Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/51d177-32c7-494b-a470-1b189a50658e/1/_c4S2VwEZFSQOnsqViidt5FjWm0.mft
File: _c4S2VwEZFSQOnsqViidt5FjWm0.mft (raw, json)
Hash identifier: NE0sAL5ZrLSxaSPamReD9leq57Z+5APA1k+XgvKj5Wo=
Subject key identifier: FA:C2:F8:45:B6:66:A8:96:9A:86:BF:60:C8:A8:C6:64:EA:98:00:41
Authority key identifier: FD:CE:12:D9:5C:04:64:54:90:3A:7B:2A:56:28:9D:B7:91:63:5A:6D
Certificate issuer: /CN=fdce12d95c046454903a7b2a56289db791635a6d
Certificate serial: 01A0DBA919AB8D59F2E5C440F34F3FA9095F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_c4S2VwEZFSQOnsqViidt5FjWm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/51d177-32c7-494b-a470-1b189a50658e/1/_c4S2VwEZFSQOnsqViidt5FjWm0.mft
Manifest number: 3D
Signing time: Sat 26 Sep 2026 03:01:27 +0000
Manifest this update: Sat 26 Sep 2026 03:01:27 +0000
Manifest next update: Sun 27 Sep 2026 03:01:27 +0000
Files and hashes: 1: _c4S2VwEZFSQOnsqViidt5FjWm0.crl (hash: vWeWYNHP9XsgdDmFA+IUGcf+/qAEHUziSCQLg9wIkII=)
2: odwPZDNuXyDgnLpxFjQripVtxTU.asa (hash: igJaENyyF56dOLL+KkaJi4krAn2njacTd33CsRM20MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/51d177-32c7-494b-a470-1b189a50658e/1/_c4S2VwEZFSQOnsqViidt5FjWm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/51d177-32c7-494b-a470-1b189a50658e/1/_c4S2VwEZFSQOnsqViidt5FjWm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_c4S2VwEZFSQOnsqViidt5FjWm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:19:ab:8d:59:f2:e5:c4:40:f3:4f:3f:a9:09:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdce12d95c046454903a7b2a56289db791635a6d
Validity
Not Before: Sep 26 03:01:27 2026 GMT
Not After : Sep 27 03:01:27 2026 GMT
Subject: CN=fac2f845b666a8969a86bf60c8a8c664ea980041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:a3:5d:6d:c3:f6:1a:b4:1f:03:14:f6:f1:
28:64:a3:db:14:fd:0d:cc:79:2a:95:02:58:a0:5e:
cf:8d:1d:8d:f5:4a:35:3f:18:2e:9a:47:04:33:ef:
e5:13:7e:9f:dc:e7:6e:b4:79:1a:21:21:ac:8b:e8:
83:9b:be:85:2c:fe:53:89:a2:14:aa:a5:9b:81:3b:
9c:b4:a8:a9:72:c1:08:ea:23:46:e2:d0:b0:4f:38:
1c:13:da:63:3a:4a:b5:cf:eb:20:ab:7c:99:73:45:
bb:90:04:f5:12:82:ea:db:de:df:15:4c:75:14:7e:
ea:ac:27:57:f6:d3:b4:5f:f5:14:a0:3d:22:a4:6f:
3d:9b:cb:ad:1c:4a:e4:b7:3d:f3:00:8d:5c:b6:04:
cb:00:69:89:cf:38:1c:65:87:01:3f:bb:a4:5c:72:
1c:29:09:7d:94:dc:77:e5:b4:da:51:bf:a0:ed:76:
37:ce:4c:3c:a5:0d:e2:ec:1c:aa:fe:bb:ae:e3:7c:
85:cf:f7:09:56:c8:be:2e:b5:e1:26:3b:ce:20:e0:
f3:84:2f:b3:e4:b5:78:98:ef:ca:50:be:a4:df:52:
a7:75:34:fa:87:db:2a:61:b1:57:63:06:6d:01:ee:
af:cc:4f:2a:45:8f:8d:70:9b:4c:7e:c2:df:2a:7b:
92:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C2:F8:45:B6:66:A8:96:9A:86:BF:60:C8:A8:C6:64:EA:98:00:41
X509v3 Authority Key Identifier:
keyid:FD:CE:12:D9:5C:04:64:54:90:3A:7B:2A:56:28:9D:B7:91:63:5A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_c4S2VwEZFSQOnsqViidt5FjWm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/51d177-32c7-494b-a470-1b189a50658e/1/_c4S2VwEZFSQOnsqViidt5FjWm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/51d177-32c7-494b-a470-1b189a50658e/1/_c4S2VwEZFSQOnsqViidt5FjWm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ac:7b:d4:33:61:75:5b:ab:c9:60:a9:8c:f2:b4:0a:d5:44:
f5:0e:02:bd:c3:ef:7b:40:50:39:74:6f:d0:68:99:c1:4e:a5:
cd:d4:5c:03:a9:f5:9e:89:c4:35:b5:a7:39:47:d8:2b:82:0c:
e8:d6:4c:fe:85:f8:52:b3:4e:69:b7:37:e2:a9:f9:54:10:8d:
22:5b:85:78:b7:b4:71:f6:7d:14:d0:fa:c3:53:2d:90:bb:d4:
c9:0a:65:ca:a0:53:70:bb:01:c5:0b:a2:3e:0c:d3:a8:4e:02:
6a:e4:c2:b9:6f:cd:fe:cc:f3:6c:44:9b:5a:32:ec:66:4e:bb:
ed:8b:49:32:4f:b3:5e:3b:7b:74:bc:5f:02:8c:a3:5b:83:78:
d8:e3:14:59:e6:bf:33:f2:49:02:5a:08:35:3b:8c:2b:89:dd:
b9:8b:3d:5d:9f:11:1c:76:4f:6c:7f:8f:3f:9f:75:f0:b9:cc:
42:8f:5e:9f:73:ce:77:2a:d1:6a:70:4b:4e:05:65:2c:94:20:
4d:dd:1f:e5:a9:cc:3c:26:d8:15:d2:b6:6b:15:69:45:a4:d3:
74:58:44:1f:f1:7b:f9:70:94:72:cc:17:da:8a:15:f9:49:5c:
b1:f6:9b:47:46:f3:1c:a7:fe:5f:6e:9e:03:b1:9d:74:51:d1:
6f:53:4b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:28:57 2026 by rpki-client