Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
File: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft (raw, json)
Hash identifier: 0dxAUQ/DLbqIiJ5K0OfsjUJeW2Qyl3aDMD5yIBAObHo=
Subject key identifier: A9:F8:9E:1F:D9:7F:83:5F:CC:26:8D:A2:0C:6D:E2:E7:A9:1A:E4:0D
Authority key identifier: E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
Certificate issuer: /CN=e07e008d6ed2388ad31b7422423152a92a54de71
Certificate serial: 01A1DE70B03E0BCE4063D2AF238097782993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 09:01:29 +0000
Manifest this update: Sun 15 Nov 2026 09:01:29 +0000
Manifest next update: Mon 16 Nov 2026 09:01:29 +0000
Files and hashes: 1: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl (hash: NLkAdePPW/Wn5RC62Dx8Y7A5g5vsVi8FfSc9BGMYDCs=)
2: GD22NDKlkAh5bp67GRvvW84yHsU.roa (hash: LtP9pMPZerVqZeqzrIl5QfQhM+bLwsaU/FGis7xu4Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:b0:3e:0b:ce:40:63:d2:af:23:80:97:78:29:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e07e008d6ed2388ad31b7422423152a92a54de71
Validity
Not Before: Nov 15 09:01:29 2026 GMT
Not After : Nov 16 09:01:29 2026 GMT
Subject: CN=a9f89e1fd97f835fcc268da20c6de2e7a91ae40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:56:4d:cd:30:5b:8d:fc:09:72:a9:e9:12:35:
c4:28:96:0d:e2:ce:1c:44:57:0f:55:e5:9d:ec:ef:
ce:d0:11:1a:87:85:a9:f1:0d:bd:b1:59:97:0c:c8:
d0:4e:63:e6:6d:2b:7a:3a:a4:dc:e6:7d:c2:d2:b5:
e6:8b:01:6b:27:d2:fe:70:a6:95:02:f3:62:4a:ab:
ae:6b:9c:7b:3f:09:5a:ce:70:ce:d2:28:fb:f6:cd:
b4:a2:65:7e:db:e5:b8:98:28:0f:cf:6f:19:ab:d2:
a3:74:8e:f5:8a:6b:5e:8b:71:08:0e:2e:e0:b9:61:
6f:ff:f0:13:41:1a:ac:77:33:db:01:d4:f0:c0:13:
d4:01:c6:2f:00:29:c0:26:a4:f9:9c:e8:ea:13:18:
e7:b2:6d:6f:fb:7e:5c:50:c2:bb:6d:8c:10:e5:b4:
df:c7:81:b3:2d:80:e0:50:e3:39:22:83:0e:fd:10:
a7:72:76:49:ac:b1:78:dc:1a:9b:8e:e1:3c:4d:60:
03:c2:09:72:3d:0a:1d:6d:44:e2:ab:78:cd:3e:7c:
8a:6d:ca:fb:80:c4:12:76:bb:2a:e5:a5:0f:3d:82:
af:a7:c4:d9:18:fa:f8:cf:59:5e:21:c2:33:2b:8d:
c0:18:70:a2:e4:df:a5:3f:6d:e3:65:a5:6e:14:aa:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F8:9E:1F:D9:7F:83:5F:CC:26:8D:A2:0C:6D:E2:E7:A9:1A:E4:0D
X509v3 Authority Key Identifier:
keyid:E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:da:12:8a:43:ab:df:e1:dd:37:4e:ce:24:d6:75:41:bc:f9:
b1:60:49:0d:a3:8e:42:55:a5:33:66:4e:f8:1d:a7:9e:5c:87:
a3:e1:8f:93:77:e1:2f:53:3e:4e:d1:57:9f:a8:a6:4d:8d:8a:
ab:96:ec:64:09:20:01:af:2f:f2:51:e2:64:87:2a:f6:dd:c9:
61:7f:5d:0f:55:85:f0:02:ad:58:13:75:c5:51:6a:a0:b8:eb:
c9:9f:cc:7d:a4:f1:ad:5f:06:47:fc:ee:d1:92:1b:32:95:7c:
62:2e:e8:ef:7a:f3:85:ef:5d:27:38:08:2f:da:77:13:79:95:
14:5b:91:ea:61:8b:8e:53:8b:d4:47:94:09:80:c7:46:21:c6:
97:08:df:a8:db:ca:50:a2:ed:1b:68:44:7a:f0:82:73:22:13:
6c:2f:bd:20:4d:e2:fc:70:66:e0:2a:04:fd:e5:f9:98:af:3e:
ec:9e:ee:8c:6e:66:3c:04:c3:fc:ef:ff:65:7a:88:89:b5:1a:
2b:65:e5:b4:dc:b7:b5:d3:79:04:e3:26:ac:9b:50:6a:9d:1b:
df:44:7a:90:8d:d6:41:fc:47:3e:9d:47:7c:df:b8:e1:c2:c4:
a3:65:71:2a:4b:14:bf:11:83:15:a7:93:36:9a:99:a1:cf:c6:
49:bd:ad:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:11:11 2026 by rpki-client