Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
File: 4jDeX9PCRVFzumlqmUQdliDYHTg.mft (raw, json)
Hash identifier: wattspKOH215KIFpJBEIcZnyrGVyIEs3aDlXF4MfBG0=
Subject key identifier: 5B:4C:53:CA:92:04:DF:E3:3E:A6:E3:9B:B6:8E:AA:ED:EE:83:EE:48
Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38
Certificate serial: 01A1931F8393F758EFC4F4CDB2B9CA65FB7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
Manifest number: 10E8
Signing time: Sat 31 Oct 2026 18:01:18 +0000
Manifest this update: Sat 31 Oct 2026 18:01:18 +0000
Manifest next update: Sun 01 Nov 2026 18:01:18 +0000
Files and hashes: 1: 28qciXJsiY_HinbmOHfVFSyJkQk.roa (hash: UYVCwyOsNlY276CdR8TOzS4Rj720VMSX5696EeMarho=)
2: 4jDeX9PCRVFzumlqmUQdliDYHTg.crl (hash: HEW8d6CtpriIUFfbke8bTELi5VgqVyWhYOVH1M96KSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:1f:83:93:f7:58:ef:c4:f4:cd:b2:b9:ca:65:fb:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38
Validity
Not Before: Oct 31 18:01:18 2026 GMT
Not After : Nov 1 18:01:18 2026 GMT
Subject: CN=5b4c53ca9204dfe33ea6e39bb68eaaedee83ee48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:16:a9:3d:b7:ac:6c:aa:4c:b9:62:2e:2a:e9:
41:6b:60:94:86:9b:b2:d8:10:ad:17:ba:99:67:ea:
41:5d:aa:c8:9b:a6:02:63:11:40:4a:21:2a:fd:65:
6a:97:ab:1c:8f:8d:53:55:1b:7c:9a:13:d8:18:16:
d6:a5:55:fc:7f:8e:b7:35:35:74:5f:ae:cb:3c:79:
cb:e4:39:0b:8f:35:87:85:8b:37:dd:55:92:14:92:
d8:4d:8d:d1:32:94:76:f8:ba:3f:f3:c0:33:62:64:
a2:3e:1d:77:21:31:25:9f:99:0b:fb:4e:65:c8:75:
97:5f:ba:f5:6a:de:f1:6e:b4:e6:48:a6:2f:6b:42:
9e:21:71:30:12:ff:0d:74:35:29:90:65:33:9b:8d:
c9:b8:3e:38:c5:40:b7:e6:0d:dc:5e:ae:11:b1:cc:
e3:a7:c2:04:3b:91:3f:1c:ab:ce:23:64:d0:9f:f9:
33:97:f7:e6:fb:43:f4:29:68:b9:46:d6:51:73:6c:
24:9a:14:da:d7:20:78:8c:23:91:87:4a:f7:ea:b7:
4a:f0:bb:fd:d8:82:32:4d:6e:2a:29:07:65:48:1d:
58:76:7b:ed:e8:e2:15:e4:ef:4c:22:69:42:7c:47:
05:0c:66:89:62:86:01:e2:92:a6:f5:60:da:f0:aa:
c2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4C:53:CA:92:04:DF:E3:3E:A6:E3:9B:B6:8E:AA:ED:EE:83:EE:48
X509v3 Authority Key Identifier:
keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:43:de:9d:4e:ad:9e:2d:f6:cb:3b:54:c7:ab:18:2c:77:2c:
a5:f4:e4:4b:a9:11:f1:92:8c:5b:91:72:a7:54:36:fa:5a:e2:
5f:39:20:d3:2b:1a:f1:3d:da:8b:24:72:52:c5:65:23:61:bb:
fc:82:0e:ac:73:98:25:43:22:78:ce:1d:c5:3e:de:0d:0a:15:
e8:ac:1c:5a:bd:02:14:76:fe:6a:c1:90:32:f9:9e:89:b9:27:
dc:76:51:f1:1f:b0:f0:55:e5:da:92:3e:98:2e:94:65:d8:0c:
d9:a2:7e:e6:58:49:70:08:0d:c0:17:c3:e3:3d:84:b9:a8:fa:
e2:52:de:84:e2:15:01:07:8d:47:2c:90:70:b8:21:a5:37:43:
45:f8:b6:a0:78:dc:29:46:5c:6b:9d:9b:16:89:b1:2f:ca:b1:
63:71:fd:96:07:32:01:dc:6d:07:b9:ed:e7:c1:3f:e9:33:41:
63:aa:06:8b:62:7c:62:e5:19:e9:f1:05:04:5a:3e:e0:b1:5e:
b2:39:a2:ae:ae:79:61:2c:62:1a:bb:d7:80:37:74:c1:88:0f:
6a:19:59:11:46:3a:db:54:1c:8c:f3:f7:01:40:f6:d7:a8:32:
d8:bf:71:14:13:56:1f:22:80:39:c4:4d:15:8e:bd:1d:f0:72:
b8:66:f7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:22:05 2026 by rpki-client