Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
File: 4aWhf1DBNbGFHOwsdrD9cPncx54.mft (raw, json)
Hash identifier: M4GkTPUgee7dD0zG/tEspoVCQVfcyYzWHQ90YHpokKE=
Subject key identifier: D0:0F:EF:80:84:D5:7A:F7:8D:3D:59:CC:54:0B:DF:9E:CD:D0:38:A8
Authority key identifier: E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
Certificate issuer: /CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Certificate serial: 01A001DD380A277BEE8F901F5C92AA9EE84F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
Manifest number: 087B
Signing time: Fri 14 Aug 2026 20:01:09 +0000
Manifest this update: Fri 14 Aug 2026 20:01:09 +0000
Manifest next update: Sat 15 Aug 2026 20:01:09 +0000
Files and hashes: 1: 4aWhf1DBNbGFHOwsdrD9cPncx54.crl (hash: Dxa5aeMdPS/5xv1vk1jC/Hg5tNdM/oK4HcXagrdqI64=)
2: p_0XKV3exhd9uWdO5Cc3FmTs35I.roa (hash: vHzaqcFQuYBAr6NOnDqMX/4qIu/wE1PoUiKrWppcY/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:38:0a:27:7b:ee:8f:90:1f:5c:92:aa:9e:e8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Validity
Not Before: Aug 14 20:01:09 2026 GMT
Not After : Aug 15 20:01:09 2026 GMT
Subject: CN=d00fef8084d57af78d3d59cc540bdf9ecdd038a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d4:4b:38:69:41:ba:29:b9:c7:0b:08:87:b5:
1d:d7:13:ae:55:2d:26:43:01:4f:fd:88:f2:88:69:
78:19:2a:60:90:f7:34:ac:76:0a:41:4a:90:67:b1:
39:96:dd:46:2b:b3:06:71:6f:ec:44:0f:6a:7d:7f:
09:2c:35:9e:c9:6f:88:48:54:57:9f:a7:da:b6:de:
66:d4:1c:7b:45:28:00:04:2f:b0:04:d8:b9:f2:65:
74:d9:5b:61:5d:bc:ad:9d:a2:f4:6d:66:fb:90:28:
5d:e0:de:ab:67:d1:d3:9e:1f:95:bc:94:3b:03:81:
b1:c5:ee:b9:6e:bc:df:ef:cc:65:a7:17:4f:62:05:
d7:f1:0a:e4:d3:b3:f1:38:0b:d9:19:82:45:89:ff:
c0:de:48:bb:00:6a:2e:5d:a8:c4:83:fd:d1:60:d6:
b1:ca:b9:27:31:56:2e:e1:73:39:54:19:6f:7a:fc:
c2:75:83:ca:4c:ec:6b:20:26:ae:32:8b:3d:e5:7c:
15:a5:d1:85:8e:3d:98:60:fa:1a:51:17:ae:00:2e:
08:6c:40:52:88:d2:fd:13:36:9e:d1:13:5b:bb:95:
3c:8b:6e:e5:b4:77:d6:eb:62:f1:05:29:0f:7b:d2:
60:7b:a9:21:19:f8:47:73:73:91:21:36:51:d6:d4:
c8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0F:EF:80:84:D5:7A:F7:8D:3D:59:CC:54:0B:DF:9E:CD:D0:38:A8
X509v3 Authority Key Identifier:
keyid:E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:be:4e:9e:53:3f:d8:a5:4e:f8:6b:f7:9a:cc:4f:4f:01:77:
ba:00:70:71:33:ce:33:ee:29:9c:76:49:f4:94:5e:ba:a9:3d:
6d:b8:9d:65:65:fb:4d:2d:84:53:bb:79:23:58:b6:ba:8c:74:
d0:7a:b3:d1:f8:aa:1f:fa:aa:0e:0a:b3:95:3d:d6:82:b8:32:
74:1d:88:00:80:58:d2:35:5b:ac:cf:85:c6:ca:1d:af:fc:d9:
17:7b:7a:25:b2:b0:c3:8d:fb:c7:01:69:07:be:b7:5c:c6:fc:
5b:89:f7:63:49:26:db:ad:f8:55:7e:59:16:b3:6c:4a:8e:b7:
71:61:84:36:65:12:1b:4f:3e:6c:a2:6f:ae:d1:40:c7:c6:56:
0e:e1:b7:89:e4:ac:d4:47:15:4d:9f:74:c6:92:85:b6:d8:69:
55:16:17:73:3a:b6:53:f4:22:31:14:1a:0c:b9:e6:e4:57:38:
b0:87:2c:11:44:23:89:0d:d5:ee:65:27:df:0d:8f:ba:4e:eb:
0e:ac:aa:75:2d:68:83:99:69:75:3f:f0:8a:92:56:b9:0f:84:
a9:97:93:9d:72:80:bb:f5:1a:fb:b0:ba:25:b1:48:c6:59:b0:
74:1e:f0:12:f9:9f:88:3c:f5:fe:70:09:62:d4:91:63:68:15:
01:37:70:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:06 2026 by rpki-client