Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
File: 4br5DtE9F1RSz15aFjKnlL8fTJo.mft (raw, json)
Hash identifier: Aptzs2VJlsvjR08H/Zv3yk9/bVc2zX+nEGXXuJEgETs=
Subject key identifier: 83:6B:5D:AC:41:1F:A1:EC:C4:29:05:9E:86:47:ED:A8:67:17:99:17
Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
Certificate issuer: /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Certificate serial: 01A0CB59C286DD7110E0D49BA1AE19271AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 23:00:52 +0000
Manifest this update: Tue 22 Sep 2026 23:00:52 +0000
Manifest next update: Wed 23 Sep 2026 23:00:52 +0000
Files and hashes: 1: 4br5DtE9F1RSz15aFjKnlL8fTJo.crl (hash: sGV0f4j7OOTOkaX0CDZlskqpq0x+GcWXN0/boGyytrE=)
2: J1Zd6j9Lcwtys2PuV4W0VrM-mt4.roa (hash: 0QTHJDhGxK5m6zxqs1yz2ztZUhs7s6VuZHp2XlfhZqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:c2:86:dd:71:10:e0:d4:9b:a1:ae:19:27:1a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Validity
Not Before: Sep 22 23:00:52 2026 GMT
Not After : Sep 23 23:00:52 2026 GMT
Subject: CN=836b5dac411fa1ecc429059e8647eda867179917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:74:fe:4b:f1:21:8a:e4:80:dd:26:d1:47:bf:
58:2d:b5:bd:e0:a9:3b:5d:1a:c2:44:02:02:26:98:
aa:f5:2c:9b:3b:81:8f:3b:40:6d:be:92:36:e8:0a:
df:39:8d:54:de:8a:dd:f4:0a:20:19:0d:95:a8:2c:
6b:74:da:60:3b:44:8b:dd:fa:d3:4d:eb:72:07:3e:
e4:f9:ae:ab:4c:d3:8e:30:03:f1:4e:1f:5e:97:46:
8b:6b:91:ca:6a:fc:ff:16:0d:93:36:93:37:24:e0:
d2:d3:33:68:3c:44:c6:5d:0f:fc:f6:24:43:c7:cd:
30:d0:e6:62:ce:ee:de:16:82:2c:2f:f1:1e:51:cb:
95:c0:fa:6f:0b:84:76:3c:07:7e:71:81:6c:1b:10:
e9:fa:e3:03:ba:27:ad:74:a1:01:b2:9b:39:c3:17:
d2:96:7a:da:eb:1c:4f:f8:e3:df:64:18:2a:72:77:
19:9d:ee:79:95:77:10:2d:f7:b5:a5:09:91:c2:cb:
90:e1:7d:83:1b:30:8c:e8:ce:ac:f9:f0:72:5a:ec:
65:10:a8:5f:16:fd:30:81:d9:9a:0a:e1:f9:7f:6a:
72:91:5e:bd:92:05:d9:ec:87:a3:36:00:1b:a3:e8:
f1:17:8b:56:57:21:f3:59:a3:c2:3b:f9:a8:8d:fe:
8b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6B:5D:AC:41:1F:A1:EC:C4:29:05:9E:86:47:ED:A8:67:17:99:17
X509v3 Authority Key Identifier:
keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b5:48:14:99:45:65:d5:5c:8e:6b:0d:54:52:9e:61:4c:f6:
2c:4e:26:5c:fa:d9:4a:c4:45:4a:8d:0d:00:75:36:a0:59:81:
84:2b:99:d6:8b:67:1d:76:ac:98:cd:6d:74:d8:75:54:d2:5e:
f0:2b:7a:07:f1:f4:3a:e2:a5:c7:54:20:a0:b8:3e:65:de:c5:
63:70:aa:22:73:e2:4a:a5:92:d8:e0:98:75:1f:87:12:c9:f2:
62:a3:70:a6:01:12:09:08:a3:95:30:db:b2:03:89:5f:13:c8:
a2:46:2d:a6:1e:80:be:2e:1d:f1:9c:26:7c:6d:2f:11:f8:df:
10:7f:96:c0:26:0d:c4:86:79:f0:ab:6b:a4:3e:3a:68:c9:00:
95:0b:2d:9b:08:d2:75:7c:83:a0:fe:a4:70:9b:7a:04:79:57:
94:7e:7f:27:75:98:11:9c:7f:3d:5a:cf:ae:db:56:d3:8c:4c:
bf:eb:46:9c:48:cb:29:3f:2d:35:7f:b6:b1:b8:f8:6b:6f:8d:
2b:b1:b7:80:64:11:bd:b3:c1:5a:fc:45:4d:9a:68:3f:5d:62:
e6:bb:98:9a:78:04:a9:b3:02:03:2a:9e:0b:62:aa:e0:c2:f4:
31:83:fc:b9:97:c8:ff:b4:2d:99:ea:d1:e7:5c:4d:b8:f4:ad:
d3:12:65:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:19:53 2026 by rpki-client