Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/4vX689OhJusn2TfR3mjgcumaJvI.mft
File: 4vX689OhJusn2TfR3mjgcumaJvI.mft (raw, json)
Hash identifier: y8IYPKI+07dst0fgJnkZy9LMOgfgSn1MxPAogXCd7VE=
Subject key identifier: 10:6B:DA:BF:BE:A0:5B:62:22:B2:A1:D6:62:2D:9A:76:F7:22:4A:36
Authority key identifier: E2:F5:FA:F3:D3:A1:26:EB:27:D9:37:D1:DE:68:E0:72:E9:9A:26:F2
Certificate issuer: /CN=e2f5faf3d3a126eb27d937d1de68e072e99a26f2
Certificate serial: 01A08A8C1F322E79A5B35D8E6F9C41B15D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4vX689OhJusn2TfR3mjgcumaJvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/4vX689OhJusn2TfR3mjgcumaJvI.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:00:33 +0000
Manifest this update: Thu 10 Sep 2026 09:00:33 +0000
Manifest next update: Fri 11 Sep 2026 09:00:33 +0000
Files and hashes: 1: 4vX689OhJusn2TfR3mjgcumaJvI.crl (hash: lQG3zgWKu43sZmaWJqGFrg8vL+o6ipQMfBPI8Os9xP4=)
2: JzQE4CrMRXQKVLS9q97TLQOr_Nc.roa (hash: E1WJtSiavBJi5tmLgKdSSq+WxQ67uQ350SN9jNFg9xI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/4vX689OhJusn2TfR3mjgcumaJvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/4vX689OhJusn2TfR3mjgcumaJvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4vX689OhJusn2TfR3mjgcumaJvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:1f:32:2e:79:a5:b3:5d:8e:6f:9c:41:b1:5d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2f5faf3d3a126eb27d937d1de68e072e99a26f2
Validity
Not Before: Sep 10 09:00:33 2026 GMT
Not After : Sep 11 09:00:33 2026 GMT
Subject: CN=106bdabfbea05b6222b2a1d6622d9a76f7224a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:24:52:20:cf:af:4d:b0:ad:0d:6f:be:4d:aa:
9d:c7:87:bb:5b:c5:0d:5c:12:d3:22:f2:af:cd:c7:
6c:01:fb:f3:40:e1:a9:34:87:e6:f9:9c:01:1f:eb:
c8:d4:1d:8e:a4:5a:83:b2:61:bb:76:0c:aa:e1:79:
e6:ee:d0:4c:fa:2e:16:9d:6d:41:52:33:48:71:59:
bd:f1:65:90:3a:43:15:7e:af:a1:89:69:fb:f1:1f:
d7:fd:be:31:a7:2f:4f:0d:2d:5d:6f:b1:c4:81:a5:
26:5e:96:c9:b8:98:0c:5c:f6:9f:56:d9:6d:17:6f:
fd:df:eb:79:4d:bc:56:f5:7f:13:bf:3e:ab:0b:e8:
85:6f:fa:bc:a5:41:ff:b5:4d:b1:41:1e:72:de:4e:
08:95:14:11:65:20:5e:22:e4:11:34:ea:d7:e7:46:
83:3e:40:63:19:ea:6a:18:b9:f3:d7:69:da:ec:ce:
42:45:b0:66:28:f0:31:92:f5:61:31:9d:9b:91:7e:
b8:37:3f:59:88:8c:cb:42:55:a4:02:ea:0f:ce:a8:
6a:3f:ec:64:56:07:0f:2f:cc:0f:b4:3c:46:69:71:
c6:a6:14:4a:56:7f:22:51:d4:40:60:d3:0d:7d:9e:
dc:2d:dc:89:98:29:51:21:e7:3c:9b:31:7f:dd:a9:
90:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6B:DA:BF:BE:A0:5B:62:22:B2:A1:D6:62:2D:9A:76:F7:22:4A:36
X509v3 Authority Key Identifier:
keyid:E2:F5:FA:F3:D3:A1:26:EB:27:D9:37:D1:DE:68:E0:72:E9:9A:26:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4vX689OhJusn2TfR3mjgcumaJvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/4vX689OhJusn2TfR3mjgcumaJvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/4vX689OhJusn2TfR3mjgcumaJvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7c:44:df:31:bb:c7:8d:05:48:45:fe:26:e0:39:44:f6:cd:
f3:5e:dd:24:af:6d:48:05:94:8e:fc:a7:2d:f7:82:15:4b:d3:
21:e0:38:df:2f:12:f7:43:c0:55:d0:25:95:c5:b7:1f:fb:3a:
46:86:aa:71:67:fa:65:7f:89:9d:9a:0f:76:92:29:f7:98:1e:
8a:3d:8f:74:e8:a5:78:41:b4:d0:d4:96:6c:7c:3f:6b:13:2d:
07:61:7e:27:05:b8:3a:f5:c1:73:4c:a5:7b:46:4a:2e:c7:14:
df:b6:b4:47:7d:ad:08:16:f4:0b:dd:d4:60:2a:06:28:d1:46:
d2:d4:8e:4a:dc:48:6d:59:69:41:4c:e4:26:40:83:45:f1:14:
5d:b6:39:cd:7a:96:f2:16:aa:9e:87:5e:7a:48:a9:b6:5c:e2:
4e:40:d6:8e:7b:c3:73:71:17:97:f7:d4:f3:80:1a:c6:b0:c8:
22:0a:83:be:59:b6:83:0f:6f:14:15:a3:a0:57:05:e9:e1:29:
2d:26:d0:12:0f:3d:24:27:97:2d:62:5f:a9:05:ec:50:77:0a:
c1:1d:39:1c:38:4f:99:7e:aa:9e:ce:5c:6c:d4:0c:6c:c1:a2:
ff:b3:21:a8:39:13:36:71:20:36:f1:f0:48:0a:d7:41:dd:e5:
e2:6e:c5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:31:45 2026 by rpki-client