Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
File: 4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft (raw, json)
Hash identifier: lOq58U3fkXXF3I3oMpyKH8d4AeCLUAY3vl4cU7z+YtY=
Subject key identifier: D3:4C:8E:4D:26:6B:D2:7E:BF:C3:91:FC:16:1B:1C:29:3E:3F:AC:2E
Authority key identifier: E0:CA:79:5C:4B:5F:B3:C9:E7:DD:99:2E:7A:37:64:90:2D:12:1B:C2
Certificate issuer: /CN=e0ca795c4b5fb3c9e7dd992e7a3764902d121bc2
Certificate serial: 01A0BEE7629A5BA403F8EBB528057A3F8FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
Manifest number: 0233
Signing time: Sun 20 Sep 2026 13:00:30 +0000
Manifest this update: Sun 20 Sep 2026 13:00:30 +0000
Manifest next update: Mon 21 Sep 2026 13:00:30 +0000
Files and hashes: 1: 4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl (hash: Y/ZAHKkMRa9vP/cHvGs/u9dBPH7ZI0crf1k/Jf9DNag=)
2: AFLK_8dbQHSlYChoAA91MADo2dU.asa (hash: 7cAv3e9gnI3dZUR9MQwkNpXKUI1PglLX9wimy3aeHe8=)
3: Piv3x5GjdFWYogfJry-sQL2JX-U.roa (hash: 2ZYAqvuqxNoPqFzul2MyF+P3n7KAI2Js6FxsXshtYjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:e7:62:9a:5b:a4:03:f8:eb:b5:28:05:7a:3f:8f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ca795c4b5fb3c9e7dd992e7a3764902d121bc2
Validity
Not Before: Sep 20 13:00:30 2026 GMT
Not After : Sep 21 13:00:30 2026 GMT
Subject: CN=d34c8e4d266bd27ebfc391fc161b1c293e3fac2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:15:f7:d3:40:31:ba:60:c3:bf:65:b0:d3:bc:
45:ce:ca:b6:ca:cc:bf:42:d6:37:86:97:9b:00:55:
5d:f8:b7:d3:79:36:99:50:e1:83:b4:68:ad:db:bd:
2f:e7:3d:0e:25:9e:85:57:09:21:df:ac:56:00:2b:
bf:11:b0:3d:04:4b:08:7e:ed:81:36:b0:7a:6a:e9:
b5:2b:42:7e:06:e8:61:5f:7d:5d:fc:75:bd:ce:99:
da:13:b7:8d:48:a4:10:67:d6:c0:ba:d0:05:3a:d8:
49:c9:96:2e:65:0e:8e:b6:98:a3:40:d0:a6:05:f3:
bb:6d:0d:4c:cb:70:2d:ac:cb:b8:1d:30:ea:60:7a:
f5:6d:25:d6:a1:a4:9f:bd:e5:02:c8:17:ba:2b:a6:
b8:14:70:45:9f:61:1d:9b:cc:12:44:e2:0d:38:a4:
71:ac:a4:d7:d2:7c:a3:b6:2c:2a:87:4d:aa:57:5a:
46:6d:b3:49:6a:a3:8b:8f:c4:d0:2f:15:c4:36:8a:
fd:8f:c5:b8:ab:bc:eb:85:c8:fc:6f:8f:06:2b:87:
39:76:20:28:48:c5:8a:7a:ac:93:42:16:be:35:49:
45:61:2c:64:4c:98:31:0d:82:2a:01:c8:bd:11:ab:
cb:99:7b:df:2a:2d:42:c0:f9:2e:58:9b:03:23:82:
fa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4C:8E:4D:26:6B:D2:7E:BF:C3:91:FC:16:1B:1C:29:3E:3F:AC:2E
X509v3 Authority Key Identifier:
keyid:E0:CA:79:5C:4B:5F:B3:C9:E7:DD:99:2E:7A:37:64:90:2D:12:1B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:0a:d5:8e:28:0a:b0:41:ff:22:2c:2f:01:c9:b0:00:d1:b0:
f2:5d:2f:23:60:72:2c:52:00:5c:d8:71:78:e6:b9:b7:0a:bc:
bc:2f:0f:28:cf:b0:b5:5e:25:e4:45:26:fd:83:ee:62:21:25:
55:3a:86:94:c6:92:7f:ad:1e:e5:d3:cf:3b:81:7a:f7:f7:bf:
aa:f9:e7:bf:df:fd:b2:6b:88:21:11:cf:15:40:f2:8b:90:4b:
d9:57:07:d7:5c:ed:15:f4:75:7e:75:3b:70:fe:4c:d2:51:71:
18:6d:43:85:d7:0f:e4:70:38:52:ec:51:a8:b6:c9:af:99:ad:
ca:97:12:d1:ed:14:31:d5:42:70:a8:e8:a7:31:16:a8:ba:5f:
b4:92:38:e8:c5:b9:53:ad:b0:e4:87:5e:59:10:da:58:9b:f0:
b4:c1:07:fa:17:9e:26:24:23:cb:d1:50:d8:af:58:55:96:42:
e3:9a:18:eb:c0:e7:3c:8f:a7:d9:e6:63:53:c5:4f:98:ac:25:
ee:4e:3c:ae:f7:cf:59:fb:76:9f:49:0c:56:43:d2:4a:f5:41:
08:cf:14:4f:be:2d:0d:b3:a4:1e:d1:bf:8b:09:11:d2:41:7b:
90:0c:63:24:13:37:bf:6e:8f:2e:37:1b:af:0d:9b:52:55:e1:
d2:8f:9b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:05:39 2026 by rpki-client