Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
File: 4Sz8faj6dKFt04wXwgoBksuy0_4.mft (raw, json)
Hash identifier: J576S7lcXQL73qrxurHYBYbsofV+levLE8akT75N/bQ=
Subject key identifier: 00:38:72:12:F8:AD:09:BF:2A:D2:7E:CB:46:AA:60:CB:9F:89:A4:31
Authority key identifier: E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
Certificate issuer: /CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Certificate serial: 01A0DFF34EBD12471BC821F338FD97F905D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
Manifest number: 1144
Signing time: Sat 26 Sep 2026 23:00:59 +0000
Manifest this update: Sat 26 Sep 2026 23:00:59 +0000
Manifest next update: Sun 27 Sep 2026 23:00:59 +0000
Files and hashes: 1: 4Sz8faj6dKFt04wXwgoBksuy0_4.crl (hash: jM7G5OPwzCgBGyPOT7f1o51MBMrBH6fcvbAVq+ooZpw=)
2: sIZQ5tszAsQWV3tSj16L1GSVX6c.roa (hash: UbS6Ylynq2ME7l06L5T3TkFEta0v6LJ++TVobQTXGgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:4e:bd:12:47:1b:c8:21:f3:38:fd:97:f9:05:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Validity
Not Before: Sep 26 23:00:59 2026 GMT
Not After : Sep 27 23:00:59 2026 GMT
Subject: CN=00387212f8ad09bf2ad27ecb46aa60cb9f89a431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9d:52:76:c7:0b:24:33:94:ea:19:2d:7c:09:
28:b9:c3:07:a9:fe:a1:3f:ae:89:12:1f:e3:b1:73:
af:dc:da:c6:fb:88:b3:2c:fe:8a:b6:22:fc:42:62:
39:ac:48:07:40:32:4a:6c:e6:03:34:47:68:88:37:
37:eb:cb:46:2d:a4:ea:d9:23:7d:4a:a4:23:7e:97:
df:62:b3:83:52:de:63:1e:61:87:8c:c5:39:08:6f:
83:2d:2a:8a:99:e8:d4:08:c8:14:35:8e:61:7b:96:
8e:1c:07:eb:3b:c1:cd:ca:d7:7d:73:83:b1:41:df:
25:87:58:ee:be:29:43:64:bf:f7:95:2f:ba:be:64:
4b:14:bd:72:1a:eb:5d:49:36:df:58:5e:80:ff:a0:
95:33:7d:44:a6:00:2a:0b:cb:70:f7:46:2e:73:4d:
2e:42:0b:16:88:be:d8:48:9c:36:e0:d2:44:c5:71:
29:9a:b2:a3:43:87:f7:a4:2f:7d:db:fe:1d:3c:20:
82:04:4b:4f:7f:5d:2c:b9:7f:97:7d:54:f3:94:00:
e5:5b:29:89:07:3f:3a:d3:a9:b2:c5:1e:7a:cf:b8:
1f:33:c2:74:09:23:41:f7:e4:23:cc:4d:36:80:23:
63:52:f2:7b:6c:47:49:62:59:75:c1:2c:cf:cd:1d:
53:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:38:72:12:F8:AD:09:BF:2A:D2:7E:CB:46:AA:60:CB:9F:89:A4:31
X509v3 Authority Key Identifier:
keyid:E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0d:94:2d:06:64:35:4c:ef:1a:af:97:6b:4e:00:7e:f0:4e:
d4:01:e8:c7:cb:bd:02:79:54:7c:1f:4e:39:6d:bb:dc:f3:1d:
6d:2a:f7:57:cc:8d:de:fe:6d:25:fe:bb:06:dd:bc:ba:06:92:
65:9c:29:36:b6:3a:12:1d:53:89:a0:50:9e:04:9e:ce:64:b9:
ed:7a:f9:8e:8d:a7:44:19:ee:5c:85:8f:a2:e4:74:6a:e6:5b:
aa:b7:10:c7:cf:cf:b2:84:21:4b:b4:0d:42:a9:c7:35:35:42:
53:39:f1:09:12:f9:7a:1a:e8:d7:76:d1:20:e2:29:8a:e9:3e:
05:b5:84:f2:3d:06:b1:39:26:30:11:a9:15:ac:30:aa:53:a1:
f5:1e:4f:77:ba:bd:59:6b:62:5b:55:24:46:b5:6e:ec:29:28:
1b:32:a5:09:e3:6d:ef:0d:79:ea:78:c7:0b:19:39:48:2e:bc:
f0:e5:4e:ca:a9:27:0d:ed:63:8a:71:8e:5e:2f:a2:76:df:b8:
4d:6a:fd:c3:37:83:51:f3:93:7f:a0:40:c2:ea:d1:d8:ba:a6:
6b:e8:60:77:01:c4:2b:eb:d9:70:72:e8:84:39:b5:26:7a:d5:
6a:ed:cb:51:be:1a:10:8f:40:d7:c3:67:d9:2d:6d:eb:f4:33:
1a:dd:ed:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:01:54 2026 by rpki-client