Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/4ecyzbRE2qPWyXo6p-olYWNppfo.mft
File: 4ecyzbRE2qPWyXo6p-olYWNppfo.mft (raw, json)
Hash identifier: VdS3V64umHG1l5YqENnPF3ui45ZEpAzJnIx8oSCy3Z4=
Subject key identifier: 46:71:6C:35:AE:FA:5B:03:32:A4:BE:BE:07:42:A0:4D:C4:BD:F8:F1
Authority key identifier: E1:E7:32:CD:B4:44:DA:A3:D6:C9:7A:3A:A7:EA:25:61:63:69:A5:FA
Certificate issuer: /CN=e1e732cdb444daa3d6c97a3aa7ea25616369a5fa
Certificate serial: 01A1841A4A7DC5EC9E8178143D1FB3E67CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ecyzbRE2qPWyXo6p-olYWNppfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/4ecyzbRE2qPWyXo6p-olYWNppfo.mft
Manifest number: 0143
Signing time: Wed 28 Oct 2026 20:01:17 +0000
Manifest this update: Wed 28 Oct 2026 20:01:17 +0000
Manifest next update: Thu 29 Oct 2026 20:01:17 +0000
Files and hashes: 1: 4ecyzbRE2qPWyXo6p-olYWNppfo.crl (hash: KYfG3cAc1FeAGW8lAAUocv2T6zSd5U6y4HOgo5ccKv0=)
2: 8L93OfrXNzkgMRsqTKLGqIh_Piw.roa (hash: DHNZYsv/LygcgjjRo9/VWopDIXTk+Rujtrd6cyZ7HBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/4ecyzbRE2qPWyXo6p-olYWNppfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/4ecyzbRE2qPWyXo6p-olYWNppfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ecyzbRE2qPWyXo6p-olYWNppfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:1a:4a:7d:c5:ec:9e:81:78:14:3d:1f:b3:e6:7c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e732cdb444daa3d6c97a3aa7ea25616369a5fa
Validity
Not Before: Oct 28 20:01:17 2026 GMT
Not After : Oct 29 20:01:17 2026 GMT
Subject: CN=46716c35aefa5b0332a4bebe0742a04dc4bdf8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0d:bf:05:ad:83:cb:f5:97:c5:21:d4:34:00:
c8:8b:24:c2:20:03:36:0b:d3:d3:e5:fd:e4:95:32:
04:78:1a:3b:12:0f:90:15:d9:13:c5:99:23:20:57:
e4:2b:0d:1c:ac:98:de:95:99:a9:3b:01:3a:92:68:
d8:9e:bf:13:0d:90:d9:5e:57:d3:a1:7d:cd:05:56:
f1:77:d9:fa:00:d1:0b:e1:77:b8:8a:98:b6:a5:98:
70:2a:2d:53:69:94:f4:88:d5:28:b9:10:ad:6d:43:
82:15:d6:2f:ca:73:4b:f3:d1:07:ff:f2:64:34:8a:
97:4a:ba:b9:9e:39:ac:c7:f3:0e:a8:52:25:66:8b:
05:fc:37:ab:4f:cb:dd:df:67:f4:89:ba:b7:c0:69:
72:4d:5e:8e:54:5c:ae:2d:fe:f6:af:6a:ae:af:e9:
a0:db:eb:13:da:09:c2:69:67:4f:20:8c:a5:cf:46:
67:fc:16:1c:d8:09:52:0f:8f:50:9f:10:17:1b:df:
b8:64:74:31:ca:63:4c:a8:a9:1e:5d:62:91:65:95:
d6:78:53:e7:a6:a8:86:23:7e:8f:f3:67:b3:42:e6:
ca:1c:3d:b5:43:f6:18:a0:78:f5:5b:57:19:90:04:
b8:97:d1:1b:49:4c:cc:3a:8a:79:88:f2:ae:a1:68:
6d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:71:6C:35:AE:FA:5B:03:32:A4:BE:BE:07:42:A0:4D:C4:BD:F8:F1
X509v3 Authority Key Identifier:
keyid:E1:E7:32:CD:B4:44:DA:A3:D6:C9:7A:3A:A7:EA:25:61:63:69:A5:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ecyzbRE2qPWyXo6p-olYWNppfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/4ecyzbRE2qPWyXo6p-olYWNppfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/4ecyzbRE2qPWyXo6p-olYWNppfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:73:ab:1a:10:20:7f:c9:b5:ff:9f:00:b9:d3:7c:73:2d:fb:
9a:a5:f7:09:7d:a9:42:80:49:ea:15:5a:af:9e:c4:d4:20:5b:
e7:25:d1:20:92:58:d2:81:5b:6e:46:73:65:2c:d2:13:4d:d5:
41:43:a5:f3:82:7e:e1:51:f5:56:5a:a7:d0:41:51:db:54:e8:
61:2a:e8:5f:34:46:a9:f3:44:6b:57:b1:a7:b1:16:38:13:a6:
f8:35:9e:ac:9c:46:c0:ef:ef:4f:ef:ee:11:a9:52:a6:d8:a0:
94:8a:c8:e4:aa:ae:2f:ed:cc:d1:3a:84:d7:14:33:69:ac:e3:
f3:ac:1b:2e:f7:7c:b1:d4:e3:75:51:0e:bf:af:64:d8:43:8c:
fd:72:ae:c3:ed:3d:5b:a8:6f:32:61:77:08:eb:8e:0e:e6:2c:
65:e0:52:4e:88:91:6b:3e:11:f6:3e:16:5c:1a:f3:1b:95:0c:
b4:3b:e0:52:dc:cc:bf:a2:aa:0e:ef:b7:83:b0:ca:e2:85:26:
75:eb:3a:54:c6:6f:0f:68:2e:25:a1:17:f3:e5:c6:0a:6f:a4:
7f:a2:5f:c6:98:e7:ed:5f:9b:92:d8:93:46:51:b1:2a:e1:c7:
d3:8b:b0:dc:05:5e:7e:b1:0c:8b:77:bc:59:5e:f8:0a:41:bc:
11:5d:11:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:50:06 2026 by rpki-client