Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
File: 4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft (raw, json)
Hash identifier: WVMDYSEojp3LYyqWx/GqBSnG2kywdCbxSzPrmDMEfUM=
Subject key identifier: 77:16:26:56:84:9A:A6:B3:AC:77:EC:83:7F:24:14:2F:99:8A:78:87
Authority key identifier: E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8
Certificate issuer: /CN=e1d15e36cdb388276f04a606b02266260e2a19f8
Certificate serial: 01A187BFB5C07E1BF782C3E2AB3854E651C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
Manifest number: 03AC
Signing time: Thu 29 Oct 2026 13:00:50 +0000
Manifest this update: Thu 29 Oct 2026 13:00:50 +0000
Manifest next update: Fri 30 Oct 2026 13:00:50 +0000
Files and hashes: 1: 1-IhTXgGcHna0z1HZ0_9dxgp5QcU.asa (hash: 6m+rYZuTH6ZFe+0jPO7RV/O142SmgbtLoMG4QGsoGg4=)
2: 4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl (hash: /eTRJY+3k/0cDQk9PS/oaV2u4U0+MiyW3Qzq/dhIMFI=)
3: YQM4WIIUNaL9-PCZN-_YZ52UVSY.roa (hash: 6uJ//EEMyi6s/7I5zLsMnq2mwES70jTLQRVEP2+rnOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:bf:b5:c0:7e:1b:f7:82:c3:e2:ab:38:54:e6:51:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d15e36cdb388276f04a606b02266260e2a19f8
Validity
Not Before: Oct 29 13:00:50 2026 GMT
Not After : Oct 30 13:00:50 2026 GMT
Subject: CN=77162656849aa6b3ac77ec837f24142f998a7887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cd:67:f9:68:ea:e0:91:b1:6d:b7:59:4c:fc:
fa:49:3b:a5:9f:26:14:52:14:e4:d1:c6:a5:a6:a5:
d2:36:6a:84:cc:cc:a2:e2:56:9c:24:94:fa:a9:51:
bf:58:3f:dc:a1:30:ef:a7:22:8f:87:91:57:27:8c:
97:7b:9b:40:8a:59:11:19:2e:66:6c:dd:b5:19:e2:
1b:d9:78:51:5b:26:cc:c6:e1:83:a9:a9:bf:53:c6:
55:eb:26:a7:a7:87:b4:54:b9:44:b4:9c:86:d8:a4:
89:ec:8f:ea:d3:c5:1b:42:92:87:28:69:e9:a2:ab:
56:10:5c:d3:f6:df:29:bc:25:b8:12:66:92:5c:3d:
60:25:21:e6:8a:c2:84:c3:f5:50:1e:2e:58:cc:cc:
8f:71:34:28:9f:36:1f:0f:fa:59:fe:f5:c8:cb:ee:
25:cb:bb:23:7b:87:9a:d6:61:a8:16:b8:bd:db:48:
93:a5:22:5a:79:73:7d:1f:2c:6e:e1:84:fb:cd:e7:
f2:a6:02:fc:59:ed:25:5b:0e:5c:29:6d:fd:92:2e:
ec:8e:c9:72:a3:50:79:c9:e4:46:7a:4c:ba:ef:3f:
d6:45:cb:da:a3:f0:90:6e:5c:b1:23:6e:6b:61:2d:
ab:f9:65:72:62:73:d3:05:74:67:18:2d:f8:6a:9f:
d3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:16:26:56:84:9A:A6:B3:AC:77:EC:83:7F:24:14:2F:99:8A:78:87
X509v3 Authority Key Identifier:
keyid:E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e3:45:e6:17:ef:2b:06:b4:15:94:e1:ee:dd:70:24:1f:38:
5e:ae:ca:a2:7d:5e:d6:86:91:0f:43:f0:6a:ce:f2:c1:7e:a8:
ee:bc:de:b8:a3:86:bb:f2:11:86:03:18:b7:87:8d:f6:c1:17:
75:3a:e0:06:fe:6c:d5:69:a6:2a:aa:7f:4f:d5:9b:f5:c0:20:
f4:01:3f:fa:42:43:79:c1:21:9d:f6:47:81:58:c2:63:6e:93:
d0:70:52:e5:41:f3:03:7e:36:43:7f:9f:77:24:45:20:0b:fd:
e7:67:36:cb:90:44:72:ed:41:9c:4c:b1:42:97:e0:90:cb:98:
ce:26:4b:59:71:e9:2d:19:35:20:75:b3:a2:d2:e2:5c:28:59:
a3:e7:b2:e7:b4:d7:d3:d6:6c:59:30:42:e6:e5:8c:37:ba:91:
67:7b:1f:33:63:59:3d:65:f2:38:51:d4:33:86:9e:91:66:e6:
45:0b:90:e8:32:b3:41:8a:cb:fe:29:60:aa:71:55:22:83:30:
7d:88:2c:0b:ac:38:44:9e:46:3f:78:f2:e9:fe:0a:06:b8:53:
35:de:c1:8c:2e:56:43:ff:e8:aa:df:18:d8:2e:94:0d:3b:85:
fa:22:60:9d:90:1a:08:ec:31:8b:f1:72:d3:63:a6:50:44:35:
63:80:44:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 16:03:08 2026 by rpki-client