Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
File: 4fP23EYQ9sm7qkUyERc45JO2rfA.mft (raw, json)
Hash identifier: Jxc3cmRwguTWEmPdER+n0u5phSV26ZJqMwReW2Hd5xc=
Subject key identifier: 71:1B:B4:FA:5E:61:07:3B:FF:27:9F:FA:4F:1F:A9:81:79:BF:EF:F1
Authority key identifier: E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
Certificate issuer: /CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Certificate serial: 01A13D80F693CDA0CB73697B4D7BE5F272D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
Manifest number: 08A6
Signing time: Thu 15 Oct 2026 03:00:24 +0000
Manifest this update: Thu 15 Oct 2026 03:00:24 +0000
Manifest next update: Fri 16 Oct 2026 03:00:24 +0000
Files and hashes: 1: 4fP23EYQ9sm7qkUyERc45JO2rfA.crl (hash: kURIMuwpKMeQVZZLgrW3kmpHMgwZqog0t0YnU0rEqbQ=)
2: Ev9DIl3UcKO2QOG-vO3Xbh6afQ8.roa (hash: imyx+MqhErllzPgURUbLOjPqBlQ0hxwFitun79GI6bQ=)
3: pIH-PyJ-S7KYRBMhx3HzyVyBgpM.roa (hash: 1cLs+Wdw+wnP8h4XUUBLHG3PCH085TENzzZDNYgitoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:80:f6:93:cd:a0:cb:73:69:7b:4d:7b:e5:f2:72:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Validity
Not Before: Oct 15 03:00:24 2026 GMT
Not After : Oct 16 03:00:24 2026 GMT
Subject: CN=711bb4fa5e61073bff279ffa4f1fa98179bfeff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:cc:de:17:a5:72:4e:5b:38:4a:43:d8:d6:
5f:b7:2b:9d:3f:c6:81:6b:a2:75:a6:59:27:bd:69:
c3:94:00:ef:66:06:6c:e2:31:fe:55:5d:73:20:27:
5b:c4:17:b4:e9:46:49:87:cd:7f:79:2e:62:1e:32:
61:3c:1b:55:20:d0:0c:36:24:d1:c1:5f:2c:e0:cb:
95:c6:bc:11:6b:79:9e:a0:94:a8:ee:1c:4f:b8:58:
3b:8b:2d:5e:9d:28:fa:a3:09:1f:e2:ce:46:20:9f:
bb:49:03:26:fe:bd:0f:0a:d5:a0:04:0d:4e:c0:fb:
59:ca:45:a2:b1:84:06:f5:6c:e7:ec:d6:cd:0e:1d:
2d:44:54:ed:a9:84:90:ae:bb:22:16:eb:10:98:92:
5a:9f:f2:4f:91:d0:59:60:f6:f5:a8:94:df:2f:a9:
6e:01:40:98:4f:25:3d:50:40:2b:25:3a:b8:11:c8:
58:0c:38:bf:b5:2c:fb:12:92:d5:84:e3:da:79:84:
47:f0:fd:e3:5c:7c:f4:84:b4:45:58:27:d9:ee:b1:
48:99:c7:e4:52:0b:77:ca:17:2c:69:17:07:ba:e6:
49:d2:b6:16:4b:82:4e:d8:27:e4:08:ba:2e:0b:f3:
0f:0d:5a:43:35:bf:43:58:19:d0:7e:39:45:42:fe:
13:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1B:B4:FA:5E:61:07:3B:FF:27:9F:FA:4F:1F:A9:81:79:BF:EF:F1
X509v3 Authority Key Identifier:
keyid:E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b8:c5:c1:f7:eb:a2:48:5e:e4:66:fc:4d:c9:24:d0:5c:b0:
e3:45:4a:ac:0b:f6:83:34:49:e2:53:8a:ea:28:9c:f9:d4:7a:
c7:ac:fc:e7:43:61:db:48:19:3f:68:c4:ec:b5:80:7b:5c:36:
33:e5:b7:d3:e8:b4:f6:07:98:c7:71:e0:5e:f5:f9:85:e5:3b:
26:4f:39:70:c0:b1:50:6a:b6:56:ba:be:0f:d4:bd:21:de:45:
e7:61:d2:4e:6c:fd:bf:51:d1:62:2e:33:2d:6e:c5:a0:ec:a3:
e7:b6:2c:c8:9d:17:48:5d:f6:35:7d:fa:b3:ed:1c:97:4c:57:
8e:18:2f:c0:3c:5d:34:3a:77:d4:63:07:26:2a:a4:5c:6e:aa:
9e:18:e1:67:7f:26:6f:fa:c8:c3:b3:59:9b:34:ba:cd:f6:ec:
26:62:87:57:18:62:79:bc:c6:28:0a:30:b7:29:b7:88:f3:bf:
8c:83:63:ed:14:36:e9:ae:ec:06:cd:d9:c0:11:83:2a:4d:8f:
be:06:dc:fa:cd:5e:70:89:4c:61:1b:5e:8c:d0:0e:be:a1:ad:
20:24:bb:c5:bd:48:91:67:e9:a7:41:51:4c:c5:d9:ff:da:1f:
c4:ce:54:60:b2:04:dc:86:6b:16:e9:e7:46:a5:ee:7e:44:4a:
be:df:3b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:21:01 2026 by rpki-client