Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
File: 4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft (raw, json)
Hash identifier: tAQJRidlpHBGlA23YTwKg417bZhGL9Z+9cNq97fgnyo=
Subject key identifier: 32:59:E4:11:88:EB:F8:AC:05:FD:4F:39:2A:31:DF:F7:00:DA:54:03
Authority key identifier: E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B
Certificate issuer: /CN=e08aadc069555a1abe031fd0a028069c8fb89b2b
Certificate serial: 01A08CB1AF3B79709F554F6B95CE2CB81A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
Manifest number: 19DB
Signing time: Thu 10 Sep 2026 19:00:49 +0000
Manifest this update: Thu 10 Sep 2026 19:00:49 +0000
Manifest next update: Fri 11 Sep 2026 19:00:49 +0000
Files and hashes: 1: 4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl (hash: j2PMLSTFtGL8eQuSeZBsi3oW+/ccIWHtiTtg2L+WeFE=)
2: KelGy5FqE-jDU-pEPXMpLcf7VOM.roa (hash: NXCD8cFHqcP6cTa5T44AKZobSHdu2jZzVhofvoBvDgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:af:3b:79:70:9f:55:4f:6b:95:ce:2c:b8:1a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08aadc069555a1abe031fd0a028069c8fb89b2b
Validity
Not Before: Sep 10 19:00:49 2026 GMT
Not After : Sep 11 19:00:49 2026 GMT
Subject: CN=3259e41188ebf8ac05fd4f392a31dff700da5403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:77:65:fd:32:3f:db:3a:37:cb:fa:db:9e:69:
38:3d:76:e8:04:4e:62:9f:bb:ea:f4:9b:71:ae:b5:
d8:a4:47:f1:33:05:00:d0:1b:8b:6e:e4:2a:39:e4:
6a:a6:eb:39:c7:2f:f1:86:69:ef:d1:80:d2:f9:0f:
ff:9d:7c:85:17:f2:85:e2:ee:2c:28:8d:ea:90:87:
47:1e:d0:10:08:91:ce:6a:65:02:94:18:4e:eb:35:
8b:01:e0:ff:25:fd:1b:e4:e8:f2:ea:fd:58:97:96:
e1:2b:06:c7:3b:de:96:5e:76:05:83:6f:c1:38:b3:
96:19:4b:b0:c1:5b:c3:fa:bb:93:34:aa:34:2e:48:
0b:dc:2e:dc:54:b7:64:9f:82:09:92:aa:73:20:55:
b6:64:cc:85:2c:b7:cf:ba:99:17:58:87:34:8a:40:
01:5e:35:eb:3f:1f:36:b4:12:a3:bd:e5:43:8c:79:
ed:50:61:d0:b0:5c:c4:e6:b8:8e:f3:cd:06:2f:ee:
b7:97:6a:ae:72:cf:9d:3a:b2:b5:9b:91:79:22:55:
fc:96:2c:05:9d:62:8b:86:a5:b9:0b:85:05:60:3b:
f2:9f:7a:d1:c2:73:98:40:8b:59:4b:9b:7b:07:51:
4b:22:66:68:bf:df:38:20:5c:da:32:25:d4:de:1a:
ef:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:59:E4:11:88:EB:F8:AC:05:FD:4F:39:2A:31:DF:F7:00:DA:54:03
X509v3 Authority Key Identifier:
keyid:E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:cf:9e:18:a6:c2:cf:2f:82:0f:21:43:26:c6:b6:f2:d8:c9:
9d:a0:b4:20:2e:8c:1e:f6:57:50:0b:9b:2e:a3:17:40:33:7a:
d8:61:a1:25:5f:ad:bd:a8:db:7d:54:f0:f5:38:d0:ae:e5:e3:
47:00:93:da:38:c5:e7:4d:ab:23:52:7c:b9:15:b1:a9:cf:df:
0f:4b:82:21:0d:51:3a:24:2b:db:20:70:49:90:c7:0d:7a:58:
e7:1e:45:09:d8:03:44:01:c9:c8:be:28:82:aa:da:08:f0:36:
5b:ec:0b:2d:16:d8:3f:06:a7:7f:9d:16:45:ad:48:40:86:3e:
7e:1e:cf:65:ca:28:b0:b3:1b:f0:95:78:6d:29:95:50:90:c2:
1f:28:a9:10:1f:b8:ab:74:db:90:90:e9:5b:64:4c:8d:47:6f:
56:5a:3a:77:56:e4:ae:ca:01:dd:1a:09:0c:be:61:68:50:fc:
eb:12:79:53:2a:db:83:3e:62:00:b2:87:d6:f3:0a:4c:e5:8e:
7e:fa:83:64:5e:08:8e:65:50:86:1e:50:40:cd:bc:34:6b:fa:
c8:f4:3f:a2:90:1f:bb:21:23:c5:26:e3:d1:5c:b8:72:6c:c2:
c4:7f:13:2f:46:33:bc:7a:91:01:62:51:d6:d5:60:7e:48:a0:
69:20:63:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:11:33 2026 by rpki-client