Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: BZx6yLOH+TvG1UCCxAI+BrkJivoZEFOIQ8BdEsxsBb0=
Subject key identifier: 84:92:BA:49:C5:A8:3E:F0:F0:FA:F7:36:2C:F9:B2:0D:D6:4F:9D:DD
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 01A180AB12ED0714702EB814B7BAE44C90F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 117F
Signing time: Wed 28 Oct 2026 04:00:57 +0000
Manifest this update: Wed 28 Oct 2026 04:00:57 +0000
Manifest next update: Thu 29 Oct 2026 04:00:57 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: CEZx3m3pY+QdeFMC5EFAiitCBjoRdb8TqR0ideg3mUI=)
2: JBq5eeimT_KUG5CSYUSbXpxqVWI.roa (hash: gVtfIX5m38x7+oKJNfUCQUZTbh8OCnW9g2Um9M+EpJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:12:ed:07:14:70:2e:b8:14:b7:ba:e4:4c:90:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Oct 28 04:00:57 2026 GMT
Not After : Oct 29 04:00:57 2026 GMT
Subject: CN=8492ba49c5a83ef0f0faf7362cf9b20dd64f9ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ae:7b:3b:c4:97:c7:85:97:9c:dc:4e:6d:ab:
45:22:fe:8e:1b:19:d6:fd:bc:85:b7:c1:3f:9d:84:
4c:73:92:51:b2:c8:ff:22:e2:fc:bc:1d:5f:2c:cc:
88:0d:0d:81:f6:5a:c5:2c:4c:4d:14:64:03:5c:61:
e8:5b:ca:56:bf:a4:79:4b:7d:47:bf:61:f5:71:36:
9a:d2:f5:2c:db:94:f6:d4:76:15:87:72:40:7f:a5:
07:28:15:77:46:1e:34:9a:85:a3:bc:b7:85:dc:44:
40:12:45:80:c5:d8:89:3b:df:70:3d:75:84:94:33:
83:94:37:a5:db:d9:9f:b8:15:93:57:d7:eb:b4:80:
5c:de:9a:3e:4e:1d:1c:f8:fd:93:1f:00:e4:79:e0:
0c:46:87:d4:48:8a:ae:0e:b4:f5:9a:18:b6:9c:1b:
b7:3a:c3:25:9b:ac:cb:a3:b0:2a:dd:5c:fc:d6:91:
d3:8b:90:31:7d:bc:f2:78:29:e8:f7:c7:a4:82:97:
54:ff:e6:c7:2d:e4:0e:6b:81:85:82:ed:29:e4:b3:
80:70:be:31:e4:29:55:c1:3b:01:b3:b3:d1:93:c2:
f4:28:38:ac:27:b7:a3:99:d6:4b:a6:7f:a8:35:25:
b4:fc:bb:26:fe:c7:49:2d:b1:2e:73:76:cf:f3:bc:
0b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:92:BA:49:C5:A8:3E:F0:F0:FA:F7:36:2C:F9:B2:0D:D6:4F:9D:DD
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:82:f3:cb:ea:62:54:59:3e:00:0e:05:3a:a9:52:88:75:c9:
5a:38:f7:3e:a5:a5:a8:18:93:12:2e:09:8b:b9:a5:5c:36:51:
98:b3:94:70:42:d8:db:23:4f:e2:13:04:fc:d7:89:bc:ae:88:
93:8e:cc:25:70:d2:a6:60:ab:84:57:86:d2:7f:f5:d9:b4:3e:
4b:18:89:bd:a2:31:00:19:11:2b:f4:c6:3f:29:67:45:bc:be:
ec:79:ff:fa:91:79:cf:59:98:2c:d6:f8:f7:4a:a3:97:fd:2a:
db:0e:fa:40:79:bf:8e:b3:e5:45:1b:14:8d:e1:13:18:0a:27:
f2:2b:61:7b:ad:44:7d:57:f1:61:29:f5:bb:ca:fa:34:15:c8:
06:3e:6e:31:ce:25:7d:69:f4:40:ca:e9:fd:9b:0c:a0:11:c6:
99:de:73:f2:a6:06:d7:e8:be:8f:48:74:aa:1d:75:61:b5:ee:
26:5a:67:be:8a:ab:71:bd:41:ac:db:32:83:f4:e5:91:92:e4:
68:34:aa:81:50:38:b3:fe:f2:be:37:00:8c:04:b5:fe:29:b6:
df:93:69:b5:31:e6:86:18:93:65:d5:d6:8c:2f:72:be:cf:55:
4d:a1:98:02:20:75:d8:89:6e:57:63:e4:0a:26:ac:ae:14:2e:
17:33:04:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:10:41 2026 by rpki-client