Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json)
Hash identifier: 1/m6r9pHKHsXdcsexvNM27+uvDQC604Czn8KPCG3jzc=
Subject key identifier: 46:2E:4C:56:C5:C1:8E:0E:AB:1C:7A:40:9B:48:94:FE:6E:A1:5D:F6
Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Certificate serial: 01A06EA72CB9F4679800A5D4CC9A867DFFAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
Manifest number: 08BA
Signing time: Fri 04 Sep 2026 23:00:44 +0000
Manifest this update: Fri 04 Sep 2026 23:00:44 +0000
Manifest next update: Sat 05 Sep 2026 23:00:44 +0000
Files and hashes: 1: 1-WO0GACqy-eA17PZxSHorJ0nbCw.roa (hash: APG9pmhKy9iTCKXEjwonpREIrLwqDEbWbVud/9m5R4k=)
2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: B7196SieJBbeZzYy9J7Jf0k2vErhXLl0Yx1wLka7XW0=)
3: jrdUT9ZxJxzqlMRnHVJnnefEJPE.roa (hash: FxYjIY5awSFaZzGjU6N3ODWHu4ZSbBlhd+wx8DBxv6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:2c:b9:f4:67:98:00:a5:d4:cc:9a:86:7d:ff:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Validity
Not Before: Sep 4 23:00:44 2026 GMT
Not After : Sep 5 23:00:44 2026 GMT
Subject: CN=462e4c56c5c18e0eab1c7a409b4894fe6ea15df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ac:7a:61:92:e1:01:11:a4:4b:8c:90:68:5e:
14:b6:18:20:3a:4c:3d:5f:6b:b0:90:6c:d8:0e:cb:
85:fd:c0:32:55:c4:8e:7f:63:e8:ad:31:04:20:52:
11:aa:66:c0:44:46:4c:f6:a9:98:04:14:2f:17:7e:
49:d2:12:46:e5:c5:f4:94:1e:59:c6:fb:d9:98:ff:
60:39:d6:f0:a9:37:26:2f:b8:0b:5d:f8:92:07:24:
05:70:cf:1e:16:62:94:fb:f6:2d:81:1f:c6:f0:24:
34:c8:62:69:04:14:cf:92:07:cd:bc:1e:b0:f9:4d:
e1:dc:5d:d8:ae:dd:6e:62:c2:90:cf:07:f0:31:3a:
d3:ac:96:44:0d:6f:f1:9f:53:c6:70:ea:c3:b4:dc:
f9:6e:45:b0:09:20:e2:26:66:40:21:cf:5c:90:c7:
02:43:83:b9:2e:ae:a4:21:73:6f:04:13:bf:03:50:
15:0e:04:21:02:ed:f5:87:51:be:96:30:3e:d6:ed:
a7:77:1a:bc:d5:5f:d6:6b:a4:f8:f8:14:0f:fa:b0:
0e:f0:5e:eb:30:c1:29:29:d9:6b:ff:85:a2:02:cd:
be:09:4f:b6:c9:59:f0:0c:b9:4f:2b:6e:a1:12:e3:
b9:2f:ae:44:50:8e:60:c5:9e:89:4a:e8:2a:d2:2a:
0d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2E:4C:56:C5:C1:8E:0E:AB:1C:7A:40:9B:48:94:FE:6E:A1:5D:F6
X509v3 Authority Key Identifier:
keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6f:4e:74:5f:ac:2f:68:92:de:a1:61:00:84:06:4e:e4:7c:
dc:24:d1:36:4e:fb:98:7f:2e:f2:2f:82:c4:97:1b:82:45:27:
6d:e1:76:e7:cd:14:63:37:8f:f2:40:4b:8d:84:41:be:63:f9:
ba:0a:4b:d1:26:9e:67:07:b5:28:f2:33:6c:49:35:d0:b5:35:
4a:24:4b:ca:26:b1:cb:6c:6c:04:a8:15:42:3b:49:23:73:eb:
50:cb:2f:4c:b1:81:66:2e:75:2d:82:5a:14:57:b1:60:66:f7:
51:55:00:27:a1:81:38:0d:23:4f:69:e4:0d:a1:fb:51:38:0a:
58:8e:69:dc:b5:92:0c:ab:af:ac:ad:aa:6d:de:34:b5:b1:58:
80:0f:0b:5f:99:b1:c5:48:d5:96:8e:6f:26:fd:9d:46:72:da:
ee:49:a5:b6:8f:92:5a:50:7c:8f:95:eb:5f:f9:f4:4a:6a:e4:
3f:5b:f4:00:e9:88:60:91:7e:07:35:31:7f:e0:2f:7f:fa:b0:
c7:4f:cc:77:f0:a0:a9:c1:7e:7a:2f:12:08:d1:ee:d3:8c:17:
2e:55:84:2d:11:00:19:c6:2a:20:b0:a1:a3:0f:38:9d:de:85:
4c:f0:96:bd:02:ce:9b:90:89:4e:2e:64:01:11:d7:44:17:57:
aa:ea:2d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:07:39 2026 by rpki-client