
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
File: 4hEKzOM6yFARyowi0gAWZuRbk3c.mft (raw, json)
Hash identifier: SWCSMXcd+fpgZpQxYsPQ5ak6UdMZjuXf3vw+SGg1OCI=
Subject key identifier: 7C:9C:31:A7:41:3E:88:4D:AE:1D:63:5C:06:D9:59:13:32:80:EC:CB
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Certificate issuer: /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial: 01A12879FD97F5C0F7C77279B2669E1C1156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
Manifest number: 1AAA
Signing time: Sun 11 Oct 2026 01:00:45 +0000
Manifest this update: Sun 11 Oct 2026 01:00:45 +0000
Manifest next update: Mon 12 Oct 2026 01:00:45 +0000
Files and hashes: 1: 05pxQUZ3O5g7XwtchpzgXkYXLrM.roa (hash: pSBaxXr7aIa0AV76Ml4OFVZIYb8NNW03JRmIFNcA92E=)
2: 4hEKzOM6yFARyowi0gAWZuRbk3c.crl (hash: tbXAN6iHCpinSTtB+QVD7RO1rJUEcMVGeQib5U7S/WU=)
3: 4zc0TbZEkLFIHswzFPhuNpSxjI4.roa (hash: YDxBwpVQ5ct0e9UMy7Eo6tKf/5X6TUwON0SibETkWO4=)
4: 8sE9vfnxVkhmpv_cPv6lSgophbw.roa (hash: pgSz+be35K3IsVHSxBC7rLqa8AF08GPc30TZx1/DC/o=)
5: O6IDrDsGhF1eTbwU9x6NJxs2RFI.roa (hash: pVOrFHAX/Lnb3FuStEB2bMj1QRU4ZVatYcxzuU5OSMo=)
6: QHPyg5iWbWbbW5gr34naY63NDvo.roa (hash: yEtOkw8pnNFWUem/+gYHXLql4MYn18HzTEqZKWbEw9U=)
7: bH0F2mV_dRL1r12H9Kv5329qGfI.roa (hash: zDXdXDEtcJePiYih7GNQU0Vm0lUa6Wpo3l7juYolzJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:79:fd:97:f5:c0:f7:c7:72:79:b2:66:9e:1c:11:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
Validity
Not Before: Oct 11 01:00:45 2026 GMT
Not After : Oct 12 01:00:45 2026 GMT
Subject: CN=7c9c31a7413e884dae1d635c06d959133280eccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8e:32:4d:1c:10:15:b5:fa:9c:4f:e8:83:c5:
4a:e0:82:9f:bd:a7:82:df:d1:c6:a1:5a:0f:cb:8e:
b4:70:ab:9d:11:ec:90:44:c8:10:61:da:15:66:cb:
96:43:19:94:2e:0c:34:86:14:c2:b2:51:c7:bd:cb:
69:ff:5e:91:b9:02:a7:7d:0c:d3:d3:37:c0:5f:45:
bf:de:79:27:8b:59:39:d2:d0:98:9c:c3:02:e3:bb:
3a:24:4b:59:7b:42:f5:5e:b1:2a:59:dc:d2:dc:f2:
5f:c2:24:d9:65:f6:b4:8b:1e:0f:73:87:4d:4a:1d:
06:79:38:8b:9a:90:33:16:45:31:16:c6:34:6e:5b:
1e:46:76:df:52:12:34:74:d7:2c:a4:75:db:7c:d3:
65:82:03:70:62:67:bd:17:f6:50:e0:f3:ad:0f:2a:
e5:92:75:dd:eb:ab:a6:f4:a7:90:eb:86:18:55:58:
3d:bd:43:1a:01:2d:72:6e:13:27:ff:5a:04:02:db:
9f:ee:ef:d9:ce:9b:97:e6:f4:69:98:50:09:e1:94:
66:b9:21:fe:32:90:25:3b:f2:17:05:1c:82:c0:32:
e8:1b:e2:40:51:34:ea:21:18:5b:3a:6e:78:23:4d:
84:f4:e9:e2:be:65:93:0a:b5:b8:bd:05:59:44:c3:
3b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9C:31:A7:41:3E:88:4D:AE:1D:63:5C:06:D9:59:13:32:80:EC:CB
X509v3 Authority Key Identifier:
keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:37:83:74:51:21:6f:a3:d1:78:1e:92:99:b1:dd:1c:27:d1:
45:3e:2a:1b:1c:15:b2:ba:f2:e3:04:fb:80:f2:1b:92:c0:c2:
bb:98:9c:f2:4e:4a:bd:3c:6b:fc:2a:6b:4f:3a:c4:16:b6:8e:
31:21:d1:06:b4:17:83:1d:85:eb:da:f0:f6:3d:c9:da:51:b4:
8e:21:5b:9c:35:cd:57:2a:b4:32:d8:4c:66:e0:f8:5c:5e:0a:
bb:5d:c0:d1:ea:7a:b9:54:01:83:3d:82:87:6d:ba:05:2e:47:
da:3c:37:f4:98:1c:06:b3:5a:3c:2c:d2:5c:95:2a:9e:93:a0:
5c:23:51:68:68:6f:99:70:73:3a:47:76:68:e8:c5:d6:15:40:
c5:86:e1:6a:1e:fd:bc:6d:93:4b:94:6a:80:0c:50:ad:b7:88:
0c:02:86:2c:48:d5:93:28:30:20:c3:6b:33:5c:6d:ea:d7:95:
5f:08:6f:d8:e9:72:43:5b:2f:77:c8:55:2a:fa:3a:75:3d:b6:
51:d4:0d:00:68:1e:6d:25:8e:47:97:98:3e:f1:45:68:6e:15:
0d:ac:6f:7e:8b:1d:0d:b9:26:f0:d1:f4:08:3b:6d:17:a9:c8:
1a:2c:55:ad:ef:16:7c:f8:10:5d:37:94:00:a1:81:28:88:9b:
5a:09:c6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:14:53 2026 by rpki-client