Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
File: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json)
Hash identifier: 6NI/PZwKAKTqNwDdLsOSsxETHPOo+A8ibdedkZ64r6U=
Subject key identifier: 51:14:35:77:F2:75:B2:FC:54:48:C0:55:F2:E1:AF:7E:6E:99:0D:F1
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial: 01A0C1E862BA7A93DF222676571B86B1C184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 03:00:27 +0000
Manifest this update: Mon 21 Sep 2026 03:00:27 +0000
Manifest next update: Tue 22 Sep 2026 03:00:27 +0000
Files and hashes: 1: 33GSrldWWk3Y0zJgykFgXMqOFKQ.roa (hash: Vx7Lsmyrdo4DClh/Ecx+QsM7m1e5mNGcZKBAQoQZRYU=)
2: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: xwhe93YEa2tjFpWYvK+zs7Qh7llVh2HFTkTsWxNKoA4=)
3: drikzNt5D9jwedYli_IhOY-bx94.roa (hash: yqU3IH8u+p0CuFDMh436wHQcQ7bwqSkz3SbUHUvU7mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:62:ba:7a:93:df:22:26:76:57:1b:86:b1:c1:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Validity
Not Before: Sep 21 03:00:27 2026 GMT
Not After : Sep 22 03:00:27 2026 GMT
Subject: CN=51143577f275b2fc5448c055f2e1af7e6e990df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:8a:a8:ae:54:e7:a1:02:20:ae:de:53:5c:
ba:9f:c8:95:0c:64:8d:ac:d2:46:08:d7:fc:9c:92:
2c:84:c3:6e:8f:cd:87:aa:cc:ec:83:f5:e9:9b:b3:
a4:a8:55:b2:dd:56:0f:07:ff:dd:db:df:e0:b7:23:
73:b9:bb:60:3a:36:3f:74:b6:7d:2e:c7:a6:a0:eb:
76:c7:b9:ed:d0:2b:8f:2c:5b:87:33:eb:ae:43:0c:
be:8f:3c:c9:12:f5:51:37:14:de:52:f9:db:00:49:
44:2e:79:0c:aa:32:fd:98:67:53:86:aa:6b:2a:29:
41:be:93:8d:b2:f6:6c:7a:82:e3:f2:6f:ff:a8:4d:
74:21:84:13:24:96:68:36:a1:3d:90:1f:66:62:20:
94:a0:e8:64:de:18:c4:63:53:9a:db:84:d4:aa:fa:
47:0b:39:8c:76:92:14:45:cc:d4:77:58:0e:34:9c:
ca:c3:3e:77:83:49:fe:76:a8:eb:5d:db:4a:d0:43:
92:5f:42:92:7f:fc:35:ad:ce:4d:d9:ef:39:42:4a:
61:f6:d3:0f:2b:33:f2:91:da:df:38:4b:67:5f:ee:
c8:e8:b8:72:26:c2:10:94:6c:06:e2:f6:db:87:24:
86:ab:db:ae:32:31:0d:84:39:7c:b6:57:c0:60:7e:
59:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:14:35:77:F2:75:B2:FC:54:48:C0:55:F2:E1:AF:7E:6E:99:0D:F1
X509v3 Authority Key Identifier:
keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c1:6f:45:2b:0a:9e:a1:50:77:57:0c:3a:2e:e4:82:47:a0:
e7:b2:58:7c:25:6a:99:ce:9e:38:e8:c5:1d:94:c8:1d:d9:b7:
d7:4e:92:84:aa:14:82:a0:93:04:cd:c5:54:94:40:65:9e:a2:
30:62:75:80:ee:3c:1c:a9:18:63:50:6c:28:98:10:d7:7d:30:
0d:7a:15:34:a4:cc:66:b5:44:b7:1b:aa:5c:c7:1f:52:e9:69:
14:47:be:aa:83:bd:5c:be:d4:07:88:80:d7:32:ee:13:38:0e:
74:0a:50:51:86:34:54:1a:62:b3:dc:11:34:c3:bc:07:75:9b:
0c:ec:ff:b1:25:e1:f2:be:c8:96:bd:f2:de:a8:2f:ea:ed:30:
c6:da:4e:3e:05:2e:a8:ae:2c:27:71:15:71:7d:53:a8:ce:cf:
5f:45:73:99:aa:ff:ef:2b:6f:83:99:05:50:7c:3c:59:51:ab:
e9:1a:d7:f3:71:b5:05:17:fd:bc:d8:b1:4d:b0:2b:9d:5f:3f:
90:4d:4a:d7:1f:e8:a0:1b:e4:e0:ae:39:70:b5:7a:b7:95:5b:
10:fe:d5:7c:46:95:b6:c8:01:62:b5:ae:62:39:8a:a0:3e:cf:
ff:44:80:c9:91:f6:b3:40:0e:73:b7:da:47:91:26:aa:80:f1:
18:47:8d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:52:28 2026 by rpki-client