Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
File: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft (raw, json)
Hash identifier: eE0QTm1g1cr8nyQ2OrjUnLJ2kF55nx1eJPbW3UMo4hw=
Subject key identifier: 2B:D6:D6:ED:22:5E:42:25:38:61:88:EC:98:93:65:A8:03:D5:BA:A9
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial: 01A0EBC106659DB0E61E96EC1B1F66DF72D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
Manifest number: 15D6
Signing time: Tue 29 Sep 2026 06:01:30 +0000
Manifest this update: Tue 29 Sep 2026 06:01:30 +0000
Manifest next update: Wed 30 Sep 2026 06:01:30 +0000
Files and hashes: 1: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl (hash: XOYS9gfqQM7Yr1POsYYPMcZWMEbWa1CP86z/kpwDdKk=)
2: _2TjfVrCZo9B9qI9aJsIIj8RhAk.asa (hash: M/M1jD58xwzQOF/SAmLUskPi5EjlgSXMDxr/H80Jdlc=)
3: i4Te7iMl8ghbqa21Y6HDg_6pHHs.roa (hash: w8gWgmF42nIarY6Emvf1fz/wNEfrJpHlyRzan9puCwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:c1:06:65:9d:b0:e6:1e:96:ec:1b:1f:66:df:72:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
Validity
Not Before: Sep 29 06:01:30 2026 GMT
Not After : Sep 30 06:01:30 2026 GMT
Subject: CN=2bd6d6ed225e4225386188ec989365a803d5baa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cf:a7:8a:e7:61:ce:a0:11:aa:4c:4e:2c:4c:
20:f4:54:f0:02:92:a1:aa:8c:45:e7:89:88:5e:63:
2f:86:7e:66:ea:03:e2:ca:7a:99:b5:f1:32:50:ee:
e8:d3:6f:d8:57:85:d6:ca:94:04:c9:a6:53:20:83:
1a:e5:8f:47:30:ea:91:79:4b:70:47:0a:05:ee:9d:
a7:a6:2b:c5:f5:69:08:9a:eb:c4:a0:d3:aa:e2:41:
e4:6b:de:8e:15:82:dd:b4:2a:11:5b:e9:d7:c7:0c:
4c:8c:42:a5:39:0c:89:9c:fc:69:52:db:2f:ce:88:
1a:8a:eb:56:4b:ab:84:11:dc:46:ff:aa:0b:51:b0:
66:fc:27:b5:1b:68:1b:ed:ab:1f:e5:a3:50:91:e7:
b6:f3:56:f5:40:f0:0f:48:af:95:d4:01:53:7d:0a:
68:63:3e:b3:f0:65:54:56:51:37:b0:80:0a:72:7f:
ce:c9:81:70:9d:f9:b1:34:1a:af:fd:d8:b8:4e:71:
0c:7a:01:3e:e7:a9:2d:95:c9:66:ce:27:ef:7b:4b:
e1:95:85:65:69:ce:be:d9:59:57:47:81:7a:fd:c7:
7f:d0:b2:a1:80:4c:f2:03:56:ca:26:28:d5:6a:55:
b2:15:d1:32:f9:3d:af:d7:f0:4e:09:84:30:9d:79:
24:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D6:D6:ED:22:5E:42:25:38:61:88:EC:98:93:65:A8:03:D5:BA:A9
X509v3 Authority Key Identifier:
keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a7:bd:2e:62:f2:2b:1e:20:1d:f9:9b:28:f2:a6:d1:8b:83:
64:e2:65:f5:e7:0c:cf:98:f1:e1:5c:81:e3:d8:bd:d0:dc:29:
eb:0c:fd:3a:75:a0:d9:87:22:b8:0f:fe:7d:e4:f5:7d:74:63:
4c:02:e6:a1:24:e7:64:f9:8c:d4:4e:59:39:be:b4:75:22:1e:
75:22:52:62:ff:51:77:7e:96:ba:5f:70:cd:8c:3e:9f:59:b5:
2b:7f:67:82:3e:62:ac:0e:de:62:e3:ef:c9:14:d9:88:dc:80:
5d:65:e3:4c:4d:83:17:9a:d7:b8:11:cf:f0:3c:52:21:1e:26:
25:3a:06:8a:96:fd:73:b6:f9:7c:85:7d:5b:c4:8a:26:c9:10:
ff:7b:ee:eb:7b:c6:88:95:f2:0e:d4:7e:39:4d:e1:62:fc:b9:
43:23:6e:9e:4d:db:c7:78:60:b6:68:34:51:df:d1:2c:2e:2e:
0a:50:4e:41:a3:a9:92:12:8e:36:35:77:5d:91:23:4f:ef:88:
85:ed:b7:67:17:9c:25:56:1f:82:1c:e5:2f:81:67:f5:95:3e:
68:32:b7:42:d9:d5:21:15:48:61:df:c7:50:9d:9f:ac:8c:06:
36:81:e9:ba:91:20:c3:41:4b:15:44:d9:1f:8f:f5:6f:f6:1b:
f8:f4:c8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:10:40 2026 by rpki-client