Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
File: 4XoaYiSN-HkTPAc61WKtA6K5L9w.mft (raw, json)
Hash identifier: WcZk+j7qkt1kCJzKE/5WRaA04SW62HcCGrZOqe0ro9s=
Subject key identifier: DD:A6:4F:8F:18:0D:9C:13:A6:4C:C1:F5:EE:1C:2D:2C:94:D5:51:A3
Authority key identifier: E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
Certificate issuer: /CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Certificate serial: 01A0CEC85088AA41B2D37F8B2CDF972744A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
Manifest number: 0CD2
Signing time: Wed 23 Sep 2026 15:00:29 +0000
Manifest this update: Wed 23 Sep 2026 15:00:29 +0000
Manifest next update: Thu 24 Sep 2026 15:00:29 +0000
Files and hashes: 1: 4XoaYiSN-HkTPAc61WKtA6K5L9w.crl (hash: rmRHbt4RVMTXtpFE0RHlhui46KAaIT6v7bOWHsRFFEE=)
2: JHxvjWc19A1tU7KyYGlgqUyLkL8.roa (hash: 9C5Ys0C3mf/K+bjsErUIoK6hkq5Fu1f77/hUUvfMpdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:50:88:aa:41:b2:d3:7f:8b:2c:df:97:27:44:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Validity
Not Before: Sep 23 15:00:29 2026 GMT
Not After : Sep 24 15:00:29 2026 GMT
Subject: CN=dda64f8f180d9c13a64cc1f5ee1c2d2c94d551a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:e2:d8:2d:9b:f9:23:5d:13:89:1f:41:90:
50:d8:d0:96:e2:72:40:3e:3f:9a:51:cf:1c:7c:10:
f1:bd:10:27:54:cc:11:3d:77:24:eb:96:f6:99:04:
51:f3:ab:eb:90:a1:0e:29:51:1f:9b:33:80:58:35:
1d:c3:9f:89:2b:f7:72:3d:c8:d0:8b:f4:7a:6c:f1:
c1:7b:14:59:c0:22:50:2d:f0:31:4a:9b:8d:a8:2c:
2e:16:ce:93:39:81:78:22:8b:24:ba:71:55:36:9e:
17:4b:e2:dc:03:e9:fb:3a:2c:aa:96:ae:5f:9e:d1:
93:28:15:99:15:b9:52:8d:cf:5f:a9:92:4b:4c:c3:
1a:4c:a9:d2:71:1d:91:4c:a4:73:8f:b1:b9:4f:84:
b6:15:31:fd:4c:90:5c:e8:29:f3:e0:e0:6d:5f:82:
a2:07:43:34:e1:cc:20:7b:bf:99:74:f3:d8:82:8a:
70:42:09:e4:4d:54:4e:14:f7:46:98:cc:30:82:00:
86:0d:72:d4:fd:11:28:90:3a:6e:aa:cf:b2:95:97:
0a:80:8d:a3:8b:f3:1f:63:a0:09:24:55:4d:91:9b:
51:7e:1b:49:e3:72:f1:15:c2:1d:97:de:24:9b:73:
da:dd:c7:21:e6:c3:3e:de:95:b9:a5:98:d6:53:cc:
21:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A6:4F:8F:18:0D:9C:13:A6:4C:C1:F5:EE:1C:2D:2C:94:D5:51:A3
X509v3 Authority Key Identifier:
keyid:E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fe:52:6d:b5:28:ba:5d:a7:63:7e:95:67:61:b7:3a:64:b6:
15:98:d2:d4:01:92:56:1d:02:d2:5d:69:33:8d:9f:c6:50:a7:
89:d8:a7:cc:4f:fa:14:c0:4b:b2:c6:a7:c2:7c:97:8d:ba:1f:
3c:68:51:81:51:dd:d1:18:25:ee:75:b4:eb:15:95:eb:5b:cf:
36:60:c7:21:c0:bd:54:fb:95:ba:ca:36:05:ec:05:34:67:e6:
9b:b5:67:eb:23:e5:60:49:1e:ff:0b:ae:6c:dd:56:fb:6c:cf:
ac:f8:95:2a:06:ce:b5:41:56:e1:84:60:0b:99:ff:01:e1:67:
bf:41:09:d5:03:ae:88:7b:d4:10:84:7a:eb:18:86:ca:67:64:
a9:a3:5e:be:d1:be:71:7e:ce:5f:36:66:8b:97:90:e6:40:a6:
f0:13:2a:dc:10:da:ad:0c:d4:41:94:78:02:38:b2:1a:01:e7:
c7:f2:07:1c:94:13:81:9e:f8:61:b8:b7:6c:b5:62:a6:70:09:
1d:49:52:5e:01:18:30:93:ce:81:bf:c7:db:32:cc:46:23:3a:
f4:8d:70:15:b8:bf:d4:e7:2d:6e:47:f0:a3:e1:fb:5c:dd:24:
2b:de:a2:01:ba:73:7c:77:7d:56:92:18:a0:a7:cf:cb:6b:91:
0a:05:43:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:35:38 2026 by rpki-client