Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
File: 4mi9DSXlWsGkKoTCo7nIkINh1uE.mft (raw, json)
Hash identifier: YnN0jPkOfaW/x7oaxv/Y+/91jPdDG/Qh6PCcrULr0Ac=
Subject key identifier: 4A:61:64:35:C2:11:B2:B1:6F:BE:D8:4B:DF:DE:67:C4:55:19:24:C5
Authority key identifier: E2:68:BD:0D:25:E5:5A:C1:A4:2A:84:C2:A3:B9:C8:90:83:61:D6:E1
Certificate issuer: /CN=e268bd0d25e55ac1a42a84c2a3b9c8908361d6e1
Certificate serial: 01A0FF7EC2898E45C2437E8DF9A99D17AEFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
Manifest number: 025C
Signing time: Sat 03 Oct 2026 02:01:32 +0000
Manifest this update: Sat 03 Oct 2026 02:01:32 +0000
Manifest next update: Sun 04 Oct 2026 02:01:32 +0000
Files and hashes: 1: 4mi9DSXlWsGkKoTCo7nIkINh1uE.crl (hash: oU6t/KaeeiyqXO1IMQC9I1FCyVNntTg3NPB8s9X8o+g=)
2: JQH3U3cXJOwqHLIl-7Bwky7-HLY.roa (hash: SJWNpyd0W8U00MUBSeKEN8/PPIQ0TFlfn5di0BSI3Hg=)
3: K0Bz8gUXJ1GAp68K0LjDByi_SVk.roa (hash: CPs5nAdCCsQDzUUAym9dDL0dv2iUIo+oUoQLSVCUp9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:7e:c2:89:8e:45:c2:43:7e:8d:f9:a9:9d:17:ae:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e268bd0d25e55ac1a42a84c2a3b9c8908361d6e1
Validity
Not Before: Oct 3 02:01:32 2026 GMT
Not After : Oct 4 02:01:32 2026 GMT
Subject: CN=4a616435c211b2b16fbed84bdfde67c4551924c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:65:44:6b:14:13:d2:98:96:79:a0:05:84:6b:
92:1e:d0:03:43:6f:6c:bb:b8:8f:6b:b1:b7:5b:e2:
4a:f4:98:70:02:9b:27:e2:f4:e9:69:f8:e3:8f:3d:
34:ae:e3:7e:22:70:8e:bc:d6:a5:4a:4f:ce:3b:6d:
e0:f4:37:ee:ad:63:0d:70:5b:e5:16:0f:e7:e0:20:
68:eb:ef:35:1a:f6:03:b8:49:6b:3d:da:b9:45:f1:
16:63:5e:05:f1:1b:ee:b1:15:dc:bd:cf:0f:be:da:
d8:f7:5f:9a:fa:63:10:31:35:c9:7d:67:6b:24:b8:
74:f8:73:39:34:86:0e:f0:31:d0:9c:d0:b5:94:01:
28:4c:cf:2a:7a:ea:de:7f:c4:fb:68:de:8d:cf:17:
ca:25:db:9b:f2:bf:9b:bb:be:11:0e:d5:40:9a:a8:
5b:4c:c7:ee:dd:72:94:32:3b:e6:c2:ed:f4:71:d1:
8f:87:c2:63:97:99:88:c9:ba:84:5e:05:ee:00:8f:
56:59:e9:a9:74:17:34:43:11:2e:ca:c4:50:0f:d8:
02:db:6a:4f:de:9b:f8:1c:a5:a2:f8:b0:1e:5c:ae:
6f:5c:c4:21:5d:a6:e3:16:65:b3:2f:cf:e0:1f:43:
6d:76:33:4e:51:ee:4b:05:f7:16:ef:76:94:58:62:
2b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:61:64:35:C2:11:B2:B1:6F:BE:D8:4B:DF:DE:67:C4:55:19:24:C5
X509v3 Authority Key Identifier:
keyid:E2:68:BD:0D:25:E5:5A:C1:A4:2A:84:C2:A3:B9:C8:90:83:61:D6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:54:6b:50:41:a5:fc:34:3e:33:fd:b7:16:28:b5:b9:ee:6c:
51:ce:ac:bc:1f:4e:cb:21:6d:07:96:e6:63:a7:69:24:48:96:
11:49:37:21:68:b3:26:85:2f:10:fa:fb:4b:67:69:fd:fb:3a:
4c:c4:3b:5b:1c:c8:d2:77:be:42:d3:c7:d6:8d:5d:4a:5e:ac:
72:43:a1:bf:5a:4f:f9:57:14:ea:3a:6f:a0:33:ff:43:24:1d:
84:0f:5b:f6:03:d9:f2:cc:ca:81:4a:ad:ce:23:30:1a:a8:b9:
61:f3:85:85:2c:4f:be:4e:9c:fe:1d:9f:4e:a9:45:8c:4f:f4:
80:cd:e7:14:56:d1:8d:b0:a7:b9:58:5c:77:72:db:82:de:1c:
a8:a4:a7:7a:95:17:0e:16:2a:a9:9f:00:2d:f3:cc:19:1f:93:
7d:9a:ed:ec:49:7e:9f:fb:47:bb:45:89:57:50:e2:ce:c9:71:
a9:a2:b1:ae:0e:3c:2f:e2:6d:5e:cb:5d:ae:00:3f:04:e0:1d:
98:26:a3:eb:9e:23:1b:b1:55:57:00:c8:f4:43:0e:b2:e2:46:
e5:1d:e2:28:e7:72:5d:da:a8:89:88:6f:12:ca:1d:7b:ed:a8:
c1:7c:cf:a3:51:26:d0:82:d7:92:7c:20:37:13:6d:1e:b3:d6:
53:7f:c1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:35:45 2026 by rpki-client