Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
File: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft (raw, json)
Hash identifier: LgmbO5AAxoNxOgdDyLTbMMmy9L+14sLVOXSerixi3s0=
Subject key identifier: 1B:23:92:BC:81:D2:3D:75:64:6D:57:9B:95:24:15:C1:5B:C3:E9:4A
Authority key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
Certificate issuer: /CN=e039649faa8f9de3dae91be799a27e2ca6628789
Certificate serial: 01A13D1342A6DD394E33C52C7A7DAD158184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
Manifest number: 1AAA
Signing time: Thu 15 Oct 2026 01:00:34 +0000
Manifest this update: Thu 15 Oct 2026 01:00:34 +0000
Manifest next update: Fri 16 Oct 2026 01:00:34 +0000
Files and hashes: 1: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl (hash: H6KkRsQSs7Ki4f/I+eNy2QmkD8q2jsGM+Zf43sltCoc=)
2: oxOUpQ0FwseclzcVvtlkSLjr_aM.roa (hash: 39PmeADT0B2o6dhGdHc5CXRqYkD6fuj6z5G5c2KqgVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:42:a6:dd:39:4e:33:c5:2c:7a:7d:ad:15:81:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e039649faa8f9de3dae91be799a27e2ca6628789
Validity
Not Before: Oct 15 01:00:34 2026 GMT
Not After : Oct 16 01:00:34 2026 GMT
Subject: CN=1b2392bc81d23d75646d579b952415c15bc3e94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:39:24:c0:8c:8b:96:99:02:f7:b7:23:46:
01:74:98:89:be:b3:a1:26:e1:19:1d:95:10:c9:e2:
0a:cf:0e:ff:9f:c9:fe:43:ef:d7:84:a3:49:c8:76:
c1:02:83:8d:7b:dc:95:24:f4:ec:13:af:ca:cc:ec:
0b:95:1f:11:4a:0e:89:8b:87:8d:26:92:01:3a:dc:
ad:93:cf:6f:07:a9:f3:e3:d2:64:56:93:e3:68:ef:
2a:74:d1:fc:77:aa:c6:f2:ac:a1:9d:e4:f7:74:17:
a3:b7:4c:7d:0e:87:41:5a:04:1b:cb:3e:6a:d1:8e:
9c:3e:f2:27:36:87:6e:b5:96:87:b4:3b:4c:e8:40:
de:d5:d4:57:3b:5a:10:9e:b5:18:b0:6a:f5:99:16:
67:b4:37:2b:b5:4e:f9:f8:4f:1d:e8:f6:2a:06:b3:
a1:db:97:8e:6d:eb:b5:71:ab:02:18:47:12:36:83:
5e:31:82:38:0c:81:ff:7e:6f:a7:7a:0b:50:a4:cb:
cb:67:13:3c:7a:3c:0b:18:21:a2:1e:d1:41:79:df:
6e:d1:65:39:5f:c9:0f:8a:10:18:a5:c5:fc:62:b1:
b3:96:84:6f:a2:41:2b:49:5f:84:14:69:e1:21:63:
5e:55:8d:26:62:45:29:cc:ba:85:de:7a:b1:9f:d1:
9e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:23:92:BC:81:D2:3D:75:64:6D:57:9B:95:24:15:C1:5B:C3:E9:4A
X509v3 Authority Key Identifier:
keyid:E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:2d:1e:b5:37:ec:18:e5:29:30:14:91:64:f9:82:50:92:07:
6d:a7:82:6b:cf:cf:ec:d6:9a:b7:d8:9f:00:f3:3a:d1:c7:8f:
4b:4e:c0:62:c5:38:55:4b:af:4a:30:10:d3:47:2d:95:9d:70:
78:44:05:a6:65:cf:be:c3:b8:42:30:b2:53:37:36:1c:16:b4:
b2:52:19:db:ff:a6:65:61:fd:3a:5d:57:f8:ae:bc:18:16:f4:
66:56:55:a1:50:96:e4:34:d9:91:f3:40:7f:0c:05:19:15:c5:
72:8e:52:f0:d7:8e:3c:25:68:f4:02:9d:3e:30:fa:bf:f5:9c:
65:6f:2a:24:b2:34:d0:7f:95:31:c0:f8:d0:07:7d:d1:68:2d:
1e:73:69:8f:97:9b:c7:60:d2:d7:40:91:6a:a1:e2:19:c4:23:
d6:e3:35:3a:47:71:a9:ea:41:31:a0:48:21:00:36:d2:ae:98:
f3:64:d2:e9:26:aa:06:07:e3:cc:47:0a:47:95:eb:4c:38:bb:
10:6e:36:e6:50:7c:44:b7:46:6e:40:ab:52:51:04:b6:2e:59:
1e:be:e2:33:c8:2a:e4:3d:8d:7d:aa:2a:51:2c:56:2f:c1:e4:
fa:9d:1e:a0:3c:f9:b4:24:99:e8:2e:03:b9:b6:9f:35:79:f9:
7c:b5:73:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:33:41 2026 by rpki-client