Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
File: 4sP8GYx3L1m47eUphWtS6heaTjg.mft (raw, json)
Hash identifier: Lqp26WeBKTj11vnFJh3ErcFE12jWgYSBB1jvVVkf3YU=
Subject key identifier: F7:08:98:B7:C6:C2:F5:35:36:88:96:A6:AB:E4:A4:F7:77:E0:F4:40
Authority key identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
Certificate issuer: /CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Certificate serial: 01A0C2FB13FED71DA6947C9D7D7B3802A9F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 08:00:29 +0000
Manifest this update: Mon 21 Sep 2026 08:00:29 +0000
Manifest next update: Tue 22 Sep 2026 08:00:29 +0000
Files and hashes: 1: 4sP8GYx3L1m47eUphWtS6heaTjg.crl (hash: Qx6vT+9Oxw9DHl8b97oZRIXW7lw5KBdVHivU/UEBbj8=)
2: j6eYXTGIPK6gsz2syCvMaVTG-yE.roa (hash: 91e+kynlaPtGnq7c6oIlywSzsBYw97PzDquhkqe4ygw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:13:fe:d7:1d:a6:94:7c:9d:7d:7b:38:02:a9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Validity
Not Before: Sep 21 08:00:29 2026 GMT
Not After : Sep 22 08:00:29 2026 GMT
Subject: CN=f70898b7c6c2f535368896a6abe4a4f777e0f440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:43:33:79:87:fc:4a:90:81:18:70:a1:db:
bf:2f:9b:aa:f2:d3:bb:ec:9d:1d:5b:bc:88:53:ca:
c1:af:ef:72:73:87:38:33:d7:59:b5:1e:ad:d3:13:
85:cd:b1:7d:2e:5d:3b:b0:ae:30:89:40:db:f2:ac:
4c:29:00:c0:19:8f:08:01:bd:35:80:12:40:f7:aa:
52:3b:01:fe:e7:6a:f3:0d:c0:50:ea:f8:57:19:f1:
93:69:3d:a0:e0:44:02:cf:9a:6e:dd:a9:24:2c:51:
17:82:f7:83:a8:a0:94:02:44:43:ad:58:91:42:3e:
06:72:2a:fa:61:40:18:b8:26:81:4e:94:b1:fe:b0:
43:80:59:dd:17:4a:fe:1c:69:bb:f8:4b:7f:5c:cb:
a0:ce:5e:95:f7:95:f7:77:bb:24:70:31:03:14:dd:
6b:a4:87:51:b9:20:1b:e4:b9:f6:1b:70:59:00:d0:
7b:a6:1f:e9:30:61:72:f6:db:da:58:2e:a1:37:d7:
e4:1e:e3:e5:83:d4:03:6c:3f:9e:b1:8c:4a:e8:e3:
16:52:ff:ed:6d:76:ca:10:53:ca:23:44:33:ef:60:
d5:1c:ab:c5:1a:e6:16:b4:33:30:c0:87:c8:07:93:
d6:7a:f6:f8:97:2b:0a:6b:a1:c6:ef:d2:2e:05:1d:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:08:98:B7:C6:C2:F5:35:36:88:96:A6:AB:E4:A4:F7:77:E0:F4:40
X509v3 Authority Key Identifier:
keyid:E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:74:ec:57:d2:82:c3:b3:59:3d:e4:27:b3:7e:b2:05:84:7c:
41:87:cc:32:52:d0:90:bf:1c:61:c9:c7:5a:ff:34:6c:0d:c7:
50:1f:84:73:04:4d:66:2b:aa:7a:c6:32:c1:0f:f4:22:f5:69:
4c:e1:f5:e9:cf:07:b1:2e:0e:b7:bc:18:44:59:10:5f:94:33:
e2:63:68:fa:d9:ed:a0:9b:f7:2a:53:5b:a7:d3:93:bb:88:fd:
73:83:04:7d:f3:7a:30:a0:52:e8:47:5c:bd:6a:11:4b:00:08:
6a:01:33:5e:2f:fa:73:f5:d2:e3:30:3e:3d:94:d1:a1:c1:1d:
72:67:c8:65:f2:bc:12:31:78:bb:c1:c7:13:d2:02:1a:2a:be:
8b:13:da:ed:68:6e:eb:4c:8a:f4:6d:d4:0d:fc:56:cc:3d:c9:
60:a6:4b:83:cb:35:db:24:b2:b6:31:84:f5:a9:ff:20:fe:38:
9e:df:f5:62:04:b1:da:62:a4:85:18:bf:d9:1f:a2:90:57:19:
90:fb:55:50:ee:1a:9f:5e:6c:3e:ea:ff:29:3e:d6:d6:2a:a9:
7e:c4:5c:ce:b0:fe:29:b4:e3:7f:e7:24:49:97:38:85:74:15:
5b:7e:cc:58:7b:14:2a:00:6b:55:95:a6:ba:8e:c0:61:d5:76:
22:86:49:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:00:00 2026 by rpki-client