Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
File: 4KE7ki7n67muzeGacNDiW3d1DQI.mft (raw, json)
Hash identifier: L7P3yr7JZ6WGq6BFqnZN0MbWXGRkIkHXQghJLl+1DLY=
Subject key identifier: B6:7A:CF:43:F8:FE:D9:25:D3:64:63:0A:59:02:F1:AA:C3:41:DE:C0
Authority key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
Certificate issuer: /CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Certificate serial: 01A13E94E642D3C49ED34B3A4B804C9414B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
Manifest number: 1098
Signing time: Thu 15 Oct 2026 08:01:48 +0000
Manifest this update: Thu 15 Oct 2026 08:01:48 +0000
Manifest next update: Fri 16 Oct 2026 08:01:48 +0000
Files and hashes: 1: 4KE7ki7n67muzeGacNDiW3d1DQI.crl (hash: rKq3iB2YDBSLZoECVmfWzYF7HTzUswmETH8zsCaEaQM=)
2: k6jNcpaTNPSlXj617Gg3gS62Bto.roa (hash: 8LQYJjtnAC4ChUuR0xJhVpC5xdVYrcixNySIFaow6HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:e6:42:d3:c4:9e:d3:4b:3a:4b:80:4c:94:14:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Validity
Not Before: Oct 15 08:01:48 2026 GMT
Not After : Oct 16 08:01:48 2026 GMT
Subject: CN=b67acf43f8fed925d364630a5902f1aac341dec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:f7:3c:a2:3b:1c:d8:a8:0c:ba:05:b2:32:
ad:cf:23:bf:67:c8:f4:4a:90:71:f6:59:4c:ce:04:
f1:43:93:6e:1c:80:97:b3:97:72:a5:61:e5:26:e7:
e2:48:f3:0d:08:6e:c5:c6:c8:10:4a:de:c8:bf:07:
86:4a:9b:50:34:8d:8b:ea:f2:fb:30:ee:be:68:56:
99:1d:42:89:cb:29:17:2c:39:2b:9e:a3:da:65:75:
8a:20:50:fd:45:0f:bb:7a:c9:d1:ab:27:c0:2c:46:
31:15:eb:b8:49:cd:46:c9:35:40:5c:75:72:3e:d7:
de:86:5e:97:0f:b0:35:40:49:71:c4:a3:70:fd:a2:
67:16:ec:e8:e7:57:fe:26:c6:cf:66:54:af:bd:77:
90:8b:d4:11:d6:a3:5c:9a:f0:d4:c0:91:41:53:ce:
70:fb:c6:de:55:98:4c:04:96:24:b3:e3:30:ba:5a:
33:5c:6f:a4:bd:83:51:23:8c:44:1f:49:2a:17:e0:
45:d2:c6:06:0d:18:f2:dd:3d:a0:94:fb:cc:d0:0f:
e3:0d:90:5a:37:28:0c:8a:85:00:e5:53:b2:e3:da:
a0:97:c9:ca:96:d4:99:88:c9:a0:3c:72:ff:41:16:
58:36:c4:37:d8:64:0e:df:1c:c2:62:06:1f:ca:79:
59:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7A:CF:43:F8:FE:D9:25:D3:64:63:0A:59:02:F1:AA:C3:41:DE:C0
X509v3 Authority Key Identifier:
keyid:E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a7:f9:4c:f2:35:70:5e:03:30:f0:80:e9:1e:0a:e5:14:8b:
cd:ec:19:0e:7d:f1:7c:27:d1:2f:3f:b6:1e:6a:94:8c:76:ea:
73:0e:c2:3c:8c:24:ec:d5:02:24:34:be:8d:84:81:d0:71:d8:
ea:40:f2:05:b5:4d:9a:cc:1b:bc:64:c7:69:b8:dd:7e:e5:4d:
29:8d:e5:be:ee:12:3a:a8:92:65:a1:c3:49:18:1a:b1:a6:04:
08:d1:9c:7d:84:76:2e:1e:a2:e6:88:78:27:c8:64:82:b0:65:
ee:8f:a6:72:c5:83:cf:7c:db:71:45:43:3e:17:cf:2d:86:19:
68:af:d4:4c:01:66:23:1d:d7:b2:56:e9:f4:04:1c:e0:f9:d2:
9e:7b:83:2d:10:30:58:82:f1:5a:59:d2:9b:d6:94:a6:21:ff:
9b:1c:f1:3d:a2:54:c1:a4:24:da:17:fb:22:cf:e9:66:f6:0f:
94:41:eb:d4:70:7a:e3:c5:13:a1:25:e1:cd:fd:00:61:8c:95:
ef:52:d0:43:eb:f5:0b:f7:c2:68:f5:52:fc:5f:38:54:f5:cd:
db:7b:fd:da:ce:8a:e3:af:a1:59:c7:a2:fa:12:e2:8f:0a:50:
55:8d:51:0b:c4:08:d0:b5:ba:d5:03:46:1e:33:7e:b0:4a:ba:
92:d8:24:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:21:25 2026 by rpki-client