Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
File: 4McMwtIdqMLqZIFTT0jaSVqoS90.mft (raw, json)
Hash identifier: bo1Hw09EKdPaNB3edhZjACToKDp3G9rWfqqlJZaukJI=
Subject key identifier: A8:3F:8E:01:D5:8B:06:70:51:31:4F:C5:D1:92:83:93:83:63:C4:56
Authority key identifier: E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
Certificate issuer: /CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Certificate serial: 01A0C33206613036BB1B342F30AFDA02DED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 09:00:30 +0000
Manifest this update: Mon 21 Sep 2026 09:00:30 +0000
Manifest next update: Tue 22 Sep 2026 09:00:30 +0000
Files and hashes: 1: 4McMwtIdqMLqZIFTT0jaSVqoS90.crl (hash: DI8Lsa08Y7ariVzYYmJ66jMH658Yt99RXS4/u6ooQow=)
2: 9n6YyJWp7IvRmsopFDTgxhmBQm0.roa (hash: sjjxTHhwHGPnXt5JrQHPax3TE84fw1Ixy4bJH+8t+xw=)
3: Rn2NWJkYlmshYFgoPzIuXMYWVGc.roa (hash: JJzFZmd7A4HTxXMIGqGZ67CiVP4Sj1WJIj0x7HOLtqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:06:61:30:36:bb:1b:34:2f:30:af:da:02:de:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Validity
Not Before: Sep 21 09:00:30 2026 GMT
Not After : Sep 22 09:00:30 2026 GMT
Subject: CN=a83f8e01d58b067051314fc5d19283938363c456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:d4:04:08:e9:53:43:00:9d:f5:e7:01:8b:
1f:12:4f:fd:ad:c7:0f:7b:6f:7c:5a:4f:85:19:13:
cb:b7:cb:13:51:bb:4b:ae:82:c8:04:51:0a:f8:ca:
ac:ab:5c:04:4a:7e:1f:43:ae:6c:db:e4:e4:3f:d1:
95:05:0b:87:d3:44:4b:a5:7a:57:58:2f:63:23:ad:
c9:2d:37:7a:63:58:85:90:17:0a:0c:30:c2:0e:d8:
9e:5e:68:77:fa:cb:2d:65:b3:57:c7:c1:e1:6f:56:
75:c5:1e:d9:18:cc:41:ac:11:e1:d1:a0:14:d3:18:
30:8f:2a:b7:6b:7a:a4:ec:8f:b8:50:fb:25:0f:9f:
03:0d:77:6a:c4:05:65:8d:9a:0c:b8:03:71:68:42:
d5:fc:a2:52:d8:3e:94:3a:98:18:57:10:e2:26:29:
41:8c:b8:f3:90:60:23:02:07:6c:69:3a:bd:2b:08:
aa:fe:9d:5d:ad:9c:a4:da:74:07:d3:7f:b9:56:c3:
9b:99:b3:9c:b8:b2:11:99:c6:82:56:12:a0:1f:e1:
87:f0:75:2d:ad:a0:41:53:f9:fe:c0:a3:eb:41:cb:
8a:63:52:a8:87:03:17:66:90:c2:8d:c0:d1:47:9b:
81:56:ce:2f:f5:85:0f:7f:74:05:45:aa:57:0f:39:
c9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3F:8E:01:D5:8B:06:70:51:31:4F:C5:D1:92:83:93:83:63:C4:56
X509v3 Authority Key Identifier:
keyid:E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fd:15:e0:1a:76:a2:8b:3e:57:b4:c2:83:20:ca:03:80:00:
31:e3:15:92:14:af:4a:c6:4c:1d:34:d3:82:ce:fc:74:44:63:
cb:50:c3:02:2b:bf:db:d5:58:6a:21:97:5e:5e:0d:8e:c7:07:
08:5a:e5:a1:0a:f6:be:ae:7d:69:85:c9:a4:68:57:7a:f3:de:
52:43:36:09:eb:64:04:e7:c8:58:47:7f:6c:f3:81:56:94:7f:
7f:23:0a:c9:7d:90:58:53:72:85:6d:32:8f:ca:95:4a:95:f4:
3f:6e:54:cf:f8:4b:e5:66:ab:e9:a8:41:b2:ff:34:c8:eb:f3:
0c:ba:48:7d:25:f0:8b:52:f6:c4:a5:b5:17:70:04:fa:66:8b:
a9:38:26:79:3c:23:b3:13:66:9e:9e:79:7c:aa:b6:2c:ec:37:
bc:11:be:88:04:5f:ab:30:ce:f4:f8:18:0c:67:d6:b7:f7:cb:
ec:8f:a6:d3:89:ed:ee:dd:a0:a0:55:30:d0:c3:8b:e1:d7:a9:
5a:ff:14:08:df:54:68:cd:eb:2d:f6:d7:4b:0b:c9:86:b1:0e:
70:71:45:97:bc:5b:70:ee:1f:66:f0:71:ce:22:9b:5b:33:56:
19:40:1a:32:84:c1:90:80:38:c5:26:4d:52:14:00:c8:60:f1:
6b:01:64:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:39:37 2026 by rpki-client