Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
File: e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft (raw, json)
Hash identifier: RAIYgy/D4yufQzqKUqfx/P2gnhwqcSTYygeuFAKDnTA=
Subject key identifier: 3F:56:F2:1B:21:9C:32:6D:33:5C:2F:E7:4A:81:30:BE:8D:69:FF:6B
Authority key identifier: 7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F
Certificate issuer: /CN=7b89385c0002330b096567b21514d8e1bc09689f
Certificate serial: 01A149BD801A4A3D322363B396E91F5FD70A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
Manifest number: 1AAE
Signing time: Sat 17 Oct 2026 12:01:58 +0000
Manifest this update: Sat 17 Oct 2026 12:01:58 +0000
Manifest next update: Sun 18 Oct 2026 12:01:58 +0000
Files and hashes: 1: e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl (hash: DccRyv5qhEv+sdNU1IjtMsE2EinEPh3B2U+hhGINZ+k=)
2: rBb-Zp2DN1YryszXlTcGsxUi8kg.roa (hash: VjavbSWKLaeBoYTEkUDvu679eNkgyVWO00COvRWyhp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:bd:80:1a:4a:3d:32:23:63:b3:96:e9:1f:5f:d7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b89385c0002330b096567b21514d8e1bc09689f
Validity
Not Before: Oct 17 12:01:58 2026 GMT
Not After : Oct 18 12:01:58 2026 GMT
Subject: CN=3f56f21b219c326d335c2fe74a8130be8d69ff6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:22:e2:a3:12:64:c9:cf:d9:13:4c:6f:35:
d1:68:b9:ca:c9:c7:47:00:4a:b9:a1:a0:99:b3:9a:
14:b6:a8:c5:5c:40:a6:3e:a5:d4:86:aa:77:3d:20:
31:13:c1:ea:c6:c5:92:f8:40:fe:ba:64:49:4b:49:
75:7e:c4:e4:48:56:79:f6:2e:f6:0f:34:ef:e9:da:
7a:f4:d5:80:65:07:14:83:b8:60:0d:d8:b1:89:a6:
45:90:65:8a:f3:94:67:a8:6d:9d:d8:82:72:fd:ec:
16:cb:e0:99:8b:94:56:85:da:f8:4c:89:99:10:35:
82:5c:42:a9:5d:09:07:c6:bd:ee:db:66:c1:8b:d8:
99:71:45:27:17:c1:a4:c5:55:ef:8b:d0:e6:17:93:
4c:56:47:20:d2:1f:65:51:f9:ad:51:80:bf:ab:6d:
bb:f3:b8:ea:40:6a:36:91:71:f9:c5:62:e3:f7:14:
d9:66:44:3d:c7:d6:31:25:18:7f:17:a0:e4:30:e8:
da:e1:c9:23:8f:96:27:be:46:83:0a:87:96:4f:f1:
c4:1d:8a:43:6f:2b:56:1d:09:7a:f4:4a:a0:69:f9:
b3:2f:3d:26:b2:15:15:e2:d2:df:d6:81:83:76:df:
1d:36:c9:81:0c:14:37:41:e7:73:9b:01:c6:6e:fd:
4a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:56:F2:1B:21:9C:32:6D:33:5C:2F:E7:4A:81:30:BE:8D:69:FF:6B
X509v3 Authority Key Identifier:
keyid:7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:41:ef:6f:1e:f6:10:ce:c9:94:e6:a7:b3:49:88:f9:bc:9f:
c3:30:9f:87:b9:d8:3d:6e:d4:a7:81:c8:bd:39:77:02:82:fd:
13:7b:fe:66:d8:0c:12:ad:32:16:96:ea:70:3e:7e:5a:0c:dc:
9f:6b:f3:18:45:97:78:e3:b7:cf:12:61:2c:d9:7f:8d:45:0d:
8f:7a:ab:d0:e8:d5:53:9f:c3:34:1b:65:90:60:c7:c8:e9:64:
0d:dd:dc:ca:74:f7:6b:11:5f:1d:02:cc:36:d6:8b:d2:ce:9d:
ea:9b:a5:cd:ba:da:4b:f6:df:4b:87:43:2e:68:fc:e7:ac:d4:
4c:f0:0a:f2:f7:57:5e:af:c0:d5:ed:21:c0:b9:24:15:d7:53:
81:99:fc:ce:bb:09:ee:87:e4:5d:ae:92:7c:a0:1d:42:1a:1f:
d5:56:25:64:7e:d0:26:bb:79:5b:a0:20:74:37:d8:9e:0b:19:
6d:99:b2:a1:9f:32:19:93:e5:b5:c7:91:2a:c7:b3:5d:34:1d:
19:3c:4d:1d:a4:ab:86:56:09:83:c9:fc:09:8a:26:aa:68:b2:
13:7c:ea:e6:35:b1:1c:25:70:a6:3b:02:51:90:87:a3:ab:15:
8f:9d:7e:e7:08:ae:ba:77:21:d1:7a:51:9d:a0:42:2b:ee:5e:
c5:20:a2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:22:31 2026 by rpki-client