Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
File: 4SLitYIzoZPR9yd4Vl1smNdhY6c.mft (raw, json)
Hash identifier: lQ/njEvxTyhNO/SCdotnRqRMpg1CBtxA+rshel60WyU=
Subject key identifier: 08:11:AF:CB:28:A8:19:0F:73:50:CA:5D:0A:EA:CD:7F:D8:A9:4A:D1
Authority key identifier: E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
Certificate issuer: /CN=e122e2b58233a193d1f72778565d6c98d76163a7
Certificate serial: 01A1C40B65F66D5E76D275BABB0ABBAB94BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
Manifest number: 16CB
Signing time: Tue 10 Nov 2026 06:00:43 +0000
Manifest this update: Tue 10 Nov 2026 06:00:43 +0000
Manifest next update: Wed 11 Nov 2026 06:00:43 +0000
Files and hashes: 1: 4SLitYIzoZPR9yd4Vl1smNdhY6c.crl (hash: rquhj/8P5wYIBCTU2J1VfVSOeRd9y1PLdTlCrtqX/cc=)
2: EZWxZhFmRJKcHZHUYtJREuYOZKA.asa (hash: o6wDYlrB5ufIUn6eLi+ahJAd1q3uJL19jR47MI+d/JI=)
3: GO-d2Wh9QMmrYUtLnGnz133HNZg.roa (hash: xFp07iitJni/qMpmHXkgYii0ns8yCXMQvZmN2wMYF3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:0b:65:f6:6d:5e:76:d2:75:ba:bb:0a:bb:ab:94:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e122e2b58233a193d1f72778565d6c98d76163a7
Validity
Not Before: Nov 10 06:00:43 2026 GMT
Not After : Nov 11 06:00:43 2026 GMT
Subject: CN=0811afcb28a8190f7350ca5d0aeacd7fd8a94ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b5:5e:3e:78:a4:4e:e5:d2:45:dd:69:5e:9e:
10:fc:46:71:fa:7e:a0:d1:71:81:22:01:3e:eb:ec:
7e:f6:7d:c0:9e:3e:f8:61:aa:f9:e4:76:93:8c:69:
cf:e6:25:eb:ac:5e:5f:b2:c9:b1:a2:2b:87:3c:99:
1a:fb:93:4c:83:c2:ed:cb:96:32:4e:17:98:90:8a:
07:ec:26:86:55:5e:87:88:04:d4:45:f1:65:f8:9a:
8d:27:33:63:a1:13:4a:b0:1f:7e:e1:ad:74:fb:aa:
fa:83:bb:37:3e:10:4c:18:6d:9f:08:b0:d8:75:76:
af:91:4e:68:60:e8:c1:f6:44:19:c6:83:61:3a:88:
a6:7f:89:77:d8:5d:30:35:bf:0f:03:72:37:80:a1:
ea:e4:1b:a2:ae:ac:ca:64:fd:37:c0:6a:20:87:eb:
07:4c:82:8e:d8:57:5e:c8:db:ff:ae:d0:f1:1c:fe:
8c:c3:fd:e4:82:d7:6b:93:0f:9c:6d:d6:0c:0f:36:
2b:a4:b4:e7:79:6b:51:84:8b:c2:48:0f:23:c2:66:
50:e2:a7:e1:2e:2b:5e:64:bb:3f:ad:eb:21:1d:42:
9c:f8:da:64:b2:7e:94:42:bc:01:b0:a0:47:64:3c:
74:1e:04:0d:0f:21:54:f2:1b:9a:74:e7:cd:83:a7:
b4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:11:AF:CB:28:A8:19:0F:73:50:CA:5D:0A:EA:CD:7F:D8:A9:4A:D1
X509v3 Authority Key Identifier:
keyid:E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:54:4c:a5:68:97:2e:c6:78:82:c5:34:f8:6a:84:a0:89:1a:
c7:b2:55:c7:09:9d:5a:0a:1d:a6:9f:2a:1a:e2:59:c4:c4:05:
45:a5:23:06:eb:a4:76:c5:69:34:36:24:8d:c9:92:d1:09:2e:
be:fb:82:2e:db:69:21:25:e2:44:73:26:ea:f4:e6:f9:a3:55:
ac:8d:9d:80:f3:0a:40:98:f9:1a:e4:65:5f:71:ad:f7:8f:65:
90:b9:e2:d5:8b:60:85:69:4d:a5:47:0e:fc:17:64:8d:9a:88:
41:44:6b:f5:f6:d7:3f:73:3f:62:8b:1b:03:85:a3:d5:97:d2:
ac:db:8a:de:c4:72:4a:69:74:e4:56:3c:28:15:2c:c0:d3:f7:
26:6c:f2:40:f8:a2:d1:a3:73:71:80:77:af:c0:90:44:3b:63:
59:a7:79:ba:3f:2c:f8:91:23:5e:e9:e9:33:7f:94:a8:8d:c6:
ef:c8:6f:a4:ef:a1:b2:be:70:76:d1:d1:be:38:db:2f:e1:17:
fe:e8:c6:7d:bc:50:5f:0e:44:66:a6:24:15:24:1b:5f:5a:5e:
20:34:c9:59:89:bd:22:3c:a2:a4:17:60:98:f8:65:b5:cd:2d:
41:e6:90:f7:e8:83:af:fe:60:0e:0b:f9:a7:c5:1a:b4:13:83:
54:41:92:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 14:03:11 2026 by rpki-client