Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
File: 4mthhRZS_I_twBGm8i966ba-sKM.mft (raw, json)
Hash identifier: bJvKsIPvSR1L9opWr2e/1gZBfeaYas3DsZdlD0pBqU8=
Subject key identifier: A1:2A:64:66:E7:98:A9:62:55:B5:B4:42:7D:D4:0A:FC:39:30:85:82
Authority key identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
Certificate issuer: /CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Certificate serial: 01A13F7052351CACC88869EDC9F9E5119A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
Manifest number: 0ED1
Signing time: Thu 15 Oct 2026 12:01:27 +0000
Manifest this update: Thu 15 Oct 2026 12:01:27 +0000
Manifest next update: Fri 16 Oct 2026 12:01:27 +0000
Files and hashes: 1: 4mthhRZS_I_twBGm8i966ba-sKM.crl (hash: AhxKu0+XHvzY9LcoXUit8ID4vgQyo5AuE87AyvD465U=)
2: 6c0GmPSIo0E5XPLL6BcvGXFoeoU.roa (hash: XKGNTxIctVAHlMjqMo1n+V2kjvQsJG2Ze8aGQf0oQWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:52:35:1c:ac:c8:88:69:ed:c9:f9:e5:11:9a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Validity
Not Before: Oct 15 12:01:27 2026 GMT
Not After : Oct 16 12:01:27 2026 GMT
Subject: CN=a12a6466e798a96255b5b4427dd40afc39308582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:e6:2a:18:27:bb:f1:70:85:bd:ff:21:14:
4f:5c:8c:0b:8c:55:cf:38:14:1f:0d:b5:b9:9b:0c:
b6:ff:f7:b5:c1:dd:6c:c7:0d:48:a0:85:4e:44:36:
f9:37:ce:e1:db:c6:a2:3d:a8:ab:4f:f4:b6:4f:1f:
28:6f:08:23:50:a8:35:6b:1d:c4:a5:bc:39:8a:e6:
b3:e9:03:20:1b:3a:94:f3:6a:65:f8:78:a2:32:d7:
8c:52:ea:14:ec:a4:82:22:d1:97:c7:73:32:c9:81:
5c:e8:9c:01:94:11:b3:76:51:19:a6:15:18:5b:88:
6f:7f:76:76:dc:96:4b:9e:00:af:b3:cb:6f:d0:04:
e4:44:48:04:3f:fa:f7:d2:20:a0:c9:fb:d9:d0:1f:
8d:03:a7:04:cf:3c:b5:69:b1:95:56:46:8b:80:28:
da:8b:f9:d5:e6:8c:6a:ff:22:91:e2:38:3b:3d:ad:
ad:a7:fa:bf:cf:0e:f0:7c:73:55:e0:c0:3c:dc:71:
0a:85:a0:b7:91:55:a9:ec:63:a9:a3:bc:49:7c:1d:
43:9d:cb:92:68:36:5c:98:cb:04:ee:01:2d:65:cc:
5f:2d:a4:5a:af:69:39:d8:96:d3:30:e4:56:28:c2:
e6:90:68:2b:eb:4f:e7:18:3a:51:4d:26:b1:26:f9:
ad:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2A:64:66:E7:98:A9:62:55:B5:B4:42:7D:D4:0A:FC:39:30:85:82
X509v3 Authority Key Identifier:
keyid:E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7c:47:20:58:29:b8:c5:30:cc:b8:ca:dc:91:a0:c5:56:21:
10:3a:3c:4d:51:bb:63:47:89:2d:34:f2:6e:69:aa:5c:2c:ae:
d2:20:e4:38:cb:78:20:f8:26:0f:cf:d6:8d:35:cb:ca:34:64:
72:ef:d9:68:5b:96:56:33:3c:73:91:43:cf:79:a7:b1:59:ad:
a6:8a:49:e0:e5:ea:1e:1c:67:95:86:0a:9c:a2:55:89:70:6e:
f2:cc:e4:52:86:33:d9:b5:21:cc:8f:82:df:9b:88:ce:d1:09:
e8:4f:fa:a0:ff:fc:42:37:6b:7f:7c:cf:77:a8:05:b9:c7:20:
71:82:5e:68:12:90:74:fe:0d:c0:77:6a:4d:bd:37:26:dc:bd:
be:78:ec:c3:d5:e7:95:06:9c:9c:7d:2e:bd:3f:f1:3c:25:74:
5c:88:7c:94:f1:16:5c:56:8a:82:90:5a:2d:a7:c7:cb:2b:d9:
d5:97:ca:88:29:12:a2:1c:cc:2d:3d:e7:7d:2a:36:14:44:65:
42:e0:fe:ef:43:4e:65:da:03:d2:b6:32:d1:a9:20:6a:92:2f:
81:2c:6b:77:fd:2b:ec:91:a6:01:b1:56:fd:63:8a:4c:d4:45:
da:75:ae:b6:85:2a:80:2a:df:91:d6:75:68:2a:64:f1:fc:5c:
c9:f2:10:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:30:20 2026 by rpki-client