Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
File: 4cxF6EsHjUWK342GdEXEb4yND64.mft (raw, json)
Hash identifier: FyNQAfIZ8q++UU9e9ewuMZdJQD4G0uXllamWfE/CvMo=
Subject key identifier: AA:57:C0:BF:0B:30:77:1E:57:14:F9:F7:AB:E7:A0:7C:17:13:4B:50
Authority key identifier: E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
Certificate issuer: /CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Certificate serial: 01A0CA47CCE7E9804E607E1770E8A6DE994C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
Manifest number: 18E9
Signing time: Tue 22 Sep 2026 18:01:38 +0000
Manifest this update: Tue 22 Sep 2026 18:01:38 +0000
Manifest next update: Wed 23 Sep 2026 18:01:38 +0000
Files and hashes: 1: 4cxF6EsHjUWK342GdEXEb4yND64.crl (hash: QVYHVmucbaE0jdOpY6wkLXCPOFIx358jX3+58hknBzY=)
2: wxMlSMWtQ0ndBMMV3tfXfzI4pMo.roa (hash: Cum4Di2WX2Vf5OYvq7GxldvC9jsMY0qM5fo7QBzndMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:cc:e7:e9:80:4e:60:7e:17:70:e8:a6:de:99:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Validity
Not Before: Sep 22 18:01:38 2026 GMT
Not After : Sep 23 18:01:38 2026 GMT
Subject: CN=aa57c0bf0b30771e5714f9f7abe7a07c17134b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:ab:61:f9:9a:df:38:bd:56:c3:8c:3c:65:
7d:2d:bd:b1:da:97:0a:56:a6:1e:e4:bb:4d:53:cc:
d0:f8:a9:67:51:21:e4:e5:24:1d:db:3e:a8:7c:21:
45:28:83:72:90:b0:d0:99:f3:a6:2f:dc:51:f9:fa:
f7:31:54:f1:7b:43:cd:82:58:e9:40:ac:26:45:aa:
d0:ff:43:3d:fe:a1:ff:86:dc:c3:3d:a6:5d:46:be:
09:15:8f:73:0b:df:3d:d1:2a:f1:14:d5:e3:2c:11:
c0:44:9a:df:81:fb:bf:53:61:e9:35:a7:4a:4c:2c:
05:2c:51:43:4a:be:f2:b4:9d:2d:70:87:1b:f5:ed:
81:c0:6a:db:8b:5d:41:f9:c7:73:3b:32:20:dc:67:
af:60:d7:35:a0:72:bc:90:b2:da:8a:9f:5f:04:9b:
80:c9:eb:cb:b3:48:38:9f:98:f2:8e:f4:3c:65:89:
63:13:d0:a9:f4:45:d5:be:ce:0b:31:0d:b3:c6:bb:
a0:6a:5e:40:83:a0:c3:da:bb:c4:91:16:8e:82:ed:
ef:7f:19:53:eb:30:c4:ca:d5:24:0e:91:8d:16:ef:
56:66:98:e5:c6:dc:0e:bd:0c:0a:df:e8:11:74:5c:
80:ba:d2:3c:4b:1e:8a:1e:f8:7a:33:6a:5d:7f:45:
ff:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:57:C0:BF:0B:30:77:1E:57:14:F9:F7:AB:E7:A0:7C:17:13:4B:50
X509v3 Authority Key Identifier:
keyid:E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:bc:46:b2:f1:9b:26:67:14:ce:b0:0e:a9:2d:92:a2:5d:2d:
6b:1c:08:68:64:e4:20:90:e7:7c:5d:6d:cd:d7:91:71:15:8b:
d6:0f:7d:c2:a3:53:06:d5:6c:f5:a2:2f:fb:18:da:81:63:29:
5c:be:69:d2:56:f8:c6:30:14:63:fd:79:d9:f8:c9:02:5d:ad:
a0:15:12:6f:4f:24:9f:7a:c0:fd:2d:d8:41:f3:58:0b:23:b6:
85:7d:9a:8f:6d:54:0a:a7:89:c5:a2:98:92:31:b5:c4:b8:e6:
28:0f:41:25:64:04:00:62:92:cc:95:1f:a2:de:b7:57:10:23:
7e:ff:81:3a:2f:11:04:f4:49:ca:7d:c1:2b:c1:d5:26:cc:f3:
0b:91:18:c2:b3:a5:c6:c7:ea:19:58:6a:bd:e8:b0:d6:40:49:
85:a8:0b:75:df:09:f4:bc:3e:8f:50:38:35:71:09:80:43:a7:
45:6b:5e:fa:c1:bf:57:2c:e1:d0:e5:19:46:12:3a:f1:1b:83:
cb:71:12:d8:6d:4c:67:73:22:b8:1b:00:75:81:5c:49:63:23:
2a:3d:73:66:c8:8a:df:3a:9c:1d:da:f3:0e:a2:97:88:4f:9c:
2c:57:18:a0:07:29:f7:6a:73:6f:5a:86:9b:68:83:df:84:a2:
39:48:a9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:02:42 2026 by rpki-client