Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
File: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft (raw, json)
Hash identifier: nKCfp9mOYSeAC0xUC0dChUFDSE3SvLLooYmL6kMk7Bc=
Subject key identifier: A8:DC:F5:B7:27:56:BD:DA:36:03:67:CB:AA:91:1F:8D:75:4B:A5:94
Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Certificate issuer: /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Certificate serial: 01A00093A1FB1442FCC5F05FC12BFDB48929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
Manifest number: 0D78
Signing time: Fri 14 Aug 2026 14:01:10 +0000
Manifest this update: Fri 14 Aug 2026 14:01:10 +0000
Manifest next update: Sat 15 Aug 2026 14:01:10 +0000
Files and hashes: 1: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl (hash: sdvfbdl1bq8W4Lb8rffKAeDIqfiylxNcKrL2WE/7S2g=)
2: Lb4QYGzxLdlZHywuLvkaZr8MbV8.asa (hash: djJmDLE7dgkUswvUuZUlXxmQuuCob6by6G/MEdD7z7s=)
3: s-PKc_tu2wV4rS8DFKDtN3pEWOo.roa (hash: RIeIk6mysjr3waBR5H6D0lD1jhhyLuowL03Fip2BNmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:a1:fb:14:42:fc:c5:f0:5f:c1:2b:fd:b4:89:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Validity
Not Before: Aug 14 14:01:10 2026 GMT
Not After : Aug 15 14:01:10 2026 GMT
Subject: CN=a8dcf5b72756bdda360367cbaa911f8d754ba594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:65:e5:18:f4:84:34:96:e8:4d:0e:a2:cd:83:
3b:c7:b8:43:67:80:c6:5b:a0:79:c3:b3:96:a8:d8:
a1:53:57:3c:74:0c:1f:47:df:aa:7b:01:8d:35:7b:
d1:25:8c:af:71:1f:46:34:e7:04:24:ed:93:81:5a:
10:b8:fb:51:fd:6f:2f:ae:a2:5e:3a:bd:78:2f:32:
6e:6b:3f:5b:31:34:c8:03:49:24:68:f6:a5:d1:45:
ca:db:d5:54:f9:04:bc:6a:69:98:e3:d0:30:96:17:
16:81:3b:00:3a:38:19:81:b6:af:7a:33:4f:73:6b:
95:3f:44:61:91:1f:95:be:79:f1:a7:6c:eb:d8:60:
df:a9:22:93:4f:e4:da:00:af:f7:41:4e:56:dd:13:
df:89:6d:f4:e4:18:47:50:68:3c:c1:a4:a9:ea:c5:
57:38:02:d6:a2:c3:a1:4c:a6:98:49:fa:dd:35:c7:
e1:d3:68:ea:d9:a5:b8:ef:38:3a:5a:f6:94:2d:7c:
06:da:5b:8b:05:05:96:c9:35:53:fe:24:78:c3:84:
91:04:e8:69:f7:01:75:6f:51:a3:6a:e7:94:f2:fd:
97:fb:b3:3a:05:59:ee:7f:87:5a:61:e8:28:ee:b7:
05:08:d9:f6:00:8b:04:64:f8:8c:b8:80:6d:6d:e2:
74:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DC:F5:B7:27:56:BD:DA:36:03:67:CB:AA:91:1F:8D:75:4B:A5:94
X509v3 Authority Key Identifier:
keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:6b:e0:c3:4f:d4:b5:f1:31:80:3c:69:b7:12:49:9f:aa:c4:
4f:79:92:56:50:61:51:e3:df:67:7b:40:ef:a5:c3:5e:ff:70:
9c:8e:04:da:80:47:f8:b4:c9:f2:d6:90:8a:a5:45:cd:a0:75:
5f:c9:08:4c:58:f2:d3:38:e4:d9:db:fa:5f:cb:d6:63:54:f7:
46:ba:7c:28:02:d8:12:f6:a5:fb:78:c1:1d:39:5c:d4:1e:d9:
64:15:f4:e5:28:12:b4:1a:45:7f:0d:0a:82:3f:ca:14:59:ca:
23:41:12:47:45:26:a5:f3:a9:dd:02:e4:84:93:e8:1f:b5:74:
c4:27:f4:3f:3f:39:e5:d9:6c:61:ad:79:0e:6f:7f:49:4a:6f:
67:d1:23:c5:5c:a3:69:08:a5:48:97:b3:4c:8e:8a:2e:08:04:
50:52:3f:67:44:4b:b2:1d:25:ab:ff:31:67:7e:8f:91:08:fb:
a4:fa:cf:5d:54:cc:f1:f8:e4:53:c4:71:b2:c8:38:35:ef:f5:
84:ab:cb:2a:fc:51:ab:d1:b3:eb:aa:cb:a1:b4:1f:d4:4f:34:
e8:e0:92:05:d2:84:55:44:97:3b:f1:35:29:0d:bc:18:47:53:
12:37:31:b6:f4:35:18:ae:fa:90:05:e9:ae:eb:b5:c4:0e:d5:
93:42:1c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:22:56 2026 by rpki-client