Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
File: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft (raw, json)
Hash identifier: m2GQiZUAstpbSD/maVi0wHG21rzKKY5kId9EhH/NNjc=
Subject key identifier: BC:A2:86:B8:A4:94:C4:06:6B:40:E8:D3:2A:2D:6F:73:19:19:45:69
Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
Certificate issuer: /CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Certificate serial: 01A08D572EB394B1190F32092FB59D294AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
Manifest number: 1A5B
Signing time: Thu 10 Sep 2026 22:01:36 +0000
Manifest this update: Thu 10 Sep 2026 22:01:36 +0000
Manifest next update: Fri 11 Sep 2026 22:01:36 +0000
Files and hashes: 1: 1-nIDHjjDOfK0qkT3T38aF1CybZo.roa (hash: wfNaZ1sAvLj/BXad973SBMXYEOp2AK12GK1yxn0qtHA=)
2: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl (hash: yh4guVo5svG7tYxfZJpEFHqg1b0eWnn11aluUmRcjZw=)
3: 7cNt7nS6Ga02pEEvUGwXFcclfa4.roa (hash: IhtCXpz8Ziv5ADSE80GH1TqeWkIm73cJMRq8OxzR0jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:57:2e:b3:94:b1:19:0f:32:09:2f:b5:9d:29:4a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Validity
Not Before: Sep 10 22:01:36 2026 GMT
Not After : Sep 11 22:01:36 2026 GMT
Subject: CN=bca286b8a494c4066b40e8d32a2d6f7319194569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fc:31:e6:65:d3:94:18:44:60:9e:e6:50:2b:
52:b0:f6:0c:92:69:47:60:39:a8:3b:b5:e5:8d:1c:
ef:19:32:30:27:67:a8:06:cd:ed:ad:c0:e6:5c:30:
b3:d8:72:05:e7:fd:6c:30:24:fc:e5:ac:48:3f:34:
d8:f4:36:1c:65:4e:e4:e9:8b:8a:ac:44:93:ac:78:
23:c2:05:bb:9d:f8:20:31:bc:93:23:d3:a7:f7:8c:
0d:31:d4:56:e6:5f:48:b0:ae:2a:68:bb:fd:a3:02:
b5:aa:75:74:43:9f:d6:44:d9:e0:59:03:8c:ee:ca:
6d:f3:6b:32:b3:11:b0:18:50:4f:8d:6d:82:10:1a:
48:9d:94:10:1d:e8:09:e5:dd:58:0b:95:0d:59:51:
25:ff:f1:d6:da:dc:92:74:76:fb:7b:bb:da:2c:07:
df:b2:59:b4:b0:19:5a:f7:13:9f:58:1f:2a:04:19:
39:d4:05:e3:02:ce:84:79:24:d2:0f:54:6d:27:e1:
99:89:35:10:ed:4d:48:4c:d4:5e:7b:90:f8:54:8f:
8f:ca:7a:36:71:1e:49:74:9d:0f:4a:c0:dc:62:c9:
c6:a2:7b:b0:34:75:1e:9b:04:76:e0:d4:e7:4c:6a:
84:2a:08:eb:80:68:df:94:92:27:63:bb:77:4d:96:
3e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A2:86:B8:A4:94:C4:06:6B:40:E8:D3:2A:2D:6F:73:19:19:45:69
X509v3 Authority Key Identifier:
keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c8:fc:cc:09:ae:79:66:c9:17:65:8d:84:8c:15:16:b3:ec:
e9:2b:fd:e4:18:7d:7b:66:82:72:82:bb:76:df:05:02:84:ae:
5f:d0:1c:d4:ce:32:2e:db:47:4d:55:db:3e:73:af:98:fd:9b:
1a:93:e5:5c:3e:b9:e9:67:6f:ed:04:18:77:70:23:5c:3b:55:
38:33:05:d2:39:b8:20:81:9f:11:4f:7e:f1:c4:eb:27:51:dd:
09:82:25:f2:da:96:52:ca:30:79:80:8c:21:f8:07:c2:51:08:
be:10:8f:92:04:26:bc:eb:8e:f7:d8:97:a5:1e:a6:80:2d:0b:
fe:34:ea:79:8a:42:8b:f5:11:e8:8a:09:1f:27:29:ca:30:f1:
d7:df:20:47:42:90:49:b4:11:ca:b5:ae:83:fb:a2:2f:3d:1d:
10:eb:f0:93:12:40:0a:3b:73:69:b4:18:b6:fb:97:09:58:c5:
3f:2d:4f:ef:4f:b8:43:72:4f:e9:1b:1d:68:1d:44:75:f2:c2:
8b:99:3f:a9:2c:aa:1c:b0:7d:57:50:4c:3b:7f:8b:f4:fb:65:
f5:a6:b3:a3:9d:c2:c4:54:f9:ba:f5:7b:32:d7:b4:60:97:10:
65:a7:76:73:1f:71:93:e5:97:eb:aa:75:bf:36:8c:ef:c1:df:
2f:37:1d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:57:50 2026 by rpki-client