Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/e125c3-f59d-49dc-8269-9d55d7264c06/1/4Mxbbak5Zm35XEkAYpGP-RYkmWE.mft
File: 4Mxbbak5Zm35XEkAYpGP-RYkmWE.mft (raw, json)
Hash identifier: TxObPAWyjySWEyqVW33cNVjNcww5+gXiYPkhYaNKsRs=
Subject key identifier: F3:B1:35:01:66:9B:2F:55:AD:A6:E3:CF:7E:A4:0F:6A:88:3C:06:1A
Authority key identifier: E0:CC:5B:6D:A9:39:66:6D:F9:5C:49:00:62:91:8F:F9:16:24:99:61
Certificate issuer: /CN=e0cc5b6da939666df95c490062918ff916249961
Certificate serial: 01A174701A21240B7D7C218CCC0367B0236C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Mxbbak5Zm35XEkAYpGP-RYkmWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/e125c3-f59d-49dc-8269-9d55d7264c06/1/4Mxbbak5Zm35XEkAYpGP-RYkmWE.mft
Manifest number: 30
Signing time: Sun 25 Oct 2026 19:01:06 +0000
Manifest this update: Sun 25 Oct 2026 19:01:06 +0000
Manifest next update: Mon 26 Oct 2026 19:01:06 +0000
Files and hashes: 1: 4Mxbbak5Zm35XEkAYpGP-RYkmWE.crl (hash: bBfQlyLkbBsFNclXXVi1ZQs2EAQkyEj548J3oLbLEtY=)
2: _AdqA34Rs9fSEmoCitgOinUPeoE.roa (hash: ayfoPH4goU9aMAT5hgz1poeC/uoPLIDsNMYCFtYJA8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/e125c3-f59d-49dc-8269-9d55d7264c06/1/4Mxbbak5Zm35XEkAYpGP-RYkmWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/e125c3-f59d-49dc-8269-9d55d7264c06/1/4Mxbbak5Zm35XEkAYpGP-RYkmWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Mxbbak5Zm35XEkAYpGP-RYkmWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:70:1a:21:24:0b:7d:7c:21:8c:cc:03:67:b0:23:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0cc5b6da939666df95c490062918ff916249961
Validity
Not Before: Oct 25 19:01:06 2026 GMT
Not After : Oct 26 19:01:06 2026 GMT
Subject: CN=f3b13501669b2f55ada6e3cf7ea40f6a883c061a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:e2:56:f2:0c:0e:7c:2b:90:ec:b2:2f:b9:
8f:bd:09:15:93:27:4d:8c:96:27:07:66:e7:45:3c:
ea:34:0e:52:a1:8a:b0:e3:13:61:8d:90:c0:d5:71:
0e:ce:6e:c7:1b:04:11:31:a1:96:9c:f7:c8:20:03:
2c:03:45:1a:e5:cd:84:82:52:e4:9c:89:35:08:18:
34:66:58:4a:89:ae:1f:94:88:33:5f:e3:47:0e:31:
3c:0c:b4:5e:a3:38:fb:55:69:7e:13:56:1b:c2:41:
83:65:d0:4d:2e:20:aa:bd:18:1c:8d:96:82:1b:57:
c3:61:ab:8a:c7:54:4a:e6:2c:3d:ef:34:39:c2:d1:
c7:03:8c:33:b4:65:f8:6c:12:06:d7:f8:64:9f:a6:
06:44:13:b9:0e:19:51:c5:29:0d:ff:df:29:dc:60:
2b:01:cc:68:74:40:f6:8a:4d:62:0e:b1:a5:dc:0d:
0e:4b:c4:90:6b:2f:16:9f:1c:23:f9:1f:d8:94:e7:
9b:18:31:71:49:0d:cc:96:99:e8:50:c7:25:ea:eb:
a2:53:02:37:82:3b:fa:8e:7b:6f:7d:8c:a2:cc:23:
5a:4e:5f:6c:f9:e6:f0:a9:e9:c0:c7:69:5f:13:37:
8f:bb:3f:e8:73:c3:6e:b8:51:76:32:ed:58:37:18:
c9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B1:35:01:66:9B:2F:55:AD:A6:E3:CF:7E:A4:0F:6A:88:3C:06:1A
X509v3 Authority Key Identifier:
keyid:E0:CC:5B:6D:A9:39:66:6D:F9:5C:49:00:62:91:8F:F9:16:24:99:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Mxbbak5Zm35XEkAYpGP-RYkmWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e125c3-f59d-49dc-8269-9d55d7264c06/1/4Mxbbak5Zm35XEkAYpGP-RYkmWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e125c3-f59d-49dc-8269-9d55d7264c06/1/4Mxbbak5Zm35XEkAYpGP-RYkmWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:34:21:22:b8:e7:eb:ee:f3:5b:24:e5:a0:20:24:b2:91:63:
30:4c:7b:6b:f4:77:33:97:64:cc:0f:ca:93:13:d3:8e:a3:22:
f7:46:50:5e:c5:7c:b8:1b:2c:19:78:6e:7a:5b:7d:eb:c6:3e:
ec:4d:ed:9b:e4:f2:01:ad:30:61:15:d8:6f:88:15:8a:2a:6a:
b6:b4:67:16:a3:aa:09:86:aa:8f:5e:ed:5f:73:2f:56:dd:bd:
9c:cd:a6:a7:c1:73:48:be:56:09:f7:7d:00:47:6a:6b:38:e2:
6d:dd:d7:e8:08:cf:34:99:59:60:99:32:71:54:e7:63:57:8c:
9f:56:32:7a:fc:3e:92:33:f2:26:37:e3:8f:b3:b6:96:93:91:
34:d3:f1:45:05:ea:f0:99:53:63:24:52:02:db:e1:e6:8f:66:
1f:00:ad:17:95:c1:e2:63:43:2f:c3:01:61:b5:47:2b:a9:e5:
b1:9d:be:fc:83:19:63:50:56:cc:6d:aa:4a:d9:7b:33:fe:62:
32:c1:23:fc:34:af:bd:1e:c8:d1:bf:6a:22:ea:54:7f:f1:ab:
63:23:48:5c:a3:8a:d2:09:78:6e:12:02:ef:30:4e:e4:2e:05:
c1:06:e9:48:8c:56:76:de:a0:de:c1:3e:a1:67:59:77:e0:22:
53:9e:b1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:20 2026 by rpki-client