Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
File: 4uTP5HrtUexxqnX1NhibrW6GLes.mft (raw, json)
Hash identifier: Hwl2oHVPHbriIL9mvPQr2ab32wuvQS350uP9/ADIet8=
Subject key identifier: D8:CF:3E:CB:F9:AC:2E:94:A2:BC:22:6D:10:CE:22:03:E4:22:C6:43
Authority key identifier: E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
Certificate issuer: /CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Certificate serial: 01A0C331BCAD28987B4E5FE034C818EC3233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
Manifest number: 0E0A
Signing time: Mon 21 Sep 2026 09:00:11 +0000
Manifest this update: Mon 21 Sep 2026 09:00:11 +0000
Manifest next update: Tue 22 Sep 2026 09:00:11 +0000
Files and hashes: 1: 4uTP5HrtUexxqnX1NhibrW6GLes.crl (hash: Pr0lQAoCcjEifwmR3HrMEW2DfgMm6Jjbc9eLi+qNkKk=)
2: UWX8SxCjwL_qmxdOe6nySrZQC84.roa (hash: D5R5Nyowo4jjOW+4uW1uT9NqCdmsnMIgdkwB6H1oOfI=)
3: vAkRpmTvdjsWw_0AKaPQzFGQBZQ.roa (hash: 8oO/bPo+96+JLDumliudhdJVxtG8gpJVeHN/Dwo+7JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:31:bc:ad:28:98:7b:4e:5f:e0:34:c8:18:ec:32:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Validity
Not Before: Sep 21 09:00:11 2026 GMT
Not After : Sep 22 09:00:11 2026 GMT
Subject: CN=d8cf3ecbf9ac2e94a2bc226d10ce2203e422c643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:6f:23:00:9c:68:f0:1e:c1:15:e9:a0:c4:
d7:62:30:30:3e:49:d6:e6:6b:fe:09:be:11:ef:e4:
b5:23:71:98:88:ed:a9:68:9c:8f:8d:dd:33:e4:c9:
3f:4e:1d:0a:f7:66:f4:4d:10:2b:80:9a:58:a6:b9:
1f:27:7e:04:ec:27:3f:62:12:fe:a7:54:55:df:a4:
50:78:22:19:30:df:48:57:d7:7f:74:64:e0:e9:e6:
6a:43:53:1d:7a:10:a8:4f:f7:01:dc:45:2e:1d:bd:
f1:f7:60:cb:86:d6:86:96:4a:2c:e4:7d:a4:27:10:
39:b1:d7:82:15:48:9d:66:b0:3e:c1:86:67:f0:9c:
9f:00:a5:56:45:46:e5:f1:cb:24:d4:e7:15:5e:24:
4d:2b:f9:c6:9c:f7:e7:67:e9:de:08:75:7f:fd:b2:
a9:34:a6:ce:be:d2:c0:ae:09:f9:0f:a9:07:ac:ab:
cc:e1:e5:8b:1b:29:1f:01:bb:1d:75:be:87:25:31:
5e:86:7b:9b:f5:11:bb:b1:41:b1:74:47:0d:c3:bc:
38:ed:62:3a:95:40:7d:af:f2:19:1c:82:4f:64:5e:
ac:7c:29:1b:58:e5:6a:a5:68:90:26:f2:17:fd:5b:
43:20:c6:88:17:a2:cc:c9:90:9e:bd:70:1f:9a:cc:
0c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CF:3E:CB:F9:AC:2E:94:A2:BC:22:6D:10:CE:22:03:E4:22:C6:43
X509v3 Authority Key Identifier:
keyid:E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:78:8e:bb:7f:62:49:a8:59:39:ba:0b:ee:a8:7a:49:4b:44:
54:e2:1a:8c:d7:e7:cc:65:89:32:4d:4f:af:aa:67:15:93:2a:
3a:9d:c6:95:d6:d4:5a:41:3f:f7:1e:7c:a7:bd:94:2b:2f:55:
d6:bd:7e:ae:c8:5b:3e:f2:b7:c2:f0:6e:f1:17:af:fe:e9:50:
6a:08:45:82:b4:d0:1d:64:ee:38:b6:e9:59:ed:e3:ee:af:59:
a3:35:e9:4c:b8:9d:81:2f:be:47:78:13:64:4e:d1:8c:da:18:
eb:12:28:86:98:e2:f2:f5:00:90:6c:81:38:3a:13:33:9d:18:
d3:7a:09:d6:29:2f:34:35:d5:11:36:20:ab:17:72:df:3f:d5:
cf:c8:a6:22:ea:43:33:21:00:45:dc:f3:94:b9:68:b6:57:fa:
2d:0c:6a:9a:40:c8:59:43:ae:f8:6c:ef:e1:f6:f4:52:42:bb:
00:c2:02:28:8c:bb:72:8e:10:b2:c3:a2:8c:bd:8c:73:8d:ca:
6a:08:a3:f9:56:c4:9d:03:d3:aa:05:11:87:b9:b4:fe:bc:4c:
a6:20:e3:49:23:10:5c:f7:61:55:29:de:a5:de:36:0a:28:81:
20:25:62:fe:46:1f:97:07:a6:c1:3f:2e:d0:cb:ed:4d:03:28:
40:11:0a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:25:19 2026 by rpki-client