Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
File: R4urL0xbYpNYFZNPSoH1YNLXMsg.mft (raw, json)
Hash identifier: KA1xq54WGgmPTsD97i5d3x2fpe9NmxTP+D8WBJZlX5w=
Subject key identifier: 2B:73:A5:9C:25:DF:D4:7E:90:0B:FD:FF:AD:F6:FC:67:E0:A8:26:D4
Authority key identifier: 47:8B:AB:2F:4C:5B:62:93:58:15:93:4F:4A:81:F5:60:D2:D7:32:C8
Certificate issuer: /CN=478bab2f4c5b62935815934f4a81f560d2d732c8
Certificate serial: 01A1039295FD73C3956C9B29D5D3D0A577EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
Manifest number: 0155
Signing time: Sat 03 Oct 2026 21:01:40 +0000
Manifest this update: Sat 03 Oct 2026 21:01:40 +0000
Manifest next update: Sun 04 Oct 2026 21:01:40 +0000
Files and hashes: 1: OP4GnLmThCBFy87U3IPXWaJdkGA.roa (hash: CzHuhJNSL0fmMbMPkWZNZ3g6rBvAOQunuRNzTNwmsOk=)
2: R4urL0xbYpNYFZNPSoH1YNLXMsg.crl (hash: /oq4hsURcIBQBayM0v/m9VimOPNNCZMYNN11aDrrZQE=)
3: w9hMpn22nS31hORs4FbfAZ4nCN8.roa (hash: R5QWnTCvV96e97UtI23G1RgAIOStBivXSgOB+MvPMuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 21:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:92:95:fd:73:c3:95:6c:9b:29:d5:d3:d0:a5:77:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478bab2f4c5b62935815934f4a81f560d2d732c8
Validity
Not Before: Oct 3 21:01:40 2026 GMT
Not After : Oct 4 21:01:40 2026 GMT
Subject: CN=2b73a59c25dfd47e900bfdffadf6fc67e0a826d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1e:ae:d7:bc:26:e7:62:5f:f9:e0:e4:f5:dc:
26:f2:a7:d5:0c:77:78:c6:73:33:d7:6c:d2:8a:77:
16:d0:57:1a:e8:44:08:88:25:d5:1a:75:8d:34:e3:
ff:16:59:8b:68:03:ba:3a:ce:b7:7a:30:43:df:1d:
4f:93:0d:ec:21:33:f7:cc:93:48:74:c0:8e:52:2f:
fd:4e:71:f2:07:75:12:b0:f0:a6:f5:9b:c7:71:38:
3c:29:1a:53:74:1b:ee:38:7c:25:a4:35:e8:86:50:
41:f1:46:a3:d5:95:69:af:db:e8:7c:a9:aa:8b:14:
fc:56:8b:c9:1d:3b:cf:7e:cf:e3:bc:1d:53:72:94:
08:69:92:5f:27:e3:aa:1f:2e:95:65:cb:6e:ff:24:
bb:98:42:41:ea:b7:fe:7e:05:2e:6e:83:97:61:ee:
02:52:88:bc:31:ea:71:b3:dd:09:83:8c:e4:eb:0e:
89:aa:79:39:61:06:59:ed:81:78:80:13:19:b6:46:
12:64:a6:4b:63:b0:8d:41:fc:17:9a:71:ee:3a:25:
1e:ca:1a:f5:2e:98:b2:42:27:d1:d5:6d:eb:a7:59:
7d:4c:aa:b7:18:e3:42:b3:1d:14:7b:18:6d:cf:47:
d7:c6:fe:62:0a:d0:0c:32:2d:ac:82:a2:61:28:6a:
d9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:73:A5:9C:25:DF:D4:7E:90:0B:FD:FF:AD:F6:FC:67:E0:A8:26:D4
X509v3 Authority Key Identifier:
keyid:47:8B:AB:2F:4C:5B:62:93:58:15:93:4F:4A:81:F5:60:D2:D7:32:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f6:4f:d6:39:02:29:24:c0:1e:18:70:25:5d:b4:74:48:4f:
bd:ed:c0:10:27:55:82:e0:5d:8a:d2:63:b2:6f:cc:ca:f6:57:
3e:8c:ff:50:ef:77:5b:d2:e6:26:53:9c:95:e2:48:39:8f:79:
b0:e4:03:d6:11:04:ac:7a:a1:0f:4b:b9:12:a5:86:70:57:c1:
a1:b6:cb:84:21:85:ef:a5:0e:7c:66:d4:42:5d:25:8d:54:0a:
7a:51:03:13:3b:a7:86:a2:49:0c:b1:c7:e9:61:b4:a3:0c:b0:
80:fb:e3:a1:1d:aa:0d:33:85:bf:05:2d:a1:3a:a3:09:21:91:
ec:8f:15:40:d4:8e:f7:6a:9c:a6:c8:af:de:4e:cd:55:1e:12:
ab:ee:ab:45:c7:9b:45:45:75:9d:a2:7c:69:bd:cf:88:e5:ac:
05:7d:df:55:73:d5:62:d3:8d:97:6d:68:b6:b6:cb:8c:1a:8d:
b5:23:03:07:b7:06:90:24:19:b9:65:05:e3:88:08:7b:e2:a4:
67:20:b2:e5:0d:8e:a9:d9:bb:4c:ac:9c:3f:6a:24:4c:9d:da:
3a:6b:1a:ad:0a:0f:82:44:e7:02:98:ea:98:fa:94:45:0d:59:
3e:20:a1:04:86:66:9b:6d:84:07:1e:d5:05:79:0d:d0:e9:f1:
cf:3e:6c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:51:02 2026 by rpki-client