Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
File: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft (raw, json)
Hash identifier: kLkRA4cKMm0s9XPE9aeTCV6QKwaNOYV0UzTweEU91dA=
Subject key identifier: 9D:D7:91:C1:B8:D2:29:C2:32:F3:0A:AD:BC:1A:0E:78:F7:C7:4D:2A
Authority key identifier: E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
Certificate issuer: /CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Certificate serial: 01A0D15B67742005A399CE4771FBB6D7DF6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
Manifest number: 06AA
Signing time: Thu 24 Sep 2026 03:00:23 +0000
Manifest this update: Thu 24 Sep 2026 03:00:23 +0000
Manifest next update: Fri 25 Sep 2026 03:00:23 +0000
Files and hashes: 1: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl (hash: nJmVfW+7+69oxDoqlbRs7umSmpmP5l97ckKD5rgJQ3o=)
2: nm8pFEpWXGPLmBGfEmff0mnlzsw.roa (hash: +n+qMQpld1QaCfNSSKf78RqXBTGK3eec/GzY9ilFD5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:67:74:20:05:a3:99:ce:47:71:fb:b6:d7:df:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Validity
Not Before: Sep 24 03:00:23 2026 GMT
Not After : Sep 25 03:00:23 2026 GMT
Subject: CN=9dd791c1b8d229c232f30aadbc1a0e78f7c74d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7a:e8:e7:ed:34:d9:fa:e2:d5:2b:04:df:0b:
23:8f:4c:1b:42:ec:99:3d:a5:82:35:20:e0:73:a6:
44:25:06:51:3a:8b:1e:75:d0:d1:82:62:76:36:da:
c3:e3:88:2e:b6:55:94:2e:b4:cc:ae:28:de:e0:3c:
bb:97:b8:a4:44:22:b8:b0:91:7b:df:9e:2e:2f:b0:
bb:d6:f0:f2:33:a0:40:1b:9a:51:5a:de:20:e7:5b:
1a:c9:69:17:91:9a:45:77:de:7e:0b:9c:b1:8a:59:
00:a9:27:58:61:2d:dc:22:53:e5:5f:ee:46:b9:8a:
b9:eb:63:d1:9c:95:23:53:5f:49:b5:fb:3d:ee:07:
50:4a:9b:18:d4:e4:c0:9a:5c:9a:10:a6:f0:e2:ff:
3f:02:24:17:7a:db:30:c9:91:52:cf:97:e6:49:f0:
51:6e:d2:eb:22:df:fe:52:11:98:ed:49:8a:15:d6:
f2:ef:ec:e4:63:01:43:52:1d:61:73:2b:24:16:37:
ca:c4:3f:c9:eb:bb:f4:a4:e1:a8:d0:a1:d5:e4:8c:
c4:70:a3:6c:52:fc:56:94:e7:f9:d8:7e:cb:93:28:
20:4f:bf:61:09:19:eb:97:b3:c3:b4:ad:57:8e:75:
e9:6d:c1:47:7c:75:78:e7:15:9a:19:29:1a:06:c1:
a3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D7:91:C1:B8:D2:29:C2:32:F3:0A:AD:BC:1A:0E:78:F7:C7:4D:2A
X509v3 Authority Key Identifier:
keyid:E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ea:2e:9d:52:46:ed:59:77:b2:06:b3:63:f5:77:6c:78:14:
90:ad:3d:7f:41:39:72:8a:0c:0a:61:62:99:2c:db:a9:ab:1e:
45:3a:1f:d6:d4:a6:05:33:34:1f:b1:28:98:6e:e0:4e:5f:81:
47:24:34:cf:de:8b:85:e8:a5:9e:08:14:44:87:30:63:30:1d:
00:89:9b:ea:e7:6d:6f:46:f3:88:a9:44:3f:48:f6:8b:87:21:
cb:aa:57:56:d9:44:bd:1b:30:0e:95:7b:87:19:3e:07:dd:4b:
38:d8:31:2c:d7:07:64:87:f1:7e:14:cf:4e:23:20:9a:fc:f0:
d0:b7:1e:39:08:04:56:e7:d0:50:69:0f:37:12:3c:c5:84:fd:
93:2a:8e:94:39:c4:03:01:24:c2:ec:23:bc:a6:49:c5:73:1e:
97:f5:cc:12:2e:70:13:27:e9:d1:17:d6:85:f0:c8:ca:34:76:
a4:a4:1c:8a:df:7d:e4:21:b6:83:32:07:c2:4e:b1:2c:3a:3d:
f6:f0:84:03:6a:cf:a9:48:62:a3:15:0e:0a:a3:9d:b0:62:36:
14:b9:ce:db:78:a0:56:9d:b5:d9:ee:ba:54:c8:d8:da:94:8e:
82:33:34:50:32:52:90:4e:43:5d:32:45:dc:b2:f3:09:0c:f2:
fd:31:3a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:38:31 2026 by rpki-client