Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
File: 4jy32eUh5kaf1-KtE2A_t-6_4OA.mft (raw, json)
Hash identifier: lSW6hdloB5QTtj7cH8il3mrYl559zfPBo+U/yxLAht4=
Subject key identifier: 2A:0B:B0:2B:D8:68:67:10:6D:C0:9E:C3:4D:54:B2:32:A8:F9:2E:F4
Authority key identifier: E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
Certificate issuer: /CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Certificate serial: 01A0C5579AC7ED76E95A34DA6F5C5881E0EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
Manifest number: 0D9E
Signing time: Mon 21 Sep 2026 19:00:47 +0000
Manifest this update: Mon 21 Sep 2026 19:00:47 +0000
Manifest next update: Tue 22 Sep 2026 19:00:47 +0000
Files and hashes: 1: 4jy32eUh5kaf1-KtE2A_t-6_4OA.crl (hash: TUfjq9bdmPleAxaOLBXTfxh8jbPGiZYurW3BpBSgSgQ=)
2: ErpeCUDkmubemk25x6bhiE8fSGc.roa (hash: TTJUK42mws9XlE8j1BxdD7GShsktqMxOOwmtU5mBiJY=)
3: T0pinHQE9eLRbdmXpvSn-pLDjUA.roa (hash: fpKBkag1Eq814ryw6TGAsVdMfo9isfHsmaeJ5gB+g6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:9a:c7:ed:76:e9:5a:34:da:6f:5c:58:81:e0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Validity
Not Before: Sep 21 19:00:47 2026 GMT
Not After : Sep 22 19:00:47 2026 GMT
Subject: CN=2a0bb02bd86867106dc09ec34d54b232a8f92ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:de:6d:a3:32:2b:20:55:4f:63:f0:85:be:b6:
b1:00:a1:3c:c3:9f:b4:48:4c:b9:90:c6:09:22:58:
df:11:a1:bb:a5:27:e4:2a:0a:43:53:9a:f4:46:80:
8e:b5:16:fd:8b:bf:03:15:07:12:dc:2e:be:a0:37:
1f:6c:27:97:ee:f0:82:67:52:67:3c:39:44:f0:34:
eb:68:13:dd:d9:da:f3:2b:25:7b:15:e8:7e:65:c8:
3d:98:bf:3e:fb:3f:3f:01:60:98:82:a0:85:1a:66:
a5:ca:46:37:12:f5:99:a0:d4:1c:5c:b8:0c:dd:c7:
62:43:cb:9d:cc:68:c7:d7:b9:48:12:06:a9:0b:3a:
48:5d:a7:f0:d2:fb:aa:0e:67:cb:cf:ba:b2:fd:13:
13:05:c6:51:22:d5:d4:6c:6f:0e:cb:b5:4c:53:e0:
73:86:48:05:74:bd:a9:2a:c0:9b:db:38:7e:24:6f:
32:d4:98:b3:5a:8c:cf:70:6f:2e:8c:41:20:5f:1a:
80:d3:f2:ee:d8:9a:29:c7:d9:8a:95:99:af:ed:5e:
71:1b:33:3d:e4:ee:d9:60:3c:3b:db:7f:ec:20:2d:
2f:42:2b:03:c0:b9:08:aa:f0:6d:45:58:9b:f4:8b:
53:70:88:88:94:90:df:72:d4:ce:75:67:40:c0:96:
6e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0B:B0:2B:D8:68:67:10:6D:C0:9E:C3:4D:54:B2:32:A8:F9:2E:F4
X509v3 Authority Key Identifier:
keyid:E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:33:e4:ec:a4:01:24:d4:44:02:4a:6e:8d:54:ea:50:92:0d:
b0:36:1a:c4:48:0b:1b:a3:5b:7f:a0:01:a3:1b:73:94:b1:84:
25:4f:d6:27:25:0b:ca:23:4d:df:c2:50:cc:9c:03:d9:69:49:
65:74:65:47:02:ed:99:9f:93:4c:a8:b0:35:19:be:cd:3b:8c:
87:eb:94:65:fb:92:e5:96:a1:74:8f:9e:db:f8:b3:27:7c:4d:
84:3c:57:5e:7d:8c:2a:cd:f6:4e:ad:ef:ab:db:1a:8c:7a:bc:
05:c9:2a:70:68:74:c1:ba:5e:64:fe:ca:b9:dd:e2:24:de:35:
b9:c3:d8:42:9f:e1:ad:03:cf:5c:83:78:cc:81:6e:84:b8:59:
4b:40:8e:91:62:20:e4:30:21:fd:13:e6:b0:e8:d5:68:18:6e:
86:ce:8a:a8:52:56:ac:14:48:fe:8f:49:d3:7d:f4:b4:11:40:
5a:85:3b:76:6d:96:1e:d2:b9:42:3c:18:c9:ca:82:a9:e4:5a:
bf:b3:3b:ff:26:4f:86:89:b7:db:e5:39:01:c5:e3:47:72:0a:
69:33:95:30:3c:56:f0:32:4e:a6:1f:04:46:0c:96:a4:cf:1d:
64:68:de:73:52:10:51:f4:2b:8d:cf:ed:6b:e4:b1:5b:c2:69:
86:45:eb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:48:33 2026 by rpki-client