Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json)
Hash identifier: SxQlIDzPSrl6/IZ+WiR3w9cbcUEIjjZpVPgq6yhi4p0=
Subject key identifier: 6C:25:0E:2B:A5:12:57:E9:69:F3:A9:D5:DF:3D:B4:30:84:1C:26:DE
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 01A178BA3258D26A7447B6F29EBF85E0BA8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
Manifest number: 0B29
Signing time: Mon 26 Oct 2026 15:00:30 +0000
Manifest this update: Mon 26 Oct 2026 15:00:30 +0000
Manifest next update: Tue 27 Oct 2026 15:00:30 +0000
Files and hashes: 1: 1FYfIdL8zbkSOUaiU4Dqwqal0zE.roa (hash: /XeBvwgyOqHyg56chvGRDFMd+7ExlJpVYmiAYZyhDGM=)
2: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: wEDAkFP9bhl2ZrtxCLLKiqtbII2LodNyKY92v1rv5Hs=)
3: cgkSjyInxeBAfsrMtADKQej1dQA.roa (hash: NJBBWIxm8P9FWZLPw5DFC5dmcCI2sjb8UDnkU7sydo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:ba:32:58:d2:6a:74:47:b6:f2:9e:bf:85:e0:ba:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: Oct 26 15:00:30 2026 GMT
Not After : Oct 27 15:00:30 2026 GMT
Subject: CN=6c250e2ba51257e969f3a9d5df3db430841c26de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:c9:db:5a:83:88:2b:6c:f7:d8:a9:a1:a7:
32:6c:6e:c5:80:d2:35:f7:4b:7c:3c:21:d4:d9:24:
fd:8f:68:bb:48:80:bf:c0:9a:d3:93:a2:3e:cb:e7:
1e:1f:99:9f:8a:2e:b8:e4:71:ff:00:49:6e:82:ca:
bc:19:42:09:ac:bb:34:2c:ff:52:76:ef:33:c0:3b:
c3:8a:24:14:7a:ff:21:30:67:74:11:e1:e6:e9:d4:
fa:29:17:82:f0:2f:c2:8a:88:18:22:d0:e0:57:50:
ec:cf:22:fb:e8:28:35:5e:21:f1:9b:fc:a7:ca:aa:
a7:6f:91:29:84:ed:66:e5:e0:40:a8:83:ff:65:27:
90:52:ac:84:3c:6f:aa:69:a4:f1:50:a4:a4:54:2b:
fe:51:fb:9c:3d:8c:4e:86:a3:3b:4c:4e:9c:07:b5:
17:98:66:fb:1a:b6:52:56:26:2a:4e:03:e3:88:41:
4d:13:ea:8f:05:ea:14:93:a6:a6:39:64:25:7a:93:
50:24:44:46:6e:cf:48:0b:ba:c9:08:08:58:c9:6f:
c5:df:0c:af:67:fe:19:6c:b8:4d:69:60:0b:ed:4f:
d5:16:7f:a2:5b:b0:ff:c0:4d:a4:8f:d5:e6:0e:6a:
4d:c2:94:dd:d0:6f:dd:da:b0:16:0c:9a:8f:89:fa:
ce:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:25:0E:2B:A5:12:57:E9:69:F3:A9:D5:DF:3D:B4:30:84:1C:26:DE
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:45:e1:72:e7:1e:46:8d:eb:5e:fd:38:90:0f:2d:5f:4c:4d:
d6:79:08:7b:29:f9:f6:2f:d6:d4:7e:6f:ae:80:dc:d3:3e:94:
8d:30:5e:77:68:a7:71:f5:c8:c3:d5:a6:79:e9:4c:2a:6c:49:
5a:b0:43:ad:5f:a2:7c:8a:57:8b:5f:96:11:e9:e2:60:60:9f:
1d:d6:0a:1e:3b:0e:3f:45:d6:b3:f0:32:b0:22:06:37:00:1a:
3a:c2:82:48:58:ac:62:43:a9:1a:bd:b2:62:65:dd:86:2c:9f:
af:fa:66:ec:0e:e1:6a:9f:72:30:58:dc:ff:2c:a1:e6:30:4b:
a7:a7:11:81:e4:d6:e5:6d:71:15:2e:9c:3a:14:8e:ce:d1:94:
b2:1e:d0:44:65:fd:91:6a:f1:17:97:f1:fd:49:66:60:89:92:
28:72:92:fc:ef:11:97:ff:a2:ef:3b:1a:9d:90:44:97:a8:4c:
9d:00:dc:86:c9:20:0c:09:ca:dd:64:ec:da:71:79:ab:bd:4e:
fd:2c:70:35:ce:ad:69:54:cb:00:28:7f:a2:cf:49:b3:b2:07:
79:18:cf:08:bc:02:ba:b6:5d:7d:71:72:4b:79:93:e9:f2:74:
97:ab:df:80:3a:4e:71:10:69:8b:44:0d:41:fb:0d:a0:e4:a2:
5d:d4:ee:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:35:43 2026 by rpki-client