Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
File: 4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json)
Hash identifier: 6j561dpWLtpKt8OmwrhnVCkBHF8jb/4nVad56Tk2uGw=
Subject key identifier: A5:E6:A9:79:A6:7C:73:84:26:DE:89:15:94:59:59:CB:00:50:B3:D1
Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac
Certificate serial: 01A08B9EF61FB06927ED8402883A0F02C2F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
Manifest number: 1858
Signing time: Thu 10 Sep 2026 14:00:45 +0000
Manifest this update: Thu 10 Sep 2026 14:00:45 +0000
Manifest next update: Fri 11 Sep 2026 14:00:45 +0000
Files and hashes: 1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: tvcWkPCM1THgrGPs5xtS1V3oM3aL94G+YYAAqq/nLVw=)
2: E582u3b_wirr6G_w4u9uogz74z8.roa (hash: 81B6PrtCWAN/tZ4dAD4doQginsu0czWU20EU6ygqMqw=)
3: XzHwdc8CnV6b37aUuwbB9K5aCVg.roa (hash: Ajp8GTPxK9A3C7R9uHBAngG8he1JSPPWTWmru9BuMHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9e:f6:1f:b0:69:27:ed:84:02:88:3a:0f:02:c2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac
Validity
Not Before: Sep 10 14:00:45 2026 GMT
Not After : Sep 11 14:00:45 2026 GMT
Subject: CN=a5e6a979a67c738426de8915945959cb0050b3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:27:9e:6f:c0:34:4c:72:a0:c1:b4:86:6d:
53:01:bd:28:86:12:6d:e7:88:9a:24:41:e3:ab:a3:
58:1c:fa:89:fe:e4:1e:f8:cf:e8:45:d2:c6:ff:f6:
2c:07:85:f2:bf:89:29:66:6b:f0:e2:e0:14:de:51:
18:75:91:46:3c:73:f7:42:b3:26:8e:26:bc:72:cf:
d0:a2:08:05:4e:bb:70:bc:90:2c:3c:32:1c:c7:63:
11:79:5a:0e:4f:d9:5d:38:05:43:fe:3c:2a:ac:bf:
41:bd:17:0f:2f:0b:8c:24:80:64:cf:1e:2b:cb:10:
f7:91:1f:31:99:8a:85:ee:56:c0:a3:b0:dd:47:7c:
9c:49:0c:fb:f1:ca:f4:83:c6:ee:42:7a:16:3e:af:
73:ea:cb:9c:ca:70:29:c9:e2:70:04:54:5d:8e:99:
f8:1e:cf:93:da:ad:01:5c:1d:01:9f:7d:08:9d:45:
ca:96:06:8e:90:d2:c5:5e:ec:be:10:f1:cf:47:8f:
16:0a:91:69:4c:97:a6:cd:84:db:67:80:1d:07:2f:
f5:71:0c:7b:e8:68:b4:8c:b9:5d:7f:dc:60:39:ce:
0c:6b:d5:5f:5d:04:4b:d2:ca:2b:c4:ce:ff:5a:cb:
62:a2:ff:d3:d9:83:00:97:12:35:13:cb:1d:6f:36:
37:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E6:A9:79:A6:7C:73:84:26:DE:89:15:94:59:59:CB:00:50:B3:D1
X509v3 Authority Key Identifier:
keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:06:6a:6b:69:b7:b4:ae:34:5a:db:c4:45:de:b6:f9:8b:5c:
0d:09:0a:6e:cb:a3:dd:3a:87:0d:11:c9:3d:d2:02:1f:f0:cb:
31:e1:ad:c8:9b:19:0a:d5:b2:f2:5b:bd:aa:bd:60:35:6f:94:
56:cc:2c:5d:b4:d9:3f:c1:3b:34:c6:21:65:7a:a5:0f:ac:11:
7e:20:87:19:b3:16:0c:08:fa:1c:b7:86:df:f9:a4:99:e6:ad:
2c:72:b5:34:67:c4:2b:c5:55:a3:41:65:08:5f:f3:59:1a:a1:
89:e2:34:44:cc:6d:ef:4a:e1:09:f6:8b:ff:34:c7:ad:9d:75:
26:3b:09:78:58:4b:15:6e:06:00:ba:9b:db:0c:ea:b7:65:1b:
ed:4c:68:8d:a0:5a:5b:a2:c2:9c:83:f6:7d:f0:95:fc:2a:66:
d7:65:e5:6d:a8:4b:e3:8e:61:ed:b9:b4:8a:68:d3:54:e4:38:
88:00:14:1c:35:71:9d:67:87:6a:fd:94:22:bb:95:9c:82:c2:
9b:64:b3:3a:fa:49:7f:58:8f:c3:5a:79:aa:14:93:ba:2e:b4:
b8:7b:30:00:9f:86:8a:74:8e:67:f0:4a:5e:51:67:c2:de:b0:
da:98:85:bf:c7:62:46:9d:00:1b:6c:c6:04:2e:4f:b3:13:c9:
03:ba:c2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:29:30 2026 by rpki-client