Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
File: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft (raw, json)
Hash identifier: eKQAUso7zk5jQWDLd0J8H343Ehz4LqP/vF6lAO1BTV8=
Subject key identifier: 78:B8:A5:B0:53:D4:52:5D:90:32:63:A8:E3:16:88:00:17:79:41:3D
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Certificate issuer: /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial: 01A13DEF4179959CD4270D5916FDB9F3F5E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
Manifest number: 1AAE
Signing time: Thu 15 Oct 2026 05:00:52 +0000
Manifest this update: Thu 15 Oct 2026 05:00:52 +0000
Manifest next update: Fri 16 Oct 2026 05:00:52 +0000
Files and hashes: 1: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl (hash: 4J4tzr/thhDlb++2S6xHoUvSIGh0CT2FzgaeftOKxcg=)
2: CpV5ifZcjPyGOZZo5Kthc-0aYIE.roa (hash: lgb25S95umOL8YFj63EWLcLTY42lwBMqoGZsvrLzBnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:41:79:95:9c:d4:27:0d:59:16:fd:b9:f3:f5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
Validity
Not Before: Oct 15 05:00:52 2026 GMT
Not After : Oct 16 05:00:52 2026 GMT
Subject: CN=78b8a5b053d4525d903263a8e31688001779413d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f8:06:b0:78:fe:1a:e1:27:04:cf:ac:c2:cd:
e8:4a:fd:ab:9a:f8:d0:f9:1c:d7:89:cf:3f:e9:e9:
af:91:ad:cf:96:8b:ae:e5:98:fe:6a:25:e9:40:77:
9a:9f:bf:77:e9:11:aa:98:77:c2:97:af:d6:71:8d:
a6:31:fa:fb:01:de:a4:ac:d9:ef:3d:f6:42:5c:62:
64:dd:30:bf:45:ce:d2:a0:2d:d3:43:5f:64:c3:0a:
fa:7d:e1:6e:b5:9c:cd:d3:c1:76:6c:f7:e3:a6:65:
90:2a:9a:e1:35:58:11:d0:33:83:e8:c3:11:5c:2a:
55:39:48:11:63:86:1c:2c:60:a5:c2:fc:f8:94:2a:
6a:1d:f6:4d:e7:d5:99:cb:ba:43:ea:3e:c1:67:b8:
b6:a1:67:bc:bf:b0:b5:e5:c3:80:49:da:79:be:38:
57:90:a9:26:7b:9d:0a:a1:6b:6a:27:b7:c6:5f:f5:
bb:74:a8:54:30:36:71:e5:ad:14:6b:08:dd:c4:11:
a9:6f:80:56:75:20:5e:1e:af:e8:b3:14:c6:85:b6:
96:a9:90:08:8e:d2:a0:c9:d8:37:1f:26:cf:45:ab:
f1:15:c1:20:60:a7:dc:98:b5:77:96:79:e1:d2:ff:
2a:6b:18:5c:3e:da:2e:4a:0e:b7:a8:20:57:0d:44:
ac:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B8:A5:B0:53:D4:52:5D:90:32:63:A8:E3:16:88:00:17:79:41:3D
X509v3 Authority Key Identifier:
keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:41:06:3c:97:76:32:93:0d:22:5b:7d:f5:72:5c:27:4c:06:
07:d5:4a:10:13:f0:94:e1:88:ca:81:59:15:e4:aa:bd:40:a9:
e3:73:5c:96:d2:9d:e1:85:a6:82:d5:b8:17:db:32:a4:c2:b7:
ab:00:97:ec:e7:87:54:80:f6:e0:2c:d1:70:25:e5:18:66:fd:
8a:0c:30:32:39:a3:a2:d3:c5:d5:2d:11:c1:25:70:da:a7:20:
26:84:ed:f5:db:13:82:04:ef:6c:ac:f7:70:50:a6:54:ed:05:
d5:a4:02:8c:09:14:29:f7:df:29:de:4d:33:c6:34:61:43:95:
cb:00:e0:5f:ba:f2:04:51:13:92:37:31:a4:52:b9:1e:27:7f:
69:b6:60:c4:a6:10:3c:21:67:b1:f2:11:ae:2c:54:d0:ae:3e:
83:7d:31:aa:cf:88:f2:20:29:f5:f1:aa:13:40:7f:03:52:2c:
b5:01:0e:62:5d:1e:f8:09:3e:66:ca:07:01:e2:77:d0:74:e0:
d8:50:45:87:99:94:5f:a4:6f:6f:06:4d:d0:33:03:79:a5:50:
c7:18:e8:6a:38:91:90:ad:6b:13:6f:92:c3:18:66:d3:53:28:
c7:f9:e1:d7:0a:0b:2f:5c:c7:3b:77:21:64:99:bb:af:55:22:
0a:a6:33:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:21:20 2026 by rpki-client