Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
File: 4auG-AxLsqxW5B7HokauKWnY01g.mft (raw, json)
Hash identifier: PSuV+nI4Y/NXtepX+/eYcXNZSWTVRIDzfNd8NT4P80w=
Subject key identifier: 8A:C8:F2:79:21:C1:16:86:EE:81:1D:DA:43:EE:20:AA:A2:08:D8:7A
Authority key identifier: E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
Certificate issuer: /CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Certificate serial: 01A13ECBD6328434886F366F0B07475E2380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
Manifest number: 0A6E
Signing time: Thu 15 Oct 2026 09:01:48 +0000
Manifest this update: Thu 15 Oct 2026 09:01:48 +0000
Manifest next update: Fri 16 Oct 2026 09:01:48 +0000
Files and hashes: 1: 4auG-AxLsqxW5B7HokauKWnY01g.crl (hash: txIH22ivHevfSy72dxu2oBj9GPqd6oR31PohVJgqz0A=)
2: KNOVXoGQsdCxPsZM3zKJ6uFmptI.roa (hash: UiYbuT4DjmIashb94arKXLuitUGRN2TvoEQlDnO6RSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:d6:32:84:34:88:6f:36:6f:0b:07:47:5e:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Validity
Not Before: Oct 15 09:01:48 2026 GMT
Not After : Oct 16 09:01:48 2026 GMT
Subject: CN=8ac8f27921c11686ee811dda43ee20aaa208d87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f9:00:4c:72:ed:dd:06:83:ad:fb:79:12:e7:
c3:c5:ac:94:bf:f4:83:ba:25:2e:ae:90:9d:ca:dc:
23:d5:fb:f2:79:d9:ae:85:a2:33:50:91:38:ed:cd:
af:be:53:21:f1:72:dd:d3:36:0b:24:e8:11:35:4d:
8c:0e:31:92:9f:49:de:20:4a:55:35:cf:09:0a:b7:
ef:e0:ed:93:4c:75:b9:22:80:76:e8:53:bd:d1:d1:
2b:80:30:b1:d0:8b:9d:0f:dd:d0:b1:c2:5c:cc:bb:
e0:5f:ba:ea:e0:7f:2c:f7:ac:28:87:2f:52:87:d5:
74:bf:88:1c:6f:7e:53:8f:32:54:67:b4:b1:f5:62:
98:00:7c:f0:1e:54:b9:27:f3:25:02:e6:af:1b:c6:
7f:ec:84:5a:4d:c1:81:a7:f1:53:12:7c:0a:d2:8c:
a3:1b:7e:e7:1a:35:78:ba:ca:9b:4b:80:45:45:b2:
a7:22:d4:e2:cc:14:f3:78:34:22:52:1f:b8:4c:33:
06:18:a9:62:8c:eb:26:23:a0:53:a6:ca:2b:2f:00:
f4:23:3e:29:7b:62:27:0e:04:6b:68:9e:37:1e:9f:
81:69:00:47:14:3f:b7:83:aa:0d:c4:17:2d:ff:9a:
f9:65:82:84:1e:07:a5:a8:c1:53:95:37:55:2e:c4:
e7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C8:F2:79:21:C1:16:86:EE:81:1D:DA:43:EE:20:AA:A2:08:D8:7A
X509v3 Authority Key Identifier:
keyid:E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:82:59:ef:9a:36:bf:5a:eb:34:83:ae:66:5f:ca:d8:90:57:
f9:d0:8a:f3:75:24:a5:2c:90:ce:39:54:ac:5d:f7:dd:1f:56:
3a:f3:13:a1:15:cf:a8:bd:21:62:03:9c:74:32:ed:fa:0b:b3:
05:c0:ea:65:59:5c:1e:b1:27:2b:a6:6e:5b:cb:12:66:d1:dc:
84:68:d2:05:b2:21:07:c9:61:6d:01:d8:4d:83:3a:2e:3a:a7:
71:2f:b8:d9:de:8e:e1:30:03:8f:0c:f5:1d:4a:c7:18:fc:46:
3f:ed:92:dc:ef:6d:b5:f9:c0:77:23:93:88:ee:14:2c:73:b8:
f2:89:b4:86:6f:31:da:5e:50:9a:b6:8f:26:31:36:d8:90:05:
57:cf:65:36:a0:54:27:9c:18:d9:5d:4c:ec:8f:d9:75:d8:ee:
0d:c7:77:3b:84:e0:fb:ac:40:87:03:ab:90:af:b9:d7:ae:87:
e1:9a:55:2a:b0:b1:9d:58:99:ff:8a:00:be:16:d4:06:f7:23:
70:44:d1:1a:4b:06:25:65:6e:b4:3c:80:45:0d:ae:72:ba:f4:
cd:a1:df:34:29:3d:0a:f9:97:df:f1:4c:81:db:5b:eb:02:b1:
89:83:3b:4e:c1:fb:ea:2b:68:8a:be:69:b4:7b:47:bf:05:25:
c4:c6:0c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:26:32 2026 by rpki-client