Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
File: 4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json)
Hash identifier: gc871R8K4bO7kZdaeMdbE3Fv90/IEukPCjLXYTsAqNQ=
Subject key identifier: 10:AE:8A:2E:27:B5:9E:CA:57:6C:7F:9A:9E:07:75:71:85:9A:69:BD
Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac
Certificate serial: 01A180E27523FF2D164EA2E3278935CA04CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
Manifest number: 18D7
Signing time: Wed 28 Oct 2026 05:01:27 +0000
Manifest this update: Wed 28 Oct 2026 05:01:27 +0000
Manifest next update: Thu 29 Oct 2026 05:01:27 +0000
Files and hashes: 1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: cNmkli0HsEjXLkNP71FJOAY6I2TdUBOWzKmGBtSo/LI=)
2: E582u3b_wirr6G_w4u9uogz74z8.roa (hash: 81B6PrtCWAN/tZ4dAD4doQginsu0czWU20EU6ygqMqw=)
3: XzHwdc8CnV6b37aUuwbB9K5aCVg.roa (hash: Ajp8GTPxK9A3C7R9uHBAngG8he1JSPPWTWmru9BuMHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:75:23:ff:2d:16:4e:a2:e3:27:89:35:ca:04:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac
Validity
Not Before: Oct 28 05:01:27 2026 GMT
Not After : Oct 29 05:01:27 2026 GMT
Subject: CN=10ae8a2e27b59eca576c7f9a9e077571859a69bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a8:8e:05:e1:84:84:c9:e3:ba:7b:9d:ae:84:
b5:fe:37:69:8f:8a:cf:d8:9e:d6:91:8c:68:2a:c1:
d4:4f:4f:a9:34:bc:13:a5:04:cf:eb:dc:67:3f:61:
0f:58:bd:98:42:81:d5:b6:b8:97:c9:f1:7c:60:a2:
de:9c:6b:57:de:5a:92:94:21:d2:b2:12:0b:2c:ae:
63:06:68:ff:3a:cd:61:98:cf:56:98:40:73:92:3d:
f6:72:75:f6:1b:81:56:90:c8:a0:62:d7:57:71:00:
44:9f:1c:eb:ff:13:aa:79:3f:9e:3e:c5:a8:3d:d0:
87:43:34:a5:33:e1:d5:9c:33:9a:73:ff:e5:58:77:
55:c0:38:ad:62:6c:1e:10:28:e8:2e:71:a3:15:a7:
86:f9:6d:15:6c:ea:e7:64:40:ad:c6:37:09:3d:d5:
07:e5:75:35:4b:ad:00:5f:ea:f3:c1:c6:0e:d2:0e:
9b:83:ac:d7:bb:5b:e9:9b:84:5e:a8:40:09:1b:b1:
4a:b3:72:9a:ce:b0:b7:46:92:47:df:70:a5:d1:ce:
8d:ca:78:d3:bc:f6:a1:13:61:ca:b0:f7:43:76:82:
ea:92:b6:b0:8d:07:f4:16:df:4d:41:6f:6f:39:ef:
42:68:16:6c:73:57:b2:ea:80:b9:e6:3f:88:a8:59:
16:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AE:8A:2E:27:B5:9E:CA:57:6C:7F:9A:9E:07:75:71:85:9A:69:BD
X509v3 Authority Key Identifier:
keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e5:39:ff:8d:52:44:96:c6:e5:4f:50:0b:dd:4c:c3:e6:a9:
71:77:25:6d:f1:8b:8c:e6:ff:ff:bc:8d:c8:b0:1a:e7:fd:ab:
9a:63:83:fd:3c:03:a8:bb:47:51:23:4f:a5:01:fa:7c:0b:06:
be:34:71:ad:9a:25:3c:a2:03:b9:c4:f6:aa:f7:e1:b2:c9:45:
e2:63:7c:97:7b:85:25:f8:77:bb:80:ee:fb:4f:e3:95:47:b8:
e8:6a:f7:04:20:b8:06:3f:8d:57:19:be:68:d3:10:03:41:5b:
35:50:9a:45:af:05:30:51:cf:95:29:0a:40:db:e0:a0:b8:01:
d8:05:de:95:54:11:5c:23:18:53:4f:be:f9:e8:5d:21:42:42:
e1:15:6e:be:1a:af:90:28:72:58:d3:55:1b:69:43:91:f4:9c:
c5:e9:d2:24:c8:73:6a:12:d7:7b:ea:ed:de:08:78:63:dc:77:
2d:9a:b6:c8:5a:e2:e3:c9:fe:e0:6a:68:79:f1:5e:7c:e1:5e:
4f:52:69:13:60:6a:dc:ef:4c:60:00:a7:8c:cf:df:2e:5c:f8:
0b:1e:46:70:6c:fb:f4:28:b3:64:0f:2e:89:fe:ae:83:1b:0c:
9d:49:3b:92:70:6b:70:c0:bc:db:7f:a2:4b:d2:37:f2:62:46:
17:87:dc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:33:33 2026 by rpki-client