Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
File: 4HDNq3OhLa82gGsOFgLI2vuQk7s.mft (raw, json)
Hash identifier: 1AbJLRCn6c0uia2dHmb0F9+2HaJVF0U49SZYi/Aqe/I=
Subject key identifier: D8:FF:E6:FE:6A:C2:E9:11:B0:E2:6C:83:B4:F8:64:CB:D8:7B:EF:F0
Authority key identifier: E0:70:CD:AB:73:A1:2D:AF:36:80:6B:0E:16:02:C8:DA:FB:90:93:BB
Certificate issuer: /CN=e070cdab73a12daf36806b0e1602c8dafb9093bb
Certificate serial: 01A0010155F61FC2C623C11E1CFBD8C95D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
Manifest number: 0F4A
Signing time: Fri 14 Aug 2026 16:00:59 +0000
Manifest this update: Fri 14 Aug 2026 16:00:59 +0000
Manifest next update: Sat 15 Aug 2026 16:00:59 +0000
Files and hashes: 1: 4HDNq3OhLa82gGsOFgLI2vuQk7s.crl (hash: ktUxq5DjKho+vMLOvuXfNSsH+aSVBHt/QzNpZD0JkWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:55:f6:1f:c2:c6:23:c1:1e:1c:fb:d8:c9:5d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e070cdab73a12daf36806b0e1602c8dafb9093bb
Validity
Not Before: Aug 14 16:00:59 2026 GMT
Not After : Aug 15 16:00:59 2026 GMT
Subject: CN=d8ffe6fe6ac2e911b0e26c83b4f864cbd87beff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:58:04:eb:d4:0b:c4:4a:65:c2:98:4a:df:c9:
a1:49:04:aa:fa:4f:bc:b0:8b:65:07:a7:c7:45:2e:
04:97:20:ac:50:ab:60:57:3e:d2:a0:20:fb:8a:a5:
87:fb:84:00:59:00:fa:cc:8d:a4:77:57:e2:34:0a:
94:44:96:22:60:aa:e9:58:33:53:1e:59:2c:3c:06:
4d:77:11:29:44:9d:5f:aa:5d:1d:30:36:24:86:3e:
26:94:55:8f:99:02:d3:11:08:38:90:61:a6:72:d8:
f3:90:3d:b0:82:7e:5f:23:a7:f2:c7:99:80:6d:c5:
e2:0d:f5:01:02:27:d0:56:93:33:13:6d:da:bc:c7:
bf:32:41:f9:90:82:92:78:39:e9:c3:95:07:f6:03:
4b:1e:1a:08:95:a3:52:a4:d1:27:e6:10:63:57:df:
54:0e:e1:fc:d7:ab:19:dc:3b:59:aa:ae:11:77:c0:
93:62:85:7c:a4:28:55:2d:0e:15:98:81:b4:fa:9b:
8e:03:54:f9:0b:96:89:34:01:36:43:39:6b:32:50:
d5:5c:e6:7b:d6:10:c7:20:90:0a:fb:63:d4:d0:1d:
99:52:2a:26:bf:5c:98:6e:ce:37:e5:03:91:2b:49:
7c:61:8b:a2:36:23:af:d7:02:70:93:52:f8:a0:39:
52:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FF:E6:FE:6A:C2:E9:11:B0:E2:6C:83:B4:F8:64:CB:D8:7B:EF:F0
X509v3 Authority Key Identifier:
keyid:E0:70:CD:AB:73:A1:2D:AF:36:80:6B:0E:16:02:C8:DA:FB:90:93:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4d:3f:02:44:ac:33:4c:a7:a1:2b:e3:f8:6d:37:e2:39:14:
42:7b:c9:89:90:a9:3c:9d:1b:0f:76:84:a2:c3:19:f9:c2:b8:
5d:50:38:2a:b4:a4:71:77:1f:e8:b5:6e:47:ca:af:7d:59:35:
b8:03:7e:95:ec:c4:8d:e8:36:83:00:05:10:64:79:4c:28:0d:
cf:de:9a:2d:a0:65:a6:0a:0c:69:5c:ff:85:e7:c6:f2:17:8b:
e5:d6:a1:40:a7:94:9e:b7:55:90:84:49:b8:74:4a:c2:49:6e:
ab:ca:23:18:8b:76:84:5b:51:de:67:91:e8:a1:70:34:57:51:
a4:ed:20:af:85:e3:79:f8:88:81:48:22:98:b9:7d:8b:a4:55:
8f:48:1a:25:ef:d4:5d:cf:eb:77:17:03:32:51:9d:ba:a0:51:
c1:3a:89:79:f0:a0:ca:b1:27:50:ea:64:57:03:62:be:97:a2:
6d:0c:8e:80:b9:1e:6e:65:34:02:19:25:8e:31:7a:50:21:75:
49:22:84:6f:f5:65:c4:9b:fc:dd:49:49:e8:4b:55:8d:3b:58:
d0:c6:41:36:63:28:9b:c7:ea:9a:89:f3:e3:4f:ad:07:2d:43:
ca:88:14:f4:10:39:a3:5f:a3:53:9c:ef:e3:4e:3e:c0:1e:ea:
d2:ea:1a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:45 2026 by rpki-client