Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
File: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft (raw, json)
Hash identifier: lEDIsvTAZ3K/TPYaxK07rM+w6u1V99qynRRxy+Y7RM4=
Subject key identifier: 1E:C0:30:E5:02:C8:54:3E:F4:21:DF:91:A0:C4:4D:72:17:20:52:CB
Authority key identifier: E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
Certificate issuer: /CN=e31c010e95015c2123641d33120a7e9c9008002d
Certificate serial: 01A119E2188338CDE9FAF1D926BE8F6F6326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
Manifest number: 03BD
Signing time: Thu 08 Oct 2026 05:00:10 +0000
Manifest this update: Thu 08 Oct 2026 05:00:10 +0000
Manifest next update: Fri 09 Oct 2026 05:00:10 +0000
Files and hashes: 1: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl (hash: hoojCfBBPU4zqbaK6Dt1FwxUIqwb2uloDtWj25arVmI=)
2: EVP8JZC4veSxdxX6T8tUKYQ-OAA.roa (hash: bYUAbwTN22M9GXhG7TnoyYrgAEb8pmrS9QwXIchXrAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:e2:18:83:38:cd:e9:fa:f1:d9:26:be:8f:6f:63:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31c010e95015c2123641d33120a7e9c9008002d
Validity
Not Before: Oct 8 05:00:10 2026 GMT
Not After : Oct 9 05:00:10 2026 GMT
Subject: CN=1ec030e502c8543ef421df91a0c44d72172052cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:88:56:18:3c:fd:2b:13:c2:40:85:5a:5b:
f4:f1:25:2f:0e:93:01:ce:9d:dc:91:0c:bc:44:91:
bd:72:6e:46:f3:b2:2e:6e:e8:56:f3:29:1e:d9:7a:
d8:43:99:67:88:a1:6f:dc:39:e8:ec:3f:6c:14:b5:
c5:ae:24:16:35:b6:19:5e:b8:8b:16:76:32:69:42:
da:20:0d:ea:ed:5b:f2:83:44:42:d4:04:3f:a1:0b:
e8:60:bc:fd:ac:49:52:bb:4d:cd:35:e2:c9:7a:9d:
34:62:76:9f:70:43:20:44:54:96:97:45:1e:61:77:
f1:69:d7:15:fe:5f:aa:b4:ab:b2:1a:6e:b7:48:26:
e3:5b:26:53:12:a8:84:0f:e5:f3:35:ab:28:a7:a8:
81:1c:9c:49:ca:b5:47:ee:23:38:7e:64:c4:28:ed:
a8:25:99:e5:17:73:f1:3b:76:82:f8:eb:94:d5:f1:
a8:96:b7:a0:fa:3e:2c:5f:a1:cf:6d:75:b2:67:b4:
02:16:c5:3d:82:30:32:be:99:5e:fc:b8:28:3a:19:
3d:d5:d1:d7:c2:59:2a:74:43:51:93:e2:a4:ba:0c:
1a:c2:22:c2:5b:53:65:58:2a:99:1d:e3:c6:f8:eb:
d1:59:e0:56:43:5d:be:de:d0:51:8a:15:1c:f8:ad:
cf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C0:30:E5:02:C8:54:3E:F4:21:DF:91:A0:C4:4D:72:17:20:52:CB
X509v3 Authority Key Identifier:
keyid:E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:62:a7:5c:b3:34:eb:cd:d0:e5:c0:21:b7:a9:24:31:b1:a1:
d5:93:5d:fd:ae:b5:a4:d5:75:a3:85:61:fa:a2:e4:27:68:c7:
2a:c0:14:70:2c:7b:22:fe:98:ea:4b:ea:a8:26:f9:0c:f8:78:
09:3b:5e:17:32:ed:fa:98:ff:67:03:5e:09:90:55:e3:65:56:
1e:1d:ee:4c:5b:0f:82:7b:e8:f5:89:5c:9e:62:8a:07:69:57:
51:a1:67:ba:4c:fe:db:7c:f5:af:e0:7b:1e:6f:37:29:f3:fa:
29:5e:f3:b9:b3:80:9f:83:d1:95:ae:0a:9d:32:7e:b9:fd:03:
e8:d2:9b:c4:dc:c8:31:ed:66:64:a3:b0:96:ac:76:82:41:71:
86:e2:12:af:4f:b0:50:fd:8f:9f:7f:06:75:28:9c:6e:b1:f5:
8b:7a:f0:c4:39:c3:42:ed:cb:65:4d:48:57:ba:29:c9:b3:c7:
1d:f7:a7:0e:6e:8e:e0:a5:44:73:e6:cc:44:fb:10:d6:09:03:
4c:6c:b2:cc:c9:d4:15:eb:66:02:d8:b2:f1:cf:a7:54:61:88:
eb:2f:95:7d:0f:36:a9:ec:5c:00:3a:f2:20:8f:f2:8d:69:e7:
73:a8:5b:e9:92:29:21:d9:f2:40:3b:07:7c:8d:0d:fe:3f:5f:
5b:3f:3f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:03:58 2026 by rpki-client