Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/4tjFhzGeOswh3wozQeUSXjdNuiI.mft
File: 4tjFhzGeOswh3wozQeUSXjdNuiI.mft (raw, json)
Hash identifier: uD7EyRMNcflOtBJq8U4oNnaCP6pkCXdpvG2VKoEmmEY=
Subject key identifier: 42:71:4C:62:06:D9:C9:33:AF:51:06:05:FF:14:B2:F2:08:CF:48:DE
Authority key identifier: E2:D8:C5:87:31:9E:3A:CC:21:DF:0A:33:41:E5:12:5E:37:4D:BA:22
Certificate issuer: /CN=e2d8c587319e3acc21df0a3341e5125e374dba22
Certificate serial: 01A03F3B72CB808F30736518CBADB4A3D0EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tjFhzGeOswh3wozQeUSXjdNuiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/4tjFhzGeOswh3wozQeUSXjdNuiI.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 18:00:55 +0000
Manifest this update: Wed 26 Aug 2026 18:00:55 +0000
Manifest next update: Thu 27 Aug 2026 18:00:55 +0000
Files and hashes: 1: 4tjFhzGeOswh3wozQeUSXjdNuiI.crl (hash: GoG+fNBu3Y25JBk0jDpIeGeTuLYkMNdaFwjf9zhtmmw=)
2: zbeKXEtBHivuXewjvv-PutuCHTI.roa (hash: cARCYTy36klUolDqP5aOrJ3kV5YBXwe6iec5qzqNP8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/4tjFhzGeOswh3wozQeUSXjdNuiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/4tjFhzGeOswh3wozQeUSXjdNuiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tjFhzGeOswh3wozQeUSXjdNuiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:72:cb:80:8f:30:73:65:18:cb:ad:b4:a3:d0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d8c587319e3acc21df0a3341e5125e374dba22
Validity
Not Before: Aug 26 18:00:55 2026 GMT
Not After : Aug 27 18:00:55 2026 GMT
Subject: CN=42714c6206d9c933af510605ff14b2f208cf48de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f9:03:70:9d:31:0b:b6:cb:a2:25:2a:e1:89:
04:49:2e:a4:ce:e0:4e:3f:7c:c0:71:55:83:de:d4:
d5:ce:a0:b9:37:f5:5e:76:0c:cc:d6:f8:fb:2c:f8:
f2:c3:bf:38:cf:b0:89:45:05:91:bf:32:67:11:c5:
9c:83:7e:88:d3:35:cb:f3:47:3e:08:59:fa:97:99:
d8:8a:62:7a:88:99:bb:fd:79:e8:43:b4:db:86:9a:
a7:43:6d:14:21:0a:5b:06:c4:0a:74:38:3f:24:69:
48:59:b1:7b:a6:ec:58:2f:fe:c8:d0:e0:28:d1:21:
98:39:63:70:e1:36:a9:6e:3e:ca:8a:f9:d9:87:f2:
af:ac:8e:9f:1f:74:be:64:ba:b0:ff:bc:1c:eb:39:
48:e4:fa:e7:ee:04:b4:2d:21:6a:73:bb:53:0c:50:
54:95:ff:15:68:7c:05:61:a0:e3:98:a0:d9:d0:47:
87:10:4e:b7:18:6f:de:12:1c:87:4c:8c:07:c3:37:
3c:9d:89:32:40:af:42:52:f4:38:e3:d4:88:dc:2f:
f6:88:f6:57:8a:b4:23:b5:b4:37:c8:b8:5c:50:fb:
24:c3:ac:ae:cd:49:88:51:89:cf:20:26:50:cb:f9:
b6:08:1f:f5:b3:da:96:a8:ea:b4:61:1b:8b:5b:d2:
59:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:71:4C:62:06:D9:C9:33:AF:51:06:05:FF:14:B2:F2:08:CF:48:DE
X509v3 Authority Key Identifier:
keyid:E2:D8:C5:87:31:9E:3A:CC:21:DF:0A:33:41:E5:12:5E:37:4D:BA:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tjFhzGeOswh3wozQeUSXjdNuiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/4tjFhzGeOswh3wozQeUSXjdNuiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/4tjFhzGeOswh3wozQeUSXjdNuiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d4:01:4e:d9:df:e0:02:c9:be:a2:a7:c2:26:b7:7c:9e:5f:
09:a7:1c:2d:a5:0b:25:0c:96:7f:05:99:a8:4f:43:d5:04:1a:
19:8f:96:d2:c7:41:0d:1d:9d:75:22:2a:6f:3d:97:30:73:72:
e6:2e:57:c7:f4:da:ce:33:4c:d6:d7:23:74:88:58:ea:79:fd:
5f:f3:68:6b:9b:3f:43:37:6f:0c:7b:78:05:26:78:30:6a:fd:
22:98:1d:8c:3e:8a:c0:65:0c:fa:cd:89:83:c6:ae:2f:99:a9:
21:72:79:0e:b7:79:56:7f:45:8c:e2:23:15:8d:6b:3c:46:4a:
fd:5d:52:e5:a9:86:ea:82:7f:32:05:7e:7b:27:1b:95:8d:10:
ce:cd:4d:8c:d5:e7:e4:f7:21:38:95:4e:f9:21:aa:5a:6b:72:
e5:61:32:6c:3e:6e:a8:51:e9:ee:d7:76:e8:28:56:4c:a3:1a:
ff:18:24:4b:ba:9b:38:3f:9e:46:48:c0:54:b5:61:34:26:52:
00:e8:85:db:94:cd:38:28:38:76:46:fe:b8:1a:da:e9:8a:ee:
60:70:34:a2:0f:fb:7a:08:2c:70:c3:aa:5b:87:08:56:8e:ee:
ce:95:b3:d5:90:0b:cb:f6:96:f6:29:a8:35:9f:bd:f8:e2:6d:
c7:8c:51:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:47:01 2026 by rpki-client