
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
File: 4Gkduvo6jeBwsHAi3prfdDQftPI.mft (raw, json)
Hash identifier: XonCcBqKTnMfZphbIrpcs4euGBp4cbKgyaC5cV1pz94=
Subject key identifier: 95:63:BE:41:58:DC:88:9D:F1:3B:F6:93:8B:FC:07:56:C7:EB:1F:F1
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Certificate issuer: /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial: 01A1C0657DCF8740FBEF396870A25465D20B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
Manifest number: 13A9
Signing time: Mon 09 Nov 2026 13:00:39 +0000
Manifest this update: Mon 09 Nov 2026 13:00:39 +0000
Manifest next update: Tue 10 Nov 2026 13:00:39 +0000
Files and hashes: 1: 1OjQOklemE1c2Ofd7sEbtV6WCLQ.roa (hash: p8zMORBp4EwLrEV0pwePL8HYOl4fQLM1ray936MhnIo=)
2: 3gKR0cK9QoxfvHnSIiqY4bcG8ww.roa (hash: ZcGaXU4YPznoibhlbyhjzKqhwZf4BJJECm4SI2hoD/U=)
3: 4Gkduvo6jeBwsHAi3prfdDQftPI.crl (hash: KUgdn/rfpYMJSkoZiiB9+HJljjBTfZt6NRSrDgV669U=)
4: 8tAmUasl9shJmzVr02QyR9gf1yg.roa (hash: 56dLPJcjlB89ljFKBrlBrzN9saKBJC9XHbbe4kgHJpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:65:7d:cf:87:40:fb:ef:39:68:70:a2:54:65:d2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Validity
Not Before: Nov 9 13:00:39 2026 GMT
Not After : Nov 10 13:00:39 2026 GMT
Subject: CN=9563be4158dc889df13bf6938bfc0756c7eb1ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6d:29:17:af:a6:ea:e6:7a:13:52:ef:dc:ef:
30:79:6b:e3:58:e7:68:b9:ea:0b:66:93:ed:d4:25:
ac:d0:9f:be:7d:df:f9:d5:62:da:b9:4f:43:16:0a:
06:80:c9:b1:9a:09:d2:60:58:06:3a:98:ce:66:bf:
4a:5a:e4:68:3f:90:46:41:99:ba:d5:ef:73:3e:5f:
23:bf:8c:d3:19:e3:40:8d:13:ff:45:d1:9c:80:51:
09:d0:1e:a6:81:11:f7:a9:d7:ad:33:cf:87:b0:4b:
f2:58:9b:6a:3e:a9:ee:be:a3:88:7d:24:16:36:c5:
02:be:45:9d:db:0b:fe:07:f8:4d:12:e0:48:ee:da:
d0:11:8a:32:0f:b8:03:97:ce:b7:d5:37:0e:3f:1b:
24:0f:21:9c:b5:cf:da:05:6c:f5:7e:b4:a9:57:b0:
f9:cf:63:dd:c9:6e:7e:fb:5f:5e:6f:f2:86:8d:f0:
c6:3d:35:32:7e:59:5c:49:1b:b6:10:ae:fd:9f:79:
31:42:69:2c:94:4e:52:cd:25:d7:72:1e:b3:aa:48:
04:95:95:7a:64:60:d6:dc:5b:11:cc:9e:16:fd:30:
8b:48:1e:00:f9:c5:33:aa:4e:14:04:55:f5:27:0e:
19:8f:9e:b0:50:fa:07:b5:5a:28:72:8c:8d:e7:9d:
5e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:63:BE:41:58:DC:88:9D:F1:3B:F6:93:8B:FC:07:56:C7:EB:1F:F1
X509v3 Authority Key Identifier:
keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:56:c4:a2:0c:7b:54:4a:10:13:67:06:c0:58:e9:93:31:62:
6f:78:f8:a3:0b:9e:ea:8f:85:96:ce:5a:1d:a5:11:5c:e5:ca:
95:d8:5f:a3:da:6f:7d:e8:5b:ed:4f:23:90:c6:a5:13:45:7d:
18:bf:b4:ec:a2:3a:e0:13:fd:24:87:ce:08:b0:c5:4c:3b:f7:
97:f2:a2:bd:46:99:4b:b3:06:a3:e5:1a:66:b9:ad:94:85:f9:
f2:a4:33:d5:d0:1c:29:bf:a5:a6:bc:26:34:26:bf:13:6d:aa:
75:cf:a6:6e:e1:34:d8:73:45:b2:c6:43:be:90:fb:66:67:d7:
ac:7d:9b:8f:d9:09:20:1f:db:b8:09:04:3d:c5:9d:41:72:e6:
d0:84:4b:73:b6:02:78:f5:e2:d0:b0:66:1b:20:d4:1c:ab:af:
8e:c0:86:88:9c:0e:e1:69:8e:a3:c6:c5:9e:3b:a6:89:21:7a:
fa:a3:eb:b6:6d:76:e5:e9:7e:5c:be:b4:39:ce:15:68:71:bb:
1d:8d:dd:bf:c3:05:d8:18:a8:8a:39:bd:ba:8b:ca:48:b4:fa:
dc:5c:85:04:ae:21:e0:b5:f1:fe:b1:c4:fa:05:df:53:0d:db:
a2:80:20:4c:39:a6:e3:5e:2c:93:57:80:56:cf:5c:08:87:01:
a6:4a:3b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 22:25:23 2026 by rpki-client