Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
File: 4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft (raw, json)
Hash identifier: wrdWVr5udH54YWTbA7feGMz+KgZdj+pRzsBajuIignE=
Subject key identifier: 2F:B3:91:2A:54:C4:51:9C:51:8B:4A:9F:01:17:E0:03:BB:7F:55:82
Authority key identifier: E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8
Certificate issuer: /CN=e1d15e36cdb388276f04a606b02266260e2a19f8
Certificate serial: 01A08B9F23DA3F319A1646C1DC77C3E90DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
Manifest number: 0329
Signing time: Thu 10 Sep 2026 14:00:57 +0000
Manifest this update: Thu 10 Sep 2026 14:00:57 +0000
Manifest next update: Fri 11 Sep 2026 14:00:57 +0000
Files and hashes: 1: 1-IhTXgGcHna0z1HZ0_9dxgp5QcU.asa (hash: 6m+rYZuTH6ZFe+0jPO7RV/O142SmgbtLoMG4QGsoGg4=)
2: 4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl (hash: DWanGK6D/DMQw9BvMpCMBZJ/h//x9SPniLNm1tWlV74=)
3: Ktt8ktJBB9tg2gRD-ixp-YhTibU.roa (hash: HW7h2XnvN7F3euJL4sahv9OWYDM7sKHWz8LB9hcLvk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:23:da:3f:31:9a:16:46:c1:dc:77:c3:e9:0d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d15e36cdb388276f04a606b02266260e2a19f8
Validity
Not Before: Sep 10 14:00:57 2026 GMT
Not After : Sep 11 14:00:57 2026 GMT
Subject: CN=2fb3912a54c4519c518b4a9f0117e003bb7f5582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:18:14:9a:92:58:aa:f0:41:f8:d0:41:65:
5c:40:59:b3:9a:2a:fc:46:32:63:f7:d0:f8:01:7f:
89:d3:5e:19:bd:e1:51:db:ff:01:7c:b5:50:76:78:
97:13:0c:78:24:10:81:c7:63:63:23:69:b5:6e:bd:
71:ae:52:86:15:01:4a:02:fa:12:ad:b9:9e:8b:9f:
8a:79:4e:97:04:2e:75:66:0e:ae:83:fd:cc:90:bf:
2a:69:38:e6:a1:76:18:d1:05:e8:7f:8c:41:98:50:
c0:8e:44:45:42:aa:a2:b0:92:0a:63:03:a8:69:ee:
d4:72:b8:3e:f9:85:ae:d2:ee:88:31:5e:7a:ee:b4:
8f:8c:03:3a:02:18:04:b9:56:73:d8:38:4e:c1:04:
ec:16:8e:69:f0:1b:05:cb:17:36:f4:a6:f6:32:90:
2f:4e:bc:2a:d1:e4:ab:c6:17:97:85:4e:c5:94:94:
13:8c:c1:da:00:70:e5:18:bb:56:3a:82:c4:31:83:
c6:81:a6:d8:57:ce:c0:15:cb:ca:89:c2:52:6e:10:
28:59:fa:4a:3e:6f:c5:73:a8:22:02:bb:13:b0:b4:
d8:7d:1c:80:7b:69:8a:53:99:4c:0f:35:2a:de:b6:
f4:db:1c:1c:15:f4:b7:75:71:50:34:0a:59:33:c4:
4c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B3:91:2A:54:C4:51:9C:51:8B:4A:9F:01:17:E0:03:BB:7F:55:82
X509v3 Authority Key Identifier:
keyid:E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:eb:44:e0:44:97:ce:55:f1:4f:e2:5d:e3:60:3f:69:8f:99:
d3:61:c6:09:e9:1b:1e:84:02:0a:4e:c1:5d:23:30:d9:19:72:
96:82:86:50:e3:f3:a5:97:6a:4e:30:7b:ac:e2:3f:21:da:f3:
47:92:b6:20:f8:e6:28:e5:01:78:ac:1a:65:fb:2d:0f:72:ea:
68:27:47:9d:a4:2d:37:ba:dd:a3:96:8e:e2:a9:d6:70:b2:94:
d6:a7:be:15:f9:f4:33:6a:99:a3:37:c2:81:f2:d7:05:c2:43:
62:32:6c:58:f4:80:18:87:69:22:99:db:4a:eb:81:f8:76:b7:
e0:f5:4a:ba:a2:d6:02:70:83:c3:3a:44:16:8d:14:73:4e:c0:
ad:16:07:ec:86:a8:a8:cb:63:f9:ed:3a:2a:47:ba:8e:d1:fe:
40:d1:a5:b9:b1:b9:fa:33:d8:9a:a1:60:54:56:33:34:64:46:
a3:5d:a9:2f:bf:dc:91:4d:d5:28:71:64:aa:d3:ae:f2:42:ed:
80:0c:d4:5c:96:c2:27:ea:62:e4:48:b4:ee:70:c7:49:d9:a3:
6f:91:b5:2c:76:4d:66:47:20:46:40:3e:ec:4c:ac:f7:67:11:
63:31:d7:3c:d5:21:3d:31:06:1f:90:4c:7e:6c:b9:3a:72:81:
5b:e9:d0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:18:20 2026 by rpki-client