Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: 8Q0VKg0lqUAjimfmFtdOx6tdMtQQaZev3tUVITdrzsY=
Subject key identifier: 84:CD:DD:FB:35:83:17:4C:BA:D2:D5:58:D9:1F:51:2B:A3:E5:8D:1B
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 01A1829936086F10F1EBC4AED7BA394DDF29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 1180
Signing time: Wed 28 Oct 2026 13:00:41 +0000
Manifest this update: Wed 28 Oct 2026 13:00:41 +0000
Manifest next update: Thu 29 Oct 2026 13:00:41 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: VwA6c1ecD6mGjPsum4sYBIjqwBT40gVK1PfTASiBiRY=)
2: JBq5eeimT_KUG5CSYUSbXpxqVWI.roa (hash: gVtfIX5m38x7+oKJNfUCQUZTbh8OCnW9g2Um9M+EpJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:36:08:6f:10:f1:eb:c4:ae:d7:ba:39:4d:df:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Oct 28 13:00:41 2026 GMT
Not After : Oct 29 13:00:41 2026 GMT
Subject: CN=84cdddfb3583174cbad2d558d91f512ba3e58d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:3e:0f:f9:5f:a8:19:dc:e4:fc:1e:69:e9:
92:0a:df:07:92:49:74:6b:ea:46:bb:88:87:38:49:
e4:c1:7f:15:c7:14:4f:11:f4:3c:81:bd:ea:03:f8:
2f:49:32:73:6b:97:ce:68:f3:d9:17:54:22:ff:1a:
cd:bd:03:e1:1b:ed:9e:a5:bd:8b:36:66:87:10:95:
e0:43:6f:d4:9f:ae:4a:6d:5b:76:ee:f4:66:60:2d:
7d:13:1b:41:15:d2:42:e2:c1:ce:e8:59:20:c2:0f:
e7:14:89:59:86:21:ba:7a:3b:0e:48:7e:62:47:82:
eb:6d:5c:d7:60:c7:13:b4:9e:aa:00:0f:70:f7:6b:
d4:0f:79:77:33:87:d6:06:c7:3d:e5:48:50:64:71:
7e:33:83:1d:74:f2:be:85:06:e3:85:ec:f3:33:2f:
dd:a2:f7:6d:b0:61:e8:d7:c9:89:f2:24:df:44:3b:
59:1f:6e:d6:ef:e0:8a:63:24:5a:23:c7:b3:f4:31:
a5:1f:86:58:b4:f7:81:eb:72:38:a6:e9:c1:d7:00:
bf:54:7e:ce:f1:21:3e:f5:45:3c:7c:89:b2:e9:de:
f7:e0:3d:22:8e:18:79:15:4b:ec:43:74:fe:bf:7c:
52:77:1a:63:de:df:de:a4:5d:5f:d7:64:8c:b4:91:
ac:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CD:DD:FB:35:83:17:4C:BA:D2:D5:58:D9:1F:51:2B:A3:E5:8D:1B
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:87:f8:25:78:81:3e:51:71:5a:ba:5e:39:05:88:13:25:6c:
13:cf:f3:0b:e1:46:68:01:09:d8:ae:9d:68:e3:46:c1:ab:af:
bc:5d:3e:30:03:55:92:27:1d:eb:be:15:d7:f1:80:23:db:e1:
bb:5b:78:73:51:25:34:ea:13:f1:90:61:5e:04:36:49:87:be:
a6:21:e3:01:30:1b:bd:96:5f:83:83:73:52:aa:69:72:1e:fa:
2e:42:5c:64:07:18:82:6a:44:f5:32:ff:ab:97:b3:9f:ec:9e:
95:ba:54:98:4a:d7:bd:66:56:e5:d5:ed:e0:50:6d:8b:c8:ae:
04:dd:16:df:8a:c8:fa:71:a2:d5:25:ea:8a:20:a8:44:13:a8:
2d:9a:dd:cf:bd:8e:44:25:3f:90:4e:3c:f4:22:4f:c7:77:e8:
04:d7:82:d0:16:0b:8c:a5:81:88:48:7a:8c:b7:a7:78:e0:6e:
42:0d:ab:d4:bd:fb:52:99:c8:f5:45:ef:71:04:5c:c9:8f:c3:
e5:4e:20:ec:67:36:4a:88:7a:e1:de:2a:68:26:20:0e:b0:fc:
10:d0:74:27:ad:6f:5e:bc:77:05:f8:d0:69:be:12:5b:eb:e0:
8b:66:79:bf:81:4e:e9:7e:5d:ee:ee:1f:09:de:c6:c3:6c:b2:
11:fb:43:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:45:47 2026 by rpki-client