Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
File: 4mthhRZS_I_twBGm8i966ba-sKM.mft (raw, json)
Hash identifier: YdcYfehQ8wHNsHf34NzgMUrsuv/7NryadzfzyqZ1TQI=
Subject key identifier: 0F:7D:C2:0A:54:60:D7:B8:4C:AE:D8:5B:87:61:4A:3F:F2:04:29:B8
Authority key identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
Certificate issuer: /CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Certificate serial: 01A000CA89B18E20199259CF44EB619ECE28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
Manifest number: 0E2C
Signing time: Fri 14 Aug 2026 15:01:08 +0000
Manifest this update: Fri 14 Aug 2026 15:01:08 +0000
Manifest next update: Sat 15 Aug 2026 15:01:08 +0000
Files and hashes: 1: 4mthhRZS_I_twBGm8i966ba-sKM.crl (hash: MvbBknIuUqL7eLpI0lYgHEb81gUOSxT5EttBM2boZ5Q=)
2: 6c0GmPSIo0E5XPLL6BcvGXFoeoU.roa (hash: XKGNTxIctVAHlMjqMo1n+V2kjvQsJG2Ze8aGQf0oQWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:89:b1:8e:20:19:92:59:cf:44:eb:61:9e:ce:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Validity
Not Before: Aug 14 15:01:08 2026 GMT
Not After : Aug 15 15:01:08 2026 GMT
Subject: CN=0f7dc20a5460d7b84caed85b87614a3ff20429b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2f:ee:9e:86:ea:27:f8:b2:1c:20:9f:c3:23:
a0:af:48:17:ca:ea:42:dd:31:91:59:4d:f8:f4:ab:
94:57:65:2a:e8:d0:aa:4c:44:5f:86:ae:63:bb:72:
7d:b7:55:9f:e8:a6:17:65:0e:b1:d6:bd:46:67:66:
3e:dd:16:a2:f7:1e:76:26:17:06:8b:80:0c:32:27:
ec:e0:91:da:7a:7c:b6:0b:5a:cf:97:b5:72:b4:87:
7e:82:b6:52:dd:19:cd:40:da:4c:23:bd:c8:b1:da:
69:75:f3:c3:d0:5e:9d:8c:1e:fe:08:b9:4e:e5:51:
f8:30:dd:58:60:f6:47:b8:b3:63:85:19:49:f4:48:
d8:cb:37:0b:f8:26:0b:5f:6d:c0:3e:73:65:39:d7:
43:a8:b8:55:ac:5b:63:cd:c8:4b:0d:a0:b3:42:99:
86:29:3d:f2:f2:e2:e5:2c:d6:a7:4e:3a:d1:6b:4c:
4b:1c:27:b8:f7:bc:7d:c1:03:3a:51:7b:e7:6d:ce:
03:b4:77:e5:ba:71:45:c1:ce:a7:79:4b:23:27:6c:
6d:1c:ce:f4:0f:21:34:90:e9:ca:3d:b4:8c:7f:29:
33:86:4c:3e:6b:68:19:53:0a:50:e1:26:12:22:de:
6d:1a:a9:ba:ec:e4:d2:11:7d:16:70:ed:9b:f3:eb:
bb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7D:C2:0A:54:60:D7:B8:4C:AE:D8:5B:87:61:4A:3F:F2:04:29:B8
X509v3 Authority Key Identifier:
keyid:E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d5:a5:46:e8:1b:5a:e9:2b:50:a7:4b:53:6b:37:66:cd:5e:
3d:c5:6d:e3:ca:80:28:77:4c:d8:f0:19:5a:db:3b:bc:fc:85:
f7:36:92:94:71:c5:c5:ef:8c:71:a3:50:46:bf:61:94:c1:51:
e5:55:30:68:23:58:e5:c7:f1:7e:cb:8e:74:52:d6:e6:bb:4b:
cd:b1:75:7b:4f:83:ef:6b:46:6c:b1:7d:98:06:c3:d0:03:90:
1c:16:95:c9:79:2a:f2:36:e3:61:13:1e:10:4b:67:d7:e0:4d:
31:bf:00:f2:9c:81:85:84:12:94:3d:da:e1:1e:36:04:39:d9:
f6:73:89:10:64:62:9e:a3:a5:eb:be:60:13:70:4e:eb:41:28:
15:d1:14:a0:60:6f:90:5c:fd:aa:72:ac:ae:70:29:37:40:6c:
2c:d2:ba:bc:f9:00:92:d5:de:84:5f:52:3f:7b:80:64:73:6f:
c5:59:6f:ce:b7:c9:ad:3e:7f:ac:ac:9b:e0:a7:23:0e:94:5e:
f5:dd:50:c7:09:23:66:17:d9:b0:6d:39:4b:df:cf:05:08:18:
7c:db:fa:06:41:29:05:bb:58:d2:90:32:fb:56:56:85:24:0b:
cd:54:01:dd:7f:ab:fb:24:a8:47:62:0a:1a:68:a4:f7:18:c1:
73:fc:3b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:37 2026 by rpki-client