Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/4jBenNZCPdAyhv7s9V25OwYoL_E.mft
File: 4jBenNZCPdAyhv7s9V25OwYoL_E.mft (raw, json)
Hash identifier: 6oiVbwUUHAFGWzKjqSGs90ta/1grHSFuECv/7fEWSHs=
Subject key identifier: DE:2D:BF:94:D8:91:A2:55:AF:2B:33:CF:6C:80:62:32:04:30:62:4B
Authority key identifier: E2:30:5E:9C:D6:42:3D:D0:32:86:FE:EC:F5:5D:B9:3B:06:28:2F:F1
Certificate issuer: /CN=e2305e9cd6423dd03286feecf55db93b06282ff1
Certificate serial: 01A0DF865F90C775CB5D5D34D2E922FF7C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jBenNZCPdAyhv7s9V25OwYoL_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/4jBenNZCPdAyhv7s9V25OwYoL_E.mft
Manifest number: ED
Signing time: Sat 26 Sep 2026 21:02:00 +0000
Manifest this update: Sat 26 Sep 2026 21:02:00 +0000
Manifest next update: Sun 27 Sep 2026 21:02:00 +0000
Files and hashes: 1: 4jBenNZCPdAyhv7s9V25OwYoL_E.crl (hash: j1fp4znyjRC1clKOTVGpzP1O9R0lmWLQ17EP5LXsjlE=)
2: LVdIDfbMJKbERE5iYpHj8ZRNKUA.roa (hash: dWz7dfTbtMU4DCAgJCXkJIju9IrVB5fnVpUt4hweyxU=)
3: euykv0FyncRwBQFkywZp-52bpgQ.roa (hash: ZOJbGj8NVyHjzXHRINSmo5KX6o2s1DTTLNtkxOa4CQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/4jBenNZCPdAyhv7s9V25OwYoL_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/4jBenNZCPdAyhv7s9V25OwYoL_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jBenNZCPdAyhv7s9V25OwYoL_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:86:5f:90:c7:75:cb:5d:5d:34:d2:e9:22:ff:7c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2305e9cd6423dd03286feecf55db93b06282ff1
Validity
Not Before: Sep 26 21:02:00 2026 GMT
Not After : Sep 27 21:02:00 2026 GMT
Subject: CN=de2dbf94d891a255af2b33cf6c8062320430624b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3f:17:78:c2:eb:4b:5e:d6:fa:4d:09:d6:89:
b5:27:8b:7b:bc:7e:42:0f:de:54:fe:35:2c:50:3c:
5a:8b:f2:65:6e:da:fc:a2:5a:ef:7c:87:20:ca:a1:
4c:ab:4e:66:ed:78:af:df:21:0b:44:3e:c2:5c:23:
bb:8c:00:45:cd:3f:27:78:81:5e:7d:9a:2e:06:b0:
66:77:07:3b:15:8d:3f:36:b7:69:87:69:5d:01:af:
54:5f:a2:8a:02:3a:34:34:03:4a:5d:f6:c6:17:28:
e7:a8:73:1e:9b:3a:f5:72:69:ce:f4:ed:3c:f1:1d:
94:40:f4:00:5c:32:14:37:c3:37:f5:1c:8d:d6:75:
38:7b:bd:30:06:ab:57:a3:1e:b8:7e:34:52:27:e0:
47:11:6f:b9:f2:65:b4:4e:5c:f2:b7:b1:6d:78:0d:
98:ea:12:89:90:9b:b5:8b:49:23:dd:07:d6:c4:1e:
7c:8d:59:59:d0:8d:17:39:97:6e:64:15:df:ac:fb:
9a:bf:e0:3d:84:73:d6:da:77:8f:29:d5:ec:c1:81:
d0:d4:81:97:48:ed:01:44:63:19:4b:db:cd:31:ea:
ac:b5:9f:fd:97:c2:03:01:03:6c:dd:d5:de:d8:3b:
d7:a8:41:de:ca:1d:bd:0c:17:d4:b3:d0:bf:00:02:
ca:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2D:BF:94:D8:91:A2:55:AF:2B:33:CF:6C:80:62:32:04:30:62:4B
X509v3 Authority Key Identifier:
keyid:E2:30:5E:9C:D6:42:3D:D0:32:86:FE:EC:F5:5D:B9:3B:06:28:2F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jBenNZCPdAyhv7s9V25OwYoL_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/4jBenNZCPdAyhv7s9V25OwYoL_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/4jBenNZCPdAyhv7s9V25OwYoL_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:6d:a9:f2:52:4a:df:af:18:a8:43:59:3d:e5:c4:5f:5d:a0:
3e:b8:9a:6c:4c:77:3e:fe:63:50:16:8f:44:d9:64:28:19:da:
d3:67:ef:32:7d:bc:0a:dd:13:55:a2:0b:da:80:5e:f5:81:d3:
7c:99:6f:58:5c:6b:20:ff:15:57:ef:4f:ae:bf:0c:81:84:90:
cf:6d:2b:eb:a7:dd:2e:cb:d8:2a:fb:bd:2e:30:61:44:88:dd:
7c:f5:f6:8c:fa:ab:ef:9a:63:5e:61:7d:b1:b7:e8:db:27:01:
ca:da:29:ae:82:1a:da:ea:d6:12:18:ea:00:90:26:7f:9b:44:
a3:8f:0c:91:9d:ce:e2:75:6e:ef:14:64:fb:55:ab:c5:0f:3f:
ab:13:f2:ec:6a:63:07:3e:ce:62:4a:c8:c3:00:d4:d9:49:cb:
0c:03:e4:f5:5d:fa:59:24:a6:83:e8:a1:e1:58:50:0b:df:1d:
4e:6e:fc:a2:16:61:8b:38:46:9d:4a:13:3a:7f:dd:49:b2:88:
16:1d:a4:ed:a5:d9:09:b6:10:5f:7f:5e:92:7b:9c:4c:c8:43:
5b:84:a3:b0:92:1a:6e:d1:df:b9:dc:58:24:55:39:fe:c4:f0:
69:6d:68:35:b9:89:22:9e:3d:2d:cc:4f:11:ec:8d:a3:d9:79:
8f:62:0a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:59:42 2026 by rpki-client