Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
File: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft (raw, json)
Hash identifier: qA9JBlWPJTajH9m9WNl38HUtCN+OgrjizhJ7NxftiLM=
Subject key identifier: 36:FC:B9:E7:4C:4E:34:EF:C7:9C:75:00:44:7C:C8:0B:6D:7F:86:DA
Authority key identifier: E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
Certificate issuer: /CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Certificate serial: 01A0C10C6672CF89C7FDBD4C40010FB62567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
Manifest number: 14C6
Signing time: Sun 20 Sep 2026 23:00:10 +0000
Manifest this update: Sun 20 Sep 2026 23:00:10 +0000
Manifest next update: Mon 21 Sep 2026 23:00:10 +0000
Files and hashes: 1: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl (hash: E+jaFHUjzrW//FlAkUaAnW9AhCzKexr9z2wDoqKWUsg=)
2: H8G6D-Wk6u8Ak866YQFvElddI-c.roa (hash: PEnd5yN8T5n1W+yxVyKPvkVNjUPkgKs3BkeHGhdDjdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0c:66:72:cf:89:c7:fd:bd:4c:40:01:0f:b6:25:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Validity
Not Before: Sep 20 23:00:10 2026 GMT
Not After : Sep 21 23:00:10 2026 GMT
Subject: CN=36fcb9e74c4e34efc79c7500447cc80b6d7f86da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:3b:e7:02:ab:04:dc:c3:a3:91:57:c6:c8:07:
82:0b:dc:50:90:ea:87:ff:db:c4:71:c5:81:ae:4c:
9f:a4:1a:15:c7:d8:d5:9d:3c:5e:14:64:89:a6:bd:
80:cc:f6:5e:85:85:2b:2a:6a:f6:99:5d:8a:e6:cb:
2a:ef:aa:8c:c9:50:9e:2f:a9:94:4d:b6:f7:c5:f3:
74:bb:46:ea:49:4f:3b:3d:73:06:eb:0b:83:7e:0b:
86:e5:7c:dd:f1:ee:73:96:d9:56:26:57:37:c7:81:
c7:4f:91:37:1a:41:68:4c:3c:e4:99:75:57:df:c9:
2d:c7:58:ae:64:01:6f:08:63:31:d3:48:60:0b:73:
fc:13:cc:f2:53:8d:90:a2:11:07:44:e9:94:de:c8:
d0:11:97:09:93:19:75:06:0f:bb:b0:f6:8f:9d:b8:
10:b1:c7:7f:d8:88:33:bc:30:2d:7f:53:68:00:4a:
33:80:e8:c5:45:1f:0d:87:76:c1:dc:f1:e3:17:58:
b3:9a:ad:58:a9:05:d0:19:1e:71:53:02:2e:08:e9:
95:bf:60:b1:83:be:27:fe:5f:2b:cf:b3:9b:97:60:
c6:5b:c8:b4:fc:fe:0c:d4:4e:d0:be:e1:19:e7:50:
c6:41:b3:82:45:8b:8c:73:8b:be:e2:40:dc:e7:5d:
15:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FC:B9:E7:4C:4E:34:EF:C7:9C:75:00:44:7C:C8:0B:6D:7F:86:DA
X509v3 Authority Key Identifier:
keyid:E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2a:11:45:8a:04:de:8e:8b:bf:39:7f:cc:eb:d8:90:9a:94:
5c:af:b6:0f:57:cc:71:47:79:cc:0c:96:9d:63:41:74:7f:61:
73:cc:56:f3:3a:2b:bf:45:c2:90:3d:2a:ce:5c:b1:02:41:19:
42:ed:08:ce:7d:22:1f:c9:42:21:2d:b3:6d:57:b7:aa:06:5c:
f6:2f:cc:69:6f:63:86:24:55:0e:6b:a5:51:a9:2c:7a:fb:0a:
5d:1e:eb:21:d1:8e:b0:a5:8e:00:75:35:7c:e8:fe:ab:ba:5a:
85:f5:46:7e:21:fc:71:b4:0e:b4:bc:f6:aa:45:8c:31:ca:6a:
79:3b:ed:70:16:99:79:2a:c4:d7:6b:1b:56:1c:6b:85:6f:89:
f9:8e:ea:50:c8:a6:04:c9:d2:e5:d2:cd:43:cb:74:75:c8:24:
72:a8:27:2c:e0:0d:a6:cb:53:31:45:63:03:31:b5:c0:ee:d9:
a1:91:77:dd:be:8c:54:33:c3:fd:aa:33:dd:1d:0f:e2:54:55:
d8:7f:53:11:1a:fb:8a:e4:1f:ef:98:24:cb:01:7f:25:65:70:
27:c3:e2:c9:26:c9:15:62:f4:76:77:de:17:8b:2d:0c:11:76:
3c:f1:55:af:db:a1:b0:89:45:ee:dc:5b:6a:92:7b:4a:01:73:
11:b5:fa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:26:44 2026 by rpki-client