Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
File: 4Pi55HhWy7oIK3r0KXobcj2vxAI.mft (raw, json)
Hash identifier: o84GItyPaeZW34HIKWJAFTLGxr5yyIulnDAvH7Vvgeg=
Subject key identifier: E8:A8:99:D3:E4:2C:04:F5:85:66:5D:0F:A8:7D:01:52:22:77:13:31
Authority key identifier: E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
Certificate issuer: /CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Certificate serial: 01A0E32BCA58B4B468A6540A174CA6809C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
Manifest number: 1329
Signing time: Sun 27 Sep 2026 14:01:32 +0000
Manifest this update: Sun 27 Sep 2026 14:01:32 +0000
Manifest next update: Mon 28 Sep 2026 14:01:32 +0000
Files and hashes: 1: 4Pi55HhWy7oIK3r0KXobcj2vxAI.crl (hash: b8MGdYUv8Tw5WBuPUfQLe6wvVJndXNE8W+SbERiKhbE=)
2: kVdVmGrwD_1QhMpmPtm5S0rHuLM.roa (hash: 5VG/dK7kZFbtMzo8Upi7dKEOdYrNjvX54ok+rFIDbeU=)
3: wfPK-VcMi8MYRaYAwMg4vaWygwo.asa (hash: 6yNA3pVOdLj0ExvOjreMr4cUDtTKaNe3nwjPRKJN048=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:ca:58:b4:b4:68:a6:54:0a:17:4c:a6:80:9c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Validity
Not Before: Sep 27 14:01:32 2026 GMT
Not After : Sep 28 14:01:32 2026 GMT
Subject: CN=e8a899d3e42c04f585665d0fa87d015222771331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:90:00:75:76:60:5a:b2:0f:99:10:0a:25:
09:3e:b9:59:4a:d4:29:3a:ee:b7:92:8d:55:94:a2:
a8:16:e8:bb:09:f7:26:a6:bf:d1:ae:94:c3:ba:02:
d0:f4:12:7c:d5:e9:4d:2b:1a:6c:39:01:49:03:3e:
a1:ae:9b:3b:88:31:e7:b2:16:7d:ab:42:7e:59:7a:
4e:63:45:a8:1d:a2:0d:40:51:08:fa:4f:09:5d:ba:
06:d1:6a:42:53:40:52:df:1d:5f:7c:d9:f5:d2:6b:
36:e0:36:5a:6e:04:d6:2b:af:2a:10:a0:60:ef:60:
08:42:6f:fa:9a:fb:7a:7b:72:39:67:be:d4:1e:da:
8f:8a:71:c7:a8:13:50:3d:df:90:73:cf:89:d5:d1:
a8:00:e7:ad:d1:98:c8:e0:1e:dc:5b:77:2b:f8:10:
5c:2a:0a:18:50:ff:18:47:eb:c8:61:70:11:31:28:
dc:ca:96:f8:63:e2:f8:35:45:e6:f6:0c:ee:59:eb:
14:66:23:3f:cf:1e:fe:c4:b3:66:34:9d:aa:78:0e:
91:51:13:06:fe:30:e5:01:d9:5d:48:06:6f:4b:df:
96:6a:14:04:8f:ee:65:71:63:0c:fc:27:ee:e1:e3:
f7:36:db:7e:83:7d:be:1c:fc:cc:4d:4b:2b:76:a7:
93:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A8:99:D3:E4:2C:04:F5:85:66:5D:0F:A8:7D:01:52:22:77:13:31
X509v3 Authority Key Identifier:
keyid:E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:10:ed:48:20:85:47:9e:86:4b:c7:87:18:40:ae:c9:67:11:
d6:71:2e:af:e2:88:63:b2:2e:45:ad:4e:6a:82:21:f5:fa:e2:
73:4c:9b:21:92:12:ac:da:54:7a:10:33:41:19:44:03:16:fe:
f8:c9:21:33:6a:93:22:e0:e2:c2:f9:18:f8:08:f7:aa:db:5a:
af:4b:2c:9f:9c:3d:2c:5b:90:19:2b:77:33:71:d2:5d:1a:ce:
a7:69:54:a6:21:9a:8d:09:e2:45:ff:2e:cd:10:03:fb:a4:10:
10:cb:30:dd:04:2b:68:24:d7:51:73:3e:85:06:07:9d:f7:f1:
7d:b7:6c:22:a2:43:fe:b6:93:9a:c4:ce:f9:e8:58:1d:99:0b:
ec:b9:e2:4a:99:ad:5b:9f:a9:5c:6c:0c:4d:29:c4:e2:c0:0c:
94:53:0c:5c:31:b3:21:06:ac:fa:00:19:16:f7:86:cd:93:e5:
98:67:ef:54:ce:40:b2:d8:55:a6:3b:6f:fb:9b:61:4a:0a:d7:
08:37:37:5c:22:cc:64:a7:0e:30:9d:fc:2f:84:58:e3:46:72:
22:77:fa:0c:49:a5:e5:d1:4c:59:58:9f:fb:01:37:6b:b2:59:
06:7a:b8:d3:92:4e:49:ce:e9:6f:9f:0d:99:a3:28:2d:3c:a1:
44:74:57:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 22:31:17 2026 by rpki-client