Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/df0a71-989f-4052-8b38-27f31b7027bd/1/4DX4gvpu7yUgC2p9c3jChZJtjJ4.mft
File: 4DX4gvpu7yUgC2p9c3jChZJtjJ4.mft (raw, json)
Hash identifier: rwEv2Z8C6EvLN1azO83VA/FVRh562IoRILW7GuB24jE=
Subject key identifier: 23:C1:88:60:DA:26:D0:B2:C0:D6:70:74:3E:1B:0E:D4:64:F3:ED:AB
Authority key identifier: E0:35:F8:82:FA:6E:EF:25:20:0B:6A:7D:73:78:C2:85:92:6D:8C:9E
Certificate issuer: /CN=e035f882fa6eef25200b6a7d7378c285926d8c9e
Certificate serial: 01A03FE0792AEE003D3329D6869E217F9315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4DX4gvpu7yUgC2p9c3jChZJtjJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0a71-989f-4052-8b38-27f31b7027bd/1/4DX4gvpu7yUgC2p9c3jChZJtjJ4.mft
Manifest number: 0140
Signing time: Wed 26 Aug 2026 21:01:10 +0000
Manifest this update: Wed 26 Aug 2026 21:01:10 +0000
Manifest next update: Thu 27 Aug 2026 21:01:10 +0000
Files and hashes: 1: 4DX4gvpu7yUgC2p9c3jChZJtjJ4.crl (hash: HdENaJpOwQ7Mx/5qA+CBdIxUuqmcGz24NmwK8FY0KLw=)
2: xulwkrdTClCIo8JTMQSPEZiJ5xM.roa (hash: zBwBsovIkxRJ5sWGqQLeI9gfF8IlVwdOJj27qMN+l8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0a71-989f-4052-8b38-27f31b7027bd/1/4DX4gvpu7yUgC2p9c3jChZJtjJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/df0a71-989f-4052-8b38-27f31b7027bd/1/4DX4gvpu7yUgC2p9c3jChZJtjJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4DX4gvpu7yUgC2p9c3jChZJtjJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:e0:79:2a:ee:00:3d:33:29:d6:86:9e:21:7f:93:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e035f882fa6eef25200b6a7d7378c285926d8c9e
Validity
Not Before: Aug 26 21:01:10 2026 GMT
Not After : Aug 27 21:01:10 2026 GMT
Subject: CN=23c18860da26d0b2c0d670743e1b0ed464f3edab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:51:40:0d:b2:06:9d:46:88:36:89:88:cc:1d:
b4:f3:ee:c2:93:23:83:40:23:c3:84:99:ed:f7:65:
c5:02:49:36:db:3b:a3:56:f4:eb:1e:de:ed:a7:fe:
f1:a4:3e:b1:1b:e2:d4:f9:9e:90:ed:db:5a:7e:08:
d0:5a:62:c9:f5:ef:9c:af:46:aa:17:d1:9e:87:08:
05:dc:98:c7:5b:73:63:47:93:bd:dd:8c:9f:52:e8:
3f:50:55:48:15:4e:e1:e6:db:66:e1:52:31:07:9b:
cb:3c:cb:a4:95:11:81:08:1e:7d:98:a6:cc:04:4a:
5b:b6:d2:ae:4b:59:05:2d:a9:7e:92:77:83:30:9f:
c6:ac:31:59:02:4b:b9:2d:ee:00:c4:f8:88:66:70:
85:a3:f3:6d:7e:28:a2:3a:1b:79:47:14:c5:88:56:
ec:3d:40:e3:a2:08:d0:ce:51:9d:e5:ca:76:20:89:
56:17:ef:fd:99:6c:c2:62:56:f4:14:b3:c3:c0:f5:
61:a8:83:ff:a8:3b:dd:8e:51:61:b5:b6:d4:4e:3c:
a7:be:a3:83:d2:f8:a2:d9:8c:cc:85:2e:78:00:13:
57:e5:c6:f3:44:b3:d1:70:2d:06:66:77:be:dd:cd:
c3:de:09:3a:5b:9f:b8:8a:40:2e:11:ab:dd:c8:33:
69:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C1:88:60:DA:26:D0:B2:C0:D6:70:74:3E:1B:0E:D4:64:F3:ED:AB
X509v3 Authority Key Identifier:
keyid:E0:35:F8:82:FA:6E:EF:25:20:0B:6A:7D:73:78:C2:85:92:6D:8C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DX4gvpu7yUgC2p9c3jChZJtjJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0a71-989f-4052-8b38-27f31b7027bd/1/4DX4gvpu7yUgC2p9c3jChZJtjJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0a71-989f-4052-8b38-27f31b7027bd/1/4DX4gvpu7yUgC2p9c3jChZJtjJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:73:d0:57:28:bf:76:01:88:ab:5e:cb:01:ae:d8:49:1d:c3:
41:cd:f7:d2:cd:99:98:35:aa:b3:05:ac:a6:f7:81:a9:c1:49:
5e:71:05:bd:c6:2e:22:01:49:52:b1:4e:be:64:bb:46:ea:07:
1d:fd:8b:56:76:ab:05:09:b0:b7:95:d7:c8:77:e2:dd:45:97:
92:1a:69:6c:0b:6b:43:6a:e4:ad:f4:3f:bd:5e:5b:46:cc:28:
fb:53:ff:62:c7:c7:6e:4e:bf:93:52:bb:26:ad:09:cd:ac:99:
72:e2:02:6c:e8:93:7f:62:eb:d7:41:8b:5c:41:b6:95:d1:d5:
ee:31:b6:e0:a9:da:41:b0:d4:de:25:7e:e2:5a:60:60:c6:d3:
86:e6:10:41:7c:17:18:52:05:f9:d6:55:b1:24:0d:1c:17:9e:
4a:de:3b:b0:17:59:8c:2a:0b:94:ac:89:e5:bf:80:5e:76:24:
48:a8:db:c0:cf:69:9d:d0:78:03:9b:eb:47:42:d3:c0:c6:c9:
7d:03:99:49:55:ca:ea:d6:16:be:d7:0c:2b:fb:6d:3a:30:0d:
8d:f2:70:8a:ca:24:3e:47:51:06:36:f1:28:d4:40:5e:a4:10:
6a:93:7a:b1:5b:4f:b6:ac:02:c5:8c:ac:ff:98:dc:e9:fa:6a:
de:cf:15:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:34 2026 by rpki-client