl (hash: 8DJ076B2A9T/n8fAyn6TqfzAFRysk33mKcJYAXOIhtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:f3:7d:30:1c:06:55:fe:84:16:f2:0d:d3:1d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Validity
Not Before: Sep 22 05:00:49 2026 GMT
Not After : Sep 23 05:00:49 2026 GMT
Subject: CN=98e48c6215309509fada689012d8f428d0364180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:96:91:6b:5d:71:56:63:dc:d8:57:03:2e:fc:
fc:5d:42:79:42:ca:c2:41:73:c9:aa:a6:06:23:7e:
66:b6:7f:c4:60:48:8d:15:e3:93:2c:bb:5f:12:16:
22:03:e0:b4:14:76:17:9d:9c:e0:5d:65:6f:57:12:
44:f0:2c:24:1a:00:0a:70:c4:a8:b3:20:ed:4c:e3:
90:a3:af:b1:e7:a3:11:f1:3b:4b:65:c3:28:ba:c0:
87:24:a7:a6:6a:bb:aa:0e:05:55:d1:bf:9e:84:c8:
49:89:d9:87:bf:25:73:e9:a5:55:aa:2a:38:74:90:
0c:6d:2d:2f:ab:0b:89:3a:85:0a:40:c5:5d:58:7d:
90:8c:13:87:aa:6d:c0:d1:44:1c:38:89:91:ae:e7:
fb:9a:40:ca:b5:12:62:02:b6:44:cc:de:3a:ed:56:
7f:e5:e4:36:e1:b2:cd:75:19:05:07:64:54:48:d7:
89:40:8c:3f:99:90:57:74:7e:28:93:b9:40:f7:9b:
73:3b:34:06:2c:8f:2d:5e:22:a6:14:04:26:91:80:
7e:ea:07:41:cc:61:c3:2d:58:84:6f:aa:f6:bb:8f:
a5:11:d3:01:9b:b3:c3:60:1a:2e:66:8f:e2:7f:8a:
56:80:8e:a6:b1:c1:36:f6:90:fe:a0:6c:f0:67:e9:
27:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E4:8C:62:15:30:95:09:FA:DA:68:90:12:D8:F4:28:D0:36:41:80
X509v3 Authority Key Identifier:
keyid:7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c7:d9:30:dd:0b:0b:18:46:8e:81:79:9e:fd:dd:2b:df:4d:
e1:b3:24:43:14:55:4e:5c:79:7b:3b:c9:61:60:63:57:03:85:
50:ef:5d:c6:86:ac:a7:2b:5e:df:86:4a:08:ae:cf:78:47:78:
38:9d:39:1d:7e:44:f0:4f:33:9f:a1:51:96:18:53:f8:0e:4f:
24:ae:65:5c:d1:fb:b5:83:d4:29:08:2b:0e:a1:27:b8:dd:02:
a5:5d:c3:32:3f:b6:d8:e2:8b:a0:95:25:61:f1:18:84:e6:0c:
0c:f7:c1:d7:98:5b:d7:22:fa:0d:6e:eb:78:f4:32:16:c4:d1:
1d:69:19:36:cf:a2:ec:ba:98:f7:51:01:b6:12:b7:2d:19:c2:
1c:e5:90:d4:e2:4d:6b:92:10:97:92:fc:b2:c5:c7:b0:7f:aa:
8d:2c:04:bc:c3:bc:95:85:f0:bd:d0:d8:73:c0:9d:a7:b9:7d:
ed:f1:23:13:8f:a6:c6:6d:68:eb:c2:da:70:df:b4:ea:85:7e:
5c:c3:b1:5c:4b:7b:ac:d4:99:7b:f2:b2:27:7c:79:2f:3a:ae:
88:21:17:d2:b1:11:08:87:2c:a1:92:be:3d:35:99:61:b3:0e:
fb:cb:ae:03:f8:ae:9b:7a:df:7a:b2:a5:d8:d8:72:67:0f:61:
6d:f8:71:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:55:47 2026 by rpki-client