Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
File: 4oNEKXdeZVXldCSSKGJUsdqfGQM.mft (raw, json)
Hash identifier: /IH5Kcrt7StD3cxEyi+sRhGhCbsmPKNxSJVZj5OC6xM=
Subject key identifier: F9:B3:0C:C1:CD:44:CF:2A:02:70:F9:2E:3A:2F:1E:3F:E2:30:9D:85
Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Certificate issuer: /CN=e2834429775e6555e5742492286254b1da9f1903
Certificate serial: 01A000935D55C65D958D269A2CCEEC064914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
Manifest number: 12BB
Signing time: Fri 14 Aug 2026 14:00:52 +0000
Manifest this update: Fri 14 Aug 2026 14:00:52 +0000
Manifest next update: Sat 15 Aug 2026 14:00:52 +0000
Files and hashes: 1: 4oNEKXdeZVXldCSSKGJUsdqfGQM.crl (hash: og6nz0Ul3XMv+YApfH4USKeSiujQdAWKwW0oHL9i9sc=)
2: uTD6khWcd31ZzRZAtfj7o4AtIHw.roa (hash: 69oOJR8ncC7sjtYVQ8SZHCT4Cq2KZtCn6uWehRleXPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:5d:55:c6:5d:95:8d:26:9a:2c:ce:ec:06:49:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2834429775e6555e5742492286254b1da9f1903
Validity
Not Before: Aug 14 14:00:52 2026 GMT
Not After : Aug 15 14:00:52 2026 GMT
Subject: CN=f9b30cc1cd44cf2a0270f92e3a2f1e3fe2309d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1a:68:f1:b3:e5:bc:23:18:aa:d5:69:46:ff:
01:e2:ce:1e:c8:e3:83:d0:0a:cc:eb:91:4c:01:c2:
ac:e0:d5:35:e1:21:a1:42:5d:88:db:62:47:12:8f:
25:ff:e5:54:d9:77:e6:1f:8a:61:f2:22:e7:fd:f8:
96:72:a2:48:cb:00:03:a7:39:30:94:d8:61:05:0b:
5b:4c:ca:67:37:ae:50:d7:2a:19:41:5d:94:d7:63:
4a:ed:3c:c7:91:7c:c4:01:5b:b7:62:cb:e5:d6:fb:
41:83:91:ed:5d:3a:fb:80:a8:06:d2:3d:78:fe:34:
10:4c:19:b0:63:73:78:69:dd:f7:05:ff:bc:03:28:
5f:38:c6:97:b5:39:19:78:21:b8:5d:cc:c7:4c:a2:
3a:63:ab:42:21:6d:dd:42:73:aa:15:69:c1:26:66:
74:7e:3d:86:f0:dd:33:26:03:87:72:5a:bd:0e:e4:
35:58:61:26:c2:71:f2:a5:8c:c4:97:01:43:e4:50:
db:01:29:fb:f5:8a:4c:39:2b:b8:32:9b:31:12:97:
ad:86:22:62:9d:a9:52:6f:e6:fe:69:fd:57:ac:ff:
f2:20:69:fa:71:f8:bc:9c:01:4d:28:e8:a4:d7:59:
f8:1d:d9:2d:0c:91:de:23:fe:07:6d:ef:d6:ba:1a:
cc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B3:0C:C1:CD:44:CF:2A:02:70:F9:2E:3A:2F:1E:3F:E2:30:9D:85
X509v3 Authority Key Identifier:
keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:a1:62:c3:55:1e:f9:6a:bf:60:32:e2:fe:76:35:85:68:c9:
4a:47:e6:6f:fd:41:da:00:23:a5:5e:e2:4f:ce:17:d3:ce:dc:
ae:df:e5:f7:3a:15:24:9f:b1:13:df:da:f2:0a:3d:78:dd:60:
18:fe:38:12:82:d9:d0:38:d0:94:ed:d0:4d:b2:1a:4d:c3:e3:
a0:2f:c9:0b:22:81:5d:5a:c4:5e:21:b3:bc:f0:73:23:fb:55:
df:aa:82:35:18:59:88:70:48:10:08:76:40:00:44:00:11:39:
58:53:25:ce:3b:3b:db:91:2a:f5:ec:66:70:8d:6c:99:c0:97:
00:6c:ec:ff:6e:e9:95:ed:07:0f:de:f8:4c:41:7d:ff:be:1b:
e8:b6:35:c5:8f:14:d1:db:33:94:94:03:06:dd:a1:04:d2:4a:
91:6b:83:ad:9b:63:da:d8:88:67:8c:b7:a2:52:5e:6e:9a:88:
89:57:23:f4:cf:d9:3d:64:10:0e:cf:fb:12:35:ad:7f:89:a0:
cd:87:6c:31:5d:f2:3d:72:a8:cb:a4:ce:16:8c:e2:5d:e7:40:
ff:8e:04:33:d6:82:57:ee:08:50:6c:41:0f:16:f3:0c:72:b4:
64:09:d5:a3:41:74:9f:b2:d6:2d:ad:27:9b:21:d8:cc:d9:91:
32:bc:6a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:11:04 2026 by rpki-client