Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
File: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft (raw, json)
Hash identifier: MBOfUMGbsSlYylIvbpYRNC0fXvAukNtg1GrjUXPbRIY=
Subject key identifier: B8:09:22:9D:FB:E8:50:90:0B:58:4F:78:21:DA:01:8C:5E:AC:DF:56
Authority key identifier: E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA
Certificate issuer: /CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
Certificate serial: 01A130D8DB814C5836B61CD1FDB7FABD25BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
Manifest number: 1A9D
Signing time: Mon 12 Oct 2026 16:01:20 +0000
Manifest this update: Mon 12 Oct 2026 16:01:20 +0000
Manifest next update: Tue 13 Oct 2026 16:01:20 +0000
Files and hashes: 1: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl (hash: XzFRCSN+2i2io9TVR0AHcaLDKcVujIh3BaniW4fsWzE=)
2: vhW7lS-JBYebJEO-U1J2yweu6Yo.roa (hash: hv3bo8RYqKbVjpyma1UuE8rn8DDYyjzn6U1qa0IMKCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:d8:db:81:4c:58:36:b6:1c:d1:fd:b7:fa:bd:25:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
Validity
Not Before: Oct 12 16:01:20 2026 GMT
Not After : Oct 13 16:01:20 2026 GMT
Subject: CN=b809229dfbe850900b584f7821da018c5eacdf56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:2e:6d:be:92:fc:62:a3:64:0b:7a:90:9f:
e3:f8:16:8e:1e:80:c3:69:26:f4:52:b4:11:71:83:
9b:b7:46:a0:ab:6a:6a:dd:a2:2b:9b:b0:b6:cc:1b:
78:db:96:88:a3:1c:ff:2e:cb:c6:6a:5a:a0:35:4b:
b0:fd:d2:df:78:bd:2b:64:8e:3e:ee:7d:0f:79:43:
b2:36:34:00:7b:b4:9c:b1:b6:f2:b3:c5:25:c4:39:
f6:bb:a1:7d:f7:97:4f:f9:1b:31:ae:8f:b1:36:b8:
19:40:34:89:a1:9f:2a:81:e9:8a:16:b0:f7:29:b4:
ef:ae:9a:bc:ce:69:14:a3:5f:98:7e:de:aa:7f:99:
c0:0e:b7:5d:92:57:8e:9a:88:c7:d4:33:c4:50:2c:
00:b3:e2:e5:71:37:cb:a9:dc:da:ec:50:ef:28:7d:
43:90:51:b2:22:3b:8a:a5:54:d0:00:32:cd:93:de:
88:c3:e7:ad:11:ba:03:e4:31:45:2e:d8:02:25:7e:
44:d5:3b:0a:5b:19:90:5d:0f:f6:35:08:2f:1a:5b:
ab:fe:3f:b6:4a:e4:c8:d4:8f:f4:9e:09:82:d7:e4:
ac:0f:37:d6:2d:b1:83:3d:a6:8a:e6:6d:36:da:2f:
fb:d6:9d:9c:75:05:e4:93:2d:d5:02:33:b3:a6:cd:
59:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:09:22:9D:FB:E8:50:90:0B:58:4F:78:21:DA:01:8C:5E:AC:DF:56
X509v3 Authority Key Identifier:
keyid:E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:63:fa:67:a0:f8:18:cd:30:5c:c3:d1:c0:3c:81:f4:79:c5:
05:22:38:1a:db:02:30:7b:38:aa:20:88:3c:53:de:90:80:7b:
48:ab:da:a9:2b:5b:41:bc:b8:89:e1:43:d4:52:ea:ee:97:1e:
51:9b:b6:0e:e1:99:7e:35:22:43:82:56:bd:63:23:0b:00:5c:
32:d4:48:93:87:d3:43:34:ea:7e:2b:47:aa:10:88:c3:01:a0:
a9:41:07:0c:da:56:aa:52:7c:ae:90:bb:97:11:ec:0c:a1:f1:
6a:77:a4:da:9d:b2:78:e6:a7:77:e7:05:4d:a8:4e:8f:2b:5a:
7f:42:78:1f:55:01:45:84:0e:1f:14:18:a9:60:7c:fb:74:3d:
23:26:c9:32:6e:1e:39:9e:9d:07:59:f9:b6:fd:14:4f:c8:f5:
1d:5d:32:50:8b:02:6b:d2:8d:de:ac:c6:2a:9c:c7:3d:0e:2d:
26:a1:16:6b:68:1b:e1:c8:97:30:0c:9b:89:e3:b1:be:92:30:
7f:47:5f:8e:85:20:ce:07:85:aa:85:38:67:87:4d:78:0e:85:
ee:3e:c9:42:48:71:d2:da:1e:7f:5e:ff:ea:d7:98:a9:85:bd:
f9:f0:2a:43:da:c9:fc:a1:65:06:de:d1:f8:21:83:2d:f3:1a:
30:28:65:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:46:00 2026 by rpki-client