Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
File: 4McMwtIdqMLqZIFTT0jaSVqoS90.mft (raw, json)
Hash identifier: OuMGJIROHwZSc0JA5UsRC1b90G2GqXjmM2FtA01Fp8M=
Subject key identifier: 47:D6:7E:C5:2C:22:43:69:77:0F:E8:39:64:EB:67:DB:BF:25:F2:18
Authority key identifier: E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
Certificate issuer: /CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Certificate serial: 01A0CAEBEB086719F9D0C2187C92F56BC385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
Manifest number: 1A6B
Signing time: Tue 22 Sep 2026 21:00:53 +0000
Manifest this update: Tue 22 Sep 2026 21:00:53 +0000
Manifest next update: Wed 23 Sep 2026 21:00:53 +0000
Files and hashes: 1: 4McMwtIdqMLqZIFTT0jaSVqoS90.crl (hash: 1HuQbCpox5+1uOwGdq0hDfgSNSFay4lQ5JpQTbaBR/w=)
2: 9n6YyJWp7IvRmsopFDTgxhmBQm0.roa (hash: sjjxTHhwHGPnXt5JrQHPax3TE84fw1Ixy4bJH+8t+xw=)
3: Rn2NWJkYlmshYFgoPzIuXMYWVGc.roa (hash: JJzFZmd7A4HTxXMIGqGZ67CiVP4Sj1WJIj0x7HOLtqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:eb:08:67:19:f9:d0:c2:18:7c:92:f5:6b:c3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Validity
Not Before: Sep 22 21:00:53 2026 GMT
Not After : Sep 23 21:00:53 2026 GMT
Subject: CN=47d67ec52c224369770fe83964eb67dbbf25f218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:18:ad:af:11:3f:4c:c8:8e:44:86:c5:39:92:
ff:ce:19:7b:d6:c6:0b:1f:0f:b7:e0:3b:2f:24:46:
23:38:5b:a1:67:94:08:b9:3f:07:e8:ed:c0:84:f2:
a0:a4:3e:65:8f:22:97:1b:2c:2b:70:55:96:6e:3e:
76:7b:c9:2a:8b:87:03:e2:70:f8:35:15:88:e6:f5:
aa:f0:ed:61:ca:ff:00:dd:eb:ac:83:4a:3c:75:62:
50:48:71:40:86:be:3b:16:fe:1f:76:c7:da:44:94:
f6:b2:15:11:97:78:1c:25:3d:7e:34:c8:7a:12:cb:
82:da:e6:2d:0b:0f:d8:42:bb:63:a5:51:6b:e2:03:
d4:c2:06:8e:31:de:d8:e5:14:77:0d:08:3b:01:7c:
e6:8f:f1:29:34:c0:72:1a:0f:ac:06:47:22:dd:9f:
fd:7e:1f:36:e0:b9:59:b9:2a:8f:c4:8f:5f:0b:c9:
23:c3:5a:55:1f:be:f2:8e:49:ab:f0:6f:30:1f:b0:
f4:68:9a:ae:1c:d1:e5:09:8a:24:b8:ff:18:e9:02:
23:c8:24:65:4a:5d:9f:6f:aa:ef:1e:cb:2b:f5:51:
ca:80:a2:c3:83:11:17:2a:bb:b6:7f:87:15:40:46:
62:5c:8a:57:aa:07:e5:40:c7:6a:70:a6:72:af:62:
2d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D6:7E:C5:2C:22:43:69:77:0F:E8:39:64:EB:67:DB:BF:25:F2:18
X509v3 Authority Key Identifier:
keyid:E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:aa:0f:87:25:db:52:e0:64:05:2a:1a:4b:51:56:b4:6f:f3:
44:03:06:74:96:9c:2b:98:1a:01:45:9e:9b:3e:af:5a:3e:9d:
50:81:d7:88:08:64:36:fe:65:2b:04:75:0b:96:56:12:50:22:
c4:e5:34:65:9a:7a:0b:08:65:b2:0e:ed:34:47:b7:79:f5:e2:
ed:cd:da:88:03:44:11:75:16:30:87:c1:89:dc:76:65:79:5e:
17:47:5d:4a:3e:18:a4:a0:0f:60:a6:43:12:82:c7:6b:eb:48:
2c:47:69:c8:1f:b7:b4:8a:45:fe:f5:16:b5:7f:13:77:a6:31:
a7:2c:87:ce:75:53:28:6b:25:b6:b3:8d:37:2a:a8:ed:80:3f:
38:04:8a:1a:e3:8d:6c:d5:62:fa:18:df:b5:e3:07:98:8c:97:
a9:dd:02:90:36:17:7d:73:31:da:65:8d:98:ac:80:27:c6:7a:
4b:3a:2c:ac:08:c3:ca:77:35:45:7c:8b:31:27:d6:fd:f3:d4:
d4:73:c8:68:3e:b7:7f:ff:56:19:35:52:99:a3:28:39:ad:88:
cd:db:07:95:ed:48:46:a1:58:d9:bc:cc:1a:c7:c7:97:39:47:
e1:01:a0:b3:01:f0:b8:53:40:93:49:a2:de:83:50:36:3d:d4:
dd:01:b2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:35:03 2026 by rpki-client