Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
File: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft (raw, json)
Hash identifier: QZD+jMSL9Dw/qrfANNhCvvoRsu+7T9l9EtjzfF0Ny8k=
Subject key identifier: 48:7A:B4:34:12:35:85:45:1E:79:B4:08:18:F2:B7:F2:1B:C6:BA:89
Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
Certificate issuer: /CN=e214eb35a35fd488860703b7990b8170af17912f
Certificate serial: 01A13F0299A51C31F273760DB696062E9FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
Manifest number: 0CE3
Signing time: Thu 15 Oct 2026 10:01:37 +0000
Manifest this update: Thu 15 Oct 2026 10:01:37 +0000
Manifest next update: Fri 16 Oct 2026 10:01:37 +0000
Files and hashes: 1: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl (hash: 02I7YxP93T/sU/dGUaHBjlUf8CLsH7g1HuFiXBDnd5M=)
2: OPFTuLGWkU6mUdnCpgOtMP0wcEc.roa (hash: mYTV++dJNwiiA96b08GGaua3APnQu69gvPcnLc6GiRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:99:a5:1c:31:f2:73:76:0d:b6:96:06:2e:9f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f
Validity
Not Before: Oct 15 10:01:37 2026 GMT
Not After : Oct 16 10:01:37 2026 GMT
Subject: CN=487ab434123585451e79b40818f2b7f21bc6ba89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:e4:07:f4:8c:bd:13:06:4b:7a:2c:db:a4:
19:d8:8e:01:87:21:57:5f:ce:6d:d3:7d:94:6c:7e:
69:80:a1:78:31:c1:e6:7a:b4:bf:4f:10:8e:58:ba:
fa:59:75:79:f4:59:d3:c5:a1:29:83:0b:f5:e4:1c:
ba:82:fa:05:32:b6:5e:27:8b:7e:ba:95:63:50:c8:
a1:21:1d:15:95:80:d1:24:17:ba:ca:4e:48:a3:66:
58:bf:75:bc:cb:99:68:65:dc:ae:00:b8:a7:0f:21:
b7:19:57:78:8b:f0:64:88:5f:cb:e5:42:e7:30:08:
de:5d:b3:e6:7e:82:8a:50:27:ac:25:50:ad:b7:2a:
d2:77:d2:bf:58:45:ac:7a:db:46:24:2d:21:1f:21:
3f:87:53:d2:f1:06:80:b4:3c:e7:04:1e:70:2d:7e:
1b:76:bb:97:2b:aa:d6:a2:09:2a:4e:97:94:c3:7d:
82:ba:95:d4:05:52:02:b9:6b:5f:8d:bf:9f:0b:4e:
ea:96:d0:d0:74:dd:af:96:4c:59:28:23:f0:05:39:
9a:33:03:dc:22:e8:e4:5b:99:0e:79:0c:4f:d0:92:
49:96:fe:59:e0:9b:44:81:9b:ef:7b:b7:39:0e:5a:
e9:62:97:96:36:18:7b:2e:d1:d3:1e:75:17:e7:ec:
8b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7A:B4:34:12:35:85:45:1E:79:B4:08:18:F2:B7:F2:1B:C6:BA:89
X509v3 Authority Key Identifier:
keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:cd:b6:18:5b:c5:f6:f0:eb:85:70:df:51:5a:a7:a5:6b:52:
5c:de:a6:dd:e0:d0:32:1e:e2:c9:ee:5e:b7:1d:b4:48:78:8b:
81:c7:a8:31:6c:ae:43:7c:de:bc:53:93:05:22:27:f5:17:6d:
aa:b5:93:4d:fa:4b:27:3c:04:5c:0b:b8:22:e7:57:69:ee:38:
ad:82:67:23:ea:6c:44:05:be:95:5e:b9:ce:b1:a7:83:9e:7d:
6b:88:5c:5f:fa:cf:01:4b:a5:89:28:dd:4d:d4:dc:58:4e:52:
e1:3b:1c:55:4b:c3:13:73:7c:0d:35:c1:5d:05:fd:61:85:fc:
cb:c5:ec:33:d4:e2:e0:f5:f3:24:d1:5d:e3:cb:96:c0:38:83:
6d:fc:80:51:11:51:5f:8c:0a:82:3b:c2:df:6b:07:f9:5c:ff:
c6:7f:39:11:cd:ff:5f:98:58:20:21:00:65:c1:b0:4e:41:2e:
32:53:94:20:9f:88:ee:37:3b:f8:eb:36:dc:fa:23:df:49:70:
e3:a4:a8:c8:52:7e:da:a4:7d:25:16:6b:58:88:45:6a:17:9c:
43:a4:30:76:8d:e3:54:ce:1b:8c:e0:46:5c:22:73:b0:19:da:
8e:91:b6:69:21:bb:23:cb:3b:be:70:bf:55:8e:c0:a9:15:43:
ae:9b:3b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:39:14 2026 by rpki-client