Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
File: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft (raw, json)
Hash identifier: 99BmwlrPeeocRovBySJebp0Sjb2XoFb8Vgakh8TzNGM=
Subject key identifier: BF:75:2D:9D:AB:C1:60:DC:EA:15:1B:82:1B:37:97:AD:04:8B:A1:D7
Authority key identifier: E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
Certificate issuer: /CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Certificate serial: 01A13F027D64289F1332B0A41FCAEABB6CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
Manifest number: 07C0
Signing time: Thu 15 Oct 2026 10:01:30 +0000
Manifest this update: Thu 15 Oct 2026 10:01:30 +0000
Manifest next update: Fri 16 Oct 2026 10:01:30 +0000
Files and hashes: 1: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl (hash: znioyS9ZViy38avijg/Bls8q+qKCJT0hfCHqKs3QH3s=)
2: mX8HnTFvLthfSZ2ZAzBIL5WiGxo.roa (hash: JasekT6eOU4dUWNEwUdVF7G0JwY0SRq9zwzctkh7yh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:7d:64:28:9f:13:32:b0:a4:1f:ca:ea:bb:6c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Validity
Not Before: Oct 15 10:01:30 2026 GMT
Not After : Oct 16 10:01:30 2026 GMT
Subject: CN=bf752d9dabc160dcea151b821b3797ad048ba1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:6e:10:92:80:27:2e:1d:6e:9b:b5:9f:b4:
c1:71:65:38:b9:c7:1b:60:22:b7:5a:92:e6:a4:6d:
f0:d9:6e:5e:85:1f:fb:43:47:63:6c:0b:ed:97:ad:
4d:ea:ff:98:93:1b:62:56:a4:03:dc:f9:37:19:c6:
ea:14:36:ee:e9:2b:1f:67:4f:64:d9:dc:ab:51:f6:
ec:28:9e:5d:5f:8c:a9:7a:52:a5:74:66:65:14:57:
a1:14:3d:34:90:0b:3b:68:5d:40:70:4c:45:ed:7b:
72:d4:08:65:24:dd:23:20:04:e1:95:db:2e:c0:13:
d7:8b:90:83:58:55:8c:94:65:56:81:fc:66:1c:f6:
93:f8:ee:de:ac:b9:01:04:ba:3d:51:72:c3:6a:d8:
7f:c2:c0:3c:f2:08:33:6a:26:d7:fb:1f:fa:ce:c1:
7b:8e:9e:f3:25:fc:b4:de:65:9b:c2:b9:85:2f:51:
da:8d:1b:9e:9a:9a:ba:58:d1:89:4c:8e:d1:fc:88:
2f:f8:47:8a:7f:c2:d9:87:b8:3e:d5:44:f6:9a:91:
af:68:1b:01:7c:ed:e6:aa:9f:da:ca:08:8c:c2:cc:
75:fd:35:ea:f2:d8:57:b0:67:3f:ae:15:aa:4e:2e:
c7:5e:62:f9:e4:69:35:17:0d:a1:a4:20:67:97:0c:
01:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:75:2D:9D:AB:C1:60:DC:EA:15:1B:82:1B:37:97:AD:04:8B:A1:D7
X509v3 Authority Key Identifier:
keyid:E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:c4:ce:3d:5b:92:13:46:7a:93:87:6c:23:b6:9a:e3:bc:ec:
49:48:2b:0a:47:d5:aa:a4:a1:1a:3c:3e:f2:1f:43:28:e4:e6:
1a:7d:d5:38:b4:de:51:48:91:44:63:fd:8d:50:28:59:5d:96:
88:59:40:3b:a2:9b:ac:30:93:34:f6:62:90:7c:91:60:32:a3:
d2:b3:73:38:33:de:6b:59:f1:9d:dd:16:6b:0d:f0:e5:60:c0:
8c:2e:23:d1:d2:6c:20:0d:ac:52:92:3e:93:eb:a6:9b:21:5b:
77:2b:db:4b:d4:be:79:37:1d:33:ef:a6:b5:ab:4a:17:06:d5:
8a:57:14:0c:c5:f0:fd:93:7a:be:ac:6d:fc:72:80:23:ea:f5:
10:30:32:42:2d:7b:1f:32:e7:4d:a3:c7:cf:3b:a6:72:d3:8a:
d8:b4:66:8e:ab:eb:f2:e4:09:26:62:2c:41:51:23:69:67:d1:
83:3a:db:ad:92:f4:16:9f:4b:5d:ad:29:f5:34:0c:48:29:73:
19:c5:e6:f0:d1:b2:ef:bb:10:38:47:47:17:64:55:71:05:11:
bb:21:5f:55:71:ea:26:17:79:0d:9d:58:a3:36:e2:92:81:e2:
9a:34:00:c5:b1:7b:6d:47:a2:7f:96:db:70:a5:75:82:6a:ea:
fd:77:49:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:22:08 2026 by rpki-client