Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
File: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft (raw, json)
Hash identifier: tDFSV+7I6pilm3m9fkOQDQK9z30aEIOQUKPGLwCFUmQ=
Subject key identifier: BD:58:EC:31:B7:EB:87:78:06:35:53:8B:CD:BC:E0:B1:2D:4B:BA:DE
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial: 01A0D539451E82B817B5165F01C934D6A561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
Manifest number: 1A71
Signing time: Thu 24 Sep 2026 21:01:35 +0000
Manifest this update: Thu 24 Sep 2026 21:01:35 +0000
Manifest next update: Fri 25 Sep 2026 21:01:35 +0000
Files and hashes: 1: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl (hash: QVYtPwrBDqId8U/UYe0JrTQg2tIMgxbLx+PtAVUCeQc=)
2: aD4aJMmaQg_1w8VUSr55ba35-_4.roa (hash: 3Ez4Ad6m2JnI3XnTs61pJ+5b17Kb2kmyt6ZM1f7rwSI=)
3: g2k94sbrfkriJ_TYzjO-TqZlMBM.roa (hash: 1ZkSwSDFlimbj/n4XoixvGsfM3nfxp389BDAwVqw2BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:45:1e:82:b8:17:b5:16:5f:01:c9:34:d6:a5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Validity
Not Before: Sep 24 21:01:35 2026 GMT
Not After : Sep 25 21:01:35 2026 GMT
Subject: CN=bd58ec31b7eb87780635538bcdbce0b12d4bbade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:d9:5f:85:9e:19:11:70:7d:44:9e:08:40:
75:4b:48:56:45:5e:32:9f:91:6e:0d:d5:ce:7d:4c:
ff:28:b0:43:30:33:cb:19:cd:7f:2f:cb:0d:92:00:
36:1f:12:19:d3:7e:27:5a:8e:2b:19:37:b8:4b:72:
d9:1d:66:4c:ab:7d:34:f7:6f:7c:7a:ce:a0:2c:1b:
cc:b1:29:ea:20:3c:9a:e6:50:87:0e:0e:50:10:8f:
c8:bd:bc:11:09:ef:2a:26:db:5a:98:5f:49:c7:ec:
9e:7a:2d:34:05:30:81:dd:f2:bf:22:70:0e:58:f5:
5a:65:34:62:5e:14:d2:b0:e9:1b:3b:3c:bf:ea:ab:
2b:48:75:ca:42:45:95:19:ac:4a:66:bb:78:20:18:
56:7d:3b:dd:97:2b:96:f4:21:a5:26:48:5d:c2:78:
2c:01:59:22:5b:bc:8a:f2:7e:91:f6:b2:74:5b:ef:
2d:79:e5:1a:cd:33:e3:99:7a:88:fc:ec:a5:ca:94:
8c:4c:59:72:8e:eb:2c:a8:6a:83:d9:bb:64:ce:c6:
aa:b1:b9:16:0b:d3:67:d7:8b:3e:5d:2f:4a:1f:af:
19:05:d2:de:0b:52:fa:bf:63:05:09:ad:79:e4:92:
df:a9:4c:e8:62:d8:9e:b2:ab:49:9b:ed:0c:22:9b:
3c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:58:EC:31:B7:EB:87:78:06:35:53:8B:CD:BC:E0:B1:2D:4B:BA:DE
X509v3 Authority Key Identifier:
keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:18:27:0f:10:77:fa:c6:aa:33:d5:9c:02:30:f9:0d:2d:43:
76:ca:6b:5a:6a:a1:ba:0b:e5:98:6e:0b:f7:e4:c8:f3:85:c5:
86:dc:fd:3c:5c:ee:5f:4e:dd:00:19:de:8d:9b:31:ad:a9:ac:
51:e2:ff:d8:aa:08:41:e1:8a:de:d1:04:12:dd:d8:b9:79:0a:
55:af:c4:7e:fe:68:ae:fc:11:e8:f7:b3:f0:1e:2b:04:3e:67:
1f:f5:b5:10:0e:de:7b:cc:b8:4c:db:55:9b:86:48:e8:87:25:
f2:8b:9c:16:86:16:b4:0d:fc:2f:e9:e9:b1:7e:9d:c4:1b:56:
a6:d0:aa:d8:62:00:da:d1:b3:8e:4c:64:3f:64:38:6d:a4:71:
76:89:1e:f3:0a:0a:75:c8:37:eb:72:4f:e6:47:c4:32:dc:63:
00:d7:bf:26:22:3f:f9:ab:e0:04:e7:34:74:6f:72:f1:77:be:
d9:4f:75:86:c4:dd:98:02:da:9a:dd:dc:6d:c7:16:de:e4:d4:
2d:7a:3f:3f:a0:4f:43:87:98:72:4e:b8:a5:67:4a:7f:ca:ff:
a0:b7:81:9f:9c:7c:39:bc:7e:c3:4a:10:ae:ee:74:60:68:73:
18:de:70:bc:64:54:0f:60:2b:67:d2:fa:2c:5d:fd:19:b6:c9:
47:3f:c4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:54:32 2026 by rpki-client