Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
File: 4RlTX6w_pId5V5vOj8O0At7yy0Q.mft (raw, json)
Hash identifier: rH1BZF9RwSVb4l/pnPDsdzGxyqAVc29LWlNCn4qNVSU=
Subject key identifier: 32:1D:60:D6:A4:9C:5E:34:E7:08:BA:11:73:39:38:5B:CA:F8:D2:AD
Authority key identifier: E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
Certificate issuer: /CN=e119535fac3fa48779579bce8fc3b402def2cb44
Certificate serial: 01A0C4E9FFE3AB09208A47ED1FE5EAFF69EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
Manifest number: 0A3D
Signing time: Mon 21 Sep 2026 17:01:04 +0000
Manifest this update: Mon 21 Sep 2026 17:01:04 +0000
Manifest next update: Tue 22 Sep 2026 17:01:04 +0000
Files and hashes: 1: 4RlTX6w_pId5V5vOj8O0At7yy0Q.crl (hash: tVsy6VQlXnDjeTtgDuU9Yja0jwoNNA0Hv5BkXXp96z8=)
2: xsczLZy6vYyowOb8czcl6wqwt9w.roa (hash: Mvlo5cxvh4qQACxtbdlZhswtrG2sScu72g8Sl/rtq7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:ff:e3:ab:09:20:8a:47:ed:1f:e5:ea:ff:69:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e119535fac3fa48779579bce8fc3b402def2cb44
Validity
Not Before: Sep 21 17:01:04 2026 GMT
Not After : Sep 22 17:01:04 2026 GMT
Subject: CN=321d60d6a49c5e34e708ba117339385bcaf8d2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cb:a3:ca:22:b5:4c:b8:1e:1f:fd:cb:28:6e:
01:46:f9:04:6a:7c:30:d2:04:c6:fc:22:c2:56:2a:
e9:37:b5:66:72:3e:85:a0:21:c7:ba:8b:b3:f6:c2:
cf:e5:d7:30:88:48:13:bc:ae:76:da:04:d2:b8:6b:
c2:23:45:30:d3:52:08:69:7d:15:f8:f2:cd:06:c4:
de:15:a4:e8:fe:3f:be:be:9b:2f:5a:46:bc:55:6e:
3d:af:5e:00:f1:57:c4:ff:73:9b:63:d0:1c:0d:ff:
92:cc:3d:f5:b5:7e:93:38:ef:6e:8c:9b:f8:8c:62:
a3:6c:19:52:51:a5:06:54:fc:6b:cc:97:1a:88:3b:
a2:73:e8:e8:b2:5d:a0:51:53:a2:2f:d0:6d:95:28:
d2:7a:e5:2a:83:8d:2d:9b:b9:6a:8e:3c:4b:d6:04:
4d:32:ed:53:72:ea:47:12:d6:b2:84:b7:0d:5e:bc:
2a:6c:79:a3:6f:a0:59:d6:73:5c:b5:72:33:d7:6f:
d5:ea:26:6d:5a:f9:93:a6:57:43:ad:4b:ba:d8:2d:
ef:1e:a2:e7:8d:e6:9e:d0:c7:ba:5d:f0:d1:2d:d4:
72:4d:13:fa:f4:90:7a:8c:e9:db:9e:b1:6c:8a:c3:
9f:75:4b:8c:b2:88:60:da:68:2c:7d:1a:28:15:13:
e4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1D:60:D6:A4:9C:5E:34:E7:08:BA:11:73:39:38:5B:CA:F8:D2:AD
X509v3 Authority Key Identifier:
keyid:E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:99:1a:cf:5e:2c:51:b0:61:5c:56:d7:96:49:ae:d9:ca:72:
7d:98:37:a6:cc:53:53:83:ce:98:6b:50:e8:68:96:86:33:c7:
db:7a:f1:02:c5:a7:51:c6:7e:e3:38:3e:54:69:ad:39:17:38:
e8:fd:d7:0d:11:6c:8b:ee:a9:66:9a:03:18:50:09:1b:a3:57:
e5:0e:55:92:b2:96:ed:ce:0e:60:c9:4c:f2:b7:e5:5d:6e:39:
30:60:61:a8:33:cf:17:1a:48:a0:2d:2d:96:bc:4e:a5:39:07:
2c:ca:16:6f:2e:27:15:1c:ec:ff:2d:2d:20:70:48:89:04:70:
bc:d8:e4:69:fd:3d:94:f7:11:d5:20:20:be:f6:17:5b:51:6b:
80:69:13:72:b9:ac:4d:7b:ed:bf:d3:98:0c:51:fe:cd:3b:f3:
9b:f3:f4:c9:6e:d3:ad:bb:cf:28:33:b2:02:84:b3:69:6f:17:
af:a4:bd:3e:ff:40:fb:9c:4c:fb:4a:dd:60:76:1f:c8:70:59:
40:56:d2:57:9b:f5:4e:d6:68:72:cb:44:96:03:50:e5:01:2d:
9f:ee:34:59:73:af:4c:6a:a6:80:70:46:50:6a:2a:61:a0:5d:
16:ee:c8:e2:eb:51:01:28:7b:89:4b:10:37:64:6b:1c:77:15:
aa:ab:6e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:33:20 2026 by rpki-client