
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
File: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft (raw, json)
Hash identifier: bdeMom4viBWKN13KuVupxgQZNPQDWKHzb7buDXOvKwA=
Subject key identifier: F5:A2:26:35:4E:37:BC:1E:4B:B7:6C:E9:C3:FF:6D:91:CA:FE:74:D3
Authority key identifier: E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
Certificate issuer: /CN=e08945d1fc7b470e6873655f7559300e097a65e8
Certificate serial: 01A0C22017B8832525C949F4C76A458B2A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 04:01:18 +0000
Manifest this update: Mon 21 Sep 2026 04:01:18 +0000
Manifest next update: Tue 22 Sep 2026 04:01:18 +0000
Files and hashes: 1: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl (hash: arg/u+3GEcIBO0sUykZNwf/0mOB5aZf4ANj+btk3gW4=)
2: Tixj9aaXyoxnN9Im74ziDdIZ_Zo.roa (hash: a1BJKfn6mW/dx8FDsu8a6wmd/TNTkHkzXAOJRfIddFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:20:17:b8:83:25:25:c9:49:f4:c7:6a:45:8b:2a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08945d1fc7b470e6873655f7559300e097a65e8
Validity
Not Before: Sep 21 04:01:18 2026 GMT
Not After : Sep 22 04:01:18 2026 GMT
Subject: CN=f5a226354e37bc1e4bb76ce9c3ff6d91cafe74d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b9:9a:c4:67:e4:22:90:66:9f:32:82:51:99:
ac:9e:79:57:df:16:dd:07:e1:b3:df:07:f5:4c:6a:
fb:a7:16:4d:0f:9b:11:0b:dc:e5:16:69:fb:8d:e6:
07:e4:30:ce:80:16:86:73:5e:bc:55:16:e4:8d:5f:
b5:c5:f3:7a:ac:4a:91:a3:ac:88:70:f2:a0:f9:15:
60:45:89:d3:6d:64:1e:63:62:47:38:ba:84:ff:3e:
8d:49:30:da:4b:70:52:e0:cb:3d:11:b8:4d:89:df:
b0:52:5b:a9:2e:c5:83:34:ad:aa:f8:4e:8f:bd:33:
48:ee:91:a6:a9:50:c4:fa:b6:04:fd:70:0b:2f:a9:
62:d9:c8:74:29:91:3c:8f:e1:76:0d:97:1f:d1:ae:
88:33:34:e7:27:eb:c0:90:fd:ab:2b:30:bb:a4:28:
2f:d6:6a:55:97:5a:67:66:0a:8d:68:ff:15:45:95:
b4:dc:7c:df:f9:e8:86:22:e2:6c:0c:17:f8:4f:5d:
0f:76:7b:7d:d7:dc:ea:d7:f0:e9:53:13:47:d1:2e:
2d:e1:f9:e2:96:e7:64:54:4f:94:8e:55:b1:5c:46:
f3:89:f2:1e:72:61:8d:7f:7f:1d:66:09:1b:dc:dc:
28:79:c6:99:3a:4b:16:68:13:e6:83:5f:67:47:d6:
b7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A2:26:35:4E:37:BC:1E:4B:B7:6C:E9:C3:FF:6D:91:CA:FE:74:D3
X509v3 Authority Key Identifier:
keyid:E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a1:ed:6b:ba:45:ff:36:de:95:b7:31:b6:83:5f:88:66:93:
06:ae:7c:22:b4:f0:72:f6:46:67:05:7c:c6:f4:86:4c:46:8c:
ba:19:c3:2b:0c:01:ea:a1:b0:24:f8:82:56:14:a6:f0:92:e5:
da:d2:f6:84:96:e1:7d:bb:02:85:8b:f1:47:45:3c:33:54:ae:
79:89:9f:48:50:54:40:02:1c:46:4a:da:c1:f0:85:8c:ea:ae:
79:e5:ee:b1:0b:a7:ba:83:53:72:a2:a2:8f:de:a7:dc:7c:82:
2f:2c:7b:c0:1e:0d:85:2f:36:00:87:79:96:b4:bd:a6:6c:6d:
e8:a7:f6:95:4d:84:8f:5d:48:97:b2:95:73:7a:2e:e3:01:72:
62:a8:c5:36:72:0a:4f:1c:78:1f:1b:ff:fe:2a:f5:48:10:49:
7a:9d:a6:13:3a:73:c8:a6:ba:af:d5:86:a7:f2:81:86:10:7c:
b5:e9:da:de:48:03:a2:8a:40:f2:3b:c7:41:30:51:90:69:02:
73:b9:17:54:de:e6:6a:c1:4b:18:26:89:8c:23:7b:92:dc:b1:
af:c2:c2:d7:26:7e:43:1e:98:a0:de:f3:53:ef:17:3c:57:b6:
38:fe:a2:4f:7a:23:2d:69:63:0b:56:12:29:75:fe:bb:93:8c:
14:92:c4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:05:14 2026 by rpki-client