Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier: 1fx5fsnv5xCAu0tQQ9AHmWxW0WWlZ0i1oBACdKDiguw=
Subject key identifier: 46:11:8C:A9:58:A1:23:BA:63:67:2D:35:DF:3C:78:40:CE:12:D4:95
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 01A0013826AB598F79E56FB6C1F1CC9CE363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number: 1712
Signing time: Fri 14 Aug 2026 17:00:52 +0000
Manifest this update: Fri 14 Aug 2026 17:00:52 +0000
Manifest next update: Sat 15 Aug 2026 17:00:52 +0000
Files and hashes: 1: 1eykC-2BnVsWo7Ye-BCUzkQkUoQ.roa (hash: XORzzia+v0TQle6S3eSeTmbfXijHFXJwl9VwUUmAcRw=)
2: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: jPynSVOGbbj+o/6AmRlxQw8svX56YOMMi7Hf3t0VzMA=)
3: NJ7RBZaPFrtdiuUdVgaQ-xGvohc.roa (hash: 3elpIcyAaRbsEU++I8EIRcmrePMiDX7Ycf8Xs+7sNy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:26:ab:59:8f:79:e5:6f:b6:c1:f1:cc:9c:e3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: Aug 14 17:00:52 2026 GMT
Not After : Aug 15 17:00:52 2026 GMT
Subject: CN=46118ca958a123ba63672d35df3c7840ce12d495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:ab:d0:b1:58:47:79:2e:77:fb:57:a8:dd:
f8:f1:d5:2d:f7:e9:4d:86:0b:2e:a8:f8:b6:2c:0d:
09:db:94:52:99:bb:ba:ff:84:50:73:4c:84:04:b4:
21:18:6f:86:1c:cb:e9:f1:6b:f6:46:01:5c:64:a6:
e7:47:24:78:5a:fd:4d:8e:36:ae:7e:de:b5:bd:4a:
c4:f8:b6:46:55:b5:38:cc:99:04:75:f8:75:6e:a9:
7b:58:4b:f7:4d:71:a3:97:a3:1a:67:cc:c9:64:8e:
57:d2:00:e4:dd:f2:a5:e0:9e:6d:58:b8:a8:13:8d:
29:2e:77:6a:45:43:2a:0d:57:81:ca:b1:37:10:e2:
46:0b:f5:a3:54:9c:59:c7:a9:59:60:ec:47:f2:93:
11:ff:67:1d:52:af:b2:eb:db:d5:58:5d:57:61:7b:
33:1b:b1:7b:4e:7b:9a:3d:78:63:35:d3:59:3d:de:
41:c3:d3:d6:72:eb:28:6f:42:a7:dd:98:d0:39:f0:
f1:03:64:24:b8:b8:e5:fd:c8:b5:0d:3b:97:84:f6:
3b:3e:26:c1:07:0f:3e:38:01:d6:9e:42:c5:86:db:
28:fa:31:0b:b8:95:88:b2:8f:64:42:02:21:f8:cf:
d7:3d:f0:5d:a7:19:80:fb:9e:e6:02:4a:ab:aa:08:
d5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:11:8C:A9:58:A1:23:BA:63:67:2D:35:DF:3C:78:40:CE:12:D4:95
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:71:b5:1d:40:3c:b4:f5:7f:0b:4a:62:5b:d5:1e:2f:40:06:
c3:c0:10:47:ec:25:9f:0f:8b:a5:71:06:a8:7e:44:19:a8:f5:
35:d9:e0:15:42:41:97:2d:73:8b:fd:a8:ea:27:1b:67:ae:7b:
92:5a:b1:1c:5c:bb:f8:3c:4d:c5:41:bf:b5:a2:d5:64:d2:21:
be:41:bc:d5:07:85:a7:93:30:b4:5e:52:fa:a1:22:4b:e8:72:
f8:04:48:a7:01:70:0b:27:69:cd:1e:fc:59:ef:23:50:f9:26:
12:55:11:93:69:ef:1b:c5:e0:d1:fd:4d:07:14:dd:7f:12:a1:
f8:02:d0:31:50:f1:c7:cd:13:c1:b7:2c:16:3f:6a:a9:69:f1:
5d:1d:46:b1:4b:b7:26:3e:80:a9:bb:dd:a3:34:c6:40:00:46:
8c:c2:18:6c:fb:af:5b:f8:d0:78:00:ef:46:e3:80:f4:b1:5b:
2f:65:75:f0:99:df:ff:a2:10:e5:5d:a0:7c:e7:4b:ad:1d:83:
45:ce:e1:75:a6:bf:04:b4:ac:b1:14:cf:78:d0:45:c4:0f:33:
1c:be:06:14:55:40:e7:6b:cf:9f:cf:92:17:4b:cb:36:e0:e5:
92:c7:26:6e:d7:5b:c2:2c:70:95:6e:79:3a:4e:47:62:b1:7d:
0c:9e:7d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:49 2026 by rpki-client