Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
File: 4Sz8faj6dKFt04wXwgoBksuy0_4.mft (raw, json)
Hash identifier: 2X5lpn5QIgl6RSoBuwbydcBi5zFlqTljii4yAAT58zs=
Subject key identifier: 66:A5:AA:58:D4:AB:F1:05:9A:7A:55:AC:BD:11:43:4A:D7:32:A3:92
Authority key identifier: E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
Certificate issuer: /CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Certificate serial: 01A001DD069E244CF3642B8C1604623E79E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
Manifest number: 10D1
Signing time: Fri 14 Aug 2026 20:00:57 +0000
Manifest this update: Fri 14 Aug 2026 20:00:57 +0000
Manifest next update: Sat 15 Aug 2026 20:00:57 +0000
Files and hashes: 1: 4Sz8faj6dKFt04wXwgoBksuy0_4.crl (hash: 9QavNS1me2qjqchDzvwYsxPcFl0jpw8n/pJwYNw/9a8=)
2: sIZQ5tszAsQWV3tSj16L1GSVX6c.roa (hash: UbS6Ylynq2ME7l06L5T3TkFEta0v6LJ++TVobQTXGgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:06:9e:24:4c:f3:64:2b:8c:16:04:62:3e:79:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Validity
Not Before: Aug 14 20:00:57 2026 GMT
Not After : Aug 15 20:00:57 2026 GMT
Subject: CN=66a5aa58d4abf1059a7a55acbd11434ad732a392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:91:49:79:62:5d:84:0b:10:c2:cb:b9:29:43:
2f:e3:22:71:5e:a1:db:0b:89:c1:05:ee:df:9a:78:
ee:c9:37:75:dc:30:61:40:f5:15:d5:e9:b0:d7:17:
f8:d3:b0:8c:30:0b:d2:9b:ba:af:d5:6a:54:c0:b6:
81:03:e5:9f:09:82:65:a9:65:55:ff:fb:73:8d:e8:
02:a7:57:e7:f7:fb:1b:3a:0a:8e:8d:dd:db:43:fa:
62:63:f1:e8:08:5a:80:a3:9f:9a:fd:d9:c9:c2:82:
ab:d7:0d:c9:fd:98:ba:87:10:a6:74:96:51:76:1d:
a0:84:d3:f3:9a:df:6f:b4:ce:ba:d4:c2:19:aa:63:
9b:71:cf:23:00:c7:a4:84:a6:f4:97:e5:90:1b:47:
1c:dc:c7:1b:ec:a7:15:2b:d5:02:9e:ae:eb:fe:ef:
06:a6:23:15:39:7c:f6:5d:2c:4f:32:f3:75:92:45:
18:5d:dd:ac:55:62:64:e2:59:21:6c:8b:ba:8d:c6:
8b:ac:f8:a0:54:e7:0b:0e:ba:8b:46:f8:84:8a:51:
0f:f6:cc:ee:c2:bc:a0:b3:95:ca:ca:01:e7:62:2d:
bc:8b:4e:12:04:1b:a9:c3:f4:9c:1d:39:39:fb:b3:
7a:2a:5c:3c:6d:20:0a:80:84:12:45:f0:d8:cd:bc:
de:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A5:AA:58:D4:AB:F1:05:9A:7A:55:AC:BD:11:43:4A:D7:32:A3:92
X509v3 Authority Key Identifier:
keyid:E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c4:f6:e4:a5:6f:d6:f7:5c:39:3f:b6:42:94:bf:cb:c4:e9:
21:6a:aa:18:3c:45:ec:45:cc:8c:69:dc:b0:42:71:fb:2b:e9:
34:fa:fa:3e:66:18:13:c0:36:21:c5:bc:7e:78:ab:d8:25:f5:
48:fe:88:72:d9:c9:70:e9:3b:24:ac:dd:ed:27:36:7e:28:29:
18:69:30:3d:a1:da:68:48:26:eb:90:17:2c:81:02:35:d6:65:
e0:3a:a2:be:d0:4d:c0:e4:11:eb:9e:d1:72:fb:fa:60:b3:0d:
25:da:04:d8:37:7e:6a:03:0f:d7:ab:3a:b7:6f:b0:a8:ef:ad:
08:35:98:c2:0c:9c:0c:72:43:ca:20:c6:f7:a6:6e:3e:90:34:
43:05:88:57:40:23:7f:57:e6:2e:61:52:bd:a2:92:b7:a0:2d:
a1:3b:5b:0d:4c:6e:cf:b8:38:ca:bf:87:e4:bc:e2:d8:a1:14:
0e:04:1b:df:b2:50:b7:06:87:41:e1:d3:5d:cc:52:3a:a5:45:
ed:b5:ce:20:b0:c0:c5:67:e2:54:5d:a7:80:b4:2f:b9:48:57:
c0:91:a3:6c:69:e1:45:b3:96:8c:9c:0a:8f:f4:84:f0:fe:3c:
c3:b8:53:61:85:9e:3b:01:21:72:02:a8:fa:22:b0:9b:a6:de:
63:22:8f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:24 2026 by rpki-client