Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
File: 4z5OBZxk_xm-EKehUEV1YeRV0U8.mft (raw, json)
Hash identifier: 8UJRasQQ5YkSjpeZo20qHb3ppoNEVMeNXBxReWlOCv8=
Subject key identifier: B6:81:67:4A:18:0F:EB:FE:BD:6D:14:5A:81:1F:FD:3C:DE:5D:75:D2
Authority key identifier: E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
Certificate issuer: /CN=e33e4e059c64ff19be10a7a150457561e455d14f
Certificate serial: 01A13E26A152A1711D1587F9B3A985E5CA97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
Manifest number: 0BAD
Signing time: Thu 15 Oct 2026 06:01:21 +0000
Manifest this update: Thu 15 Oct 2026 06:01:21 +0000
Manifest next update: Fri 16 Oct 2026 06:01:21 +0000
Files and hashes: 1: 4z5OBZxk_xm-EKehUEV1YeRV0U8.crl (hash: B3yYGxmTfqXCwZCS1fI6iyf9iRugbOkJuG21P0evfu4=)
2: u7z3f5MyS6Pn44Y8ceWPcFJRqYE.roa (hash: wWTcWByT+kygfV9+kd/6R30QexArvjCPKfIUysPXkgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:a1:52:a1:71:1d:15:87:f9:b3:a9:85:e5:ca:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33e4e059c64ff19be10a7a150457561e455d14f
Validity
Not Before: Oct 15 06:01:21 2026 GMT
Not After : Oct 16 06:01:21 2026 GMT
Subject: CN=b681674a180febfebd6d145a811ffd3cde5d75d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:db:11:c5:73:ce:0c:a7:66:f6:d1:66:f5:60:
3f:6c:ce:c2:aa:41:47:53:e9:e2:d5:39:95:1c:08:
8a:6e:dd:6d:5b:46:35:20:b7:ae:85:f8:92:3f:46:
bb:82:dc:11:91:e4:96:d7:02:93:c7:7c:62:67:b1:
3f:62:3c:93:e8:22:34:c0:1c:1a:ef:c4:78:60:9b:
88:cd:83:b9:20:68:6c:a3:cb:94:19:46:e6:51:dc:
f1:bd:f0:82:a8:e1:5e:bd:f2:d0:3e:7c:c1:d3:dc:
d4:05:69:ee:ba:c0:a9:d6:ff:bd:b0:9b:e5:a5:e2:
46:6f:cc:fe:6f:11:e0:78:c6:1b:74:f8:f6:fa:4f:
d7:93:87:fe:60:f0:11:8a:85:60:45:f4:eb:17:34:
53:2f:2a:47:57:54:33:09:3c:ec:9b:f0:5f:96:f0:
a4:c4:0b:b0:31:27:cf:03:00:8b:bf:93:94:b1:45:
4a:e2:62:14:40:50:bd:2d:19:81:b1:94:6a:2f:7e:
87:a7:a0:cd:5c:31:60:0c:40:89:10:a5:48:46:ac:
34:1b:d3:9a:d5:9d:8a:26:de:35:41:9e:da:33:04:
1b:43:a9:87:09:b1:bd:d3:22:82:d0:a8:ef:f3:b5:
aa:9f:43:c3:76:b0:76:c9:e6:cb:3b:8a:cf:3c:ce:
74:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:81:67:4A:18:0F:EB:FE:BD:6D:14:5A:81:1F:FD:3C:DE:5D:75:D2
X509v3 Authority Key Identifier:
keyid:E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:54:7c:e0:1c:b5:36:1a:8c:54:b4:f1:ba:43:c3:df:c1:d4:
28:f6:27:f6:cb:d5:a5:53:81:04:0a:24:94:7a:bb:75:3b:93:
88:7f:5f:8c:fb:9f:b4:fb:a0:4f:9a:be:82:1b:eb:84:0f:14:
3c:99:44:0d:96:d9:f0:2b:f7:8e:bd:c9:db:20:49:bf:09:00:
cb:0d:8b:c3:69:13:99:8a:d7:77:bb:87:82:99:68:12:3c:bb:
09:8b:7e:6d:63:27:bb:84:0b:73:26:52:18:bd:77:89:e1:03:
82:8c:e8:ca:d1:e8:3e:7a:76:16:de:16:ad:bc:f5:45:9c:02:
46:d2:5f:d9:3d:01:86:00:f7:27:25:69:e3:17:fe:1d:9d:c4:
d5:79:7f:4b:36:99:6b:2d:55:0e:a9:73:9e:ee:df:51:84:ae:
a3:76:a1:b9:c5:70:a4:73:92:02:36:6a:ae:ab:75:3c:60:f3:
49:72:18:c7:cf:79:ed:8f:cc:84:c7:e1:47:f2:b0:9a:35:5e:
c5:45:bf:b4:3f:fa:37:1b:54:b5:82:6d:88:c7:45:d3:7c:e0:
65:8d:ab:9e:1e:35:dc:c8:e5:81:d4:ef:19:0a:4c:20:83:bb:
b3:1c:66:31:a8:5a:7e:88:7b:cc:5a:25:fe:d4:97:fa:44:84:
30:78:bf:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:26:04 2026 by rpki-client