Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft
File: 4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft (raw, json)
Hash identifier: BNdiQInY1vuYQ8HsjfxtY2qxf7fg/DPLsuJPioInH2I=
Subject key identifier: 35:67:68:5A:20:59:90:A7:9F:D8:24:DF:6A:AE:77:0D:09:D5:6E:E5
Authority key identifier: E0:52:77:76:67:4F:9B:AF:0B:C2:95:ED:26:0F:16:B0:D8:3B:67:6D
Certificate issuer: /CN=e0527776674f9baf0bc295ed260f16b0d83b676d
Certificate serial: 01A104A4AEA62C453361BF20D7C8FF73F61F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft
Manifest number: 0101
Signing time: Sun 04 Oct 2026 02:01:03 +0000
Manifest this update: Sun 04 Oct 2026 02:01:03 +0000
Manifest next update: Mon 05 Oct 2026 02:01:03 +0000
Files and hashes: 1: 4FJ3dmdPm68LwpXtJg8WsNg7Z20.crl (hash: lJxHu93Mh/1X4Oadq/9YQzpmGBkAsM3zQevI7a3nLXw=)
2: I0KwTqxUocsvcaYGRR4zapPMMqg.roa (hash: dmUgwCvOQahbw3iSzZonSHUNI6WWUEQvrZXsD8lNy/k=)
3: JJAZ-O4IJgQLGyAfc-8wTWBxykA.roa (hash: YSeY7xqTEtO7PqfrAlhTz5nmFBQdhs7hiSlxvWOUhkI=)
4: fQIWqImR4nVYlfvLLjiNXx70sEs.asa (hash: ThEh+n6WvESDD7EZWCsgtnIgGCyu7Kb1at4ATMHl6rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:a4:ae:a6:2c:45:33:61:bf:20:d7:c8:ff:73:f6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0527776674f9baf0bc295ed260f16b0d83b676d
Validity
Not Before: Oct 4 02:01:03 2026 GMT
Not After : Oct 5 02:01:03 2026 GMT
Subject: CN=3567685a205990a79fd824df6aae770d09d56ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:1d:63:2e:ab:66:59:c5:f3:70:fc:2e:3d:
3d:bd:8a:0d:b4:56:eb:e3:44:f2:8f:6d:45:a7:b5:
93:6b:5a:ab:b6:b0:c6:a8:40:a5:81:dd:dd:2b:24:
49:2c:5b:cd:77:e4:47:d6:4e:93:6b:23:63:e3:29:
52:c5:bd:8e:d5:36:eb:14:54:3b:23:c7:82:81:ea:
6d:c3:26:1a:7f:79:a9:82:73:26:3f:a4:32:f8:55:
a0:e2:97:3b:1e:04:c7:88:48:8a:56:d5:38:9e:dd:
f9:3d:bf:dd:8c:62:d1:44:bd:ad:a4:ee:46:a4:34:
f0:84:ac:41:a0:ec:ca:f3:11:39:10:38:b5:a5:71:
a8:62:14:8f:dc:c9:02:54:bf:d6:a0:b1:0d:aa:38:
68:93:ac:09:7e:1a:ac:c6:dd:9f:d5:38:bc:0b:ef:
1e:f0:2a:d4:2d:8c:1e:f3:6d:7c:b5:76:58:fb:50:
77:88:5e:06:f8:c6:0b:ba:8e:f0:ab:91:1b:4e:f1:
4e:f4:6f:1b:3f:dd:c2:f5:1b:2e:5d:58:01:73:90:
48:80:b2:de:ff:d0:bd:a0:18:58:8d:51:b0:40:9d:
1e:f5:ec:41:58:55:88:87:34:fd:2b:2b:f6:1c:0c:
50:2f:37:9e:db:87:41:2a:f8:08:3d:1e:3e:5f:e7:
0c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:67:68:5A:20:59:90:A7:9F:D8:24:DF:6A:AE:77:0D:09:D5:6E:E5
X509v3 Authority Key Identifier:
keyid:E0:52:77:76:67:4F:9B:AF:0B:C2:95:ED:26:0F:16:B0:D8:3B:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:5c:f2:11:ad:11:3b:67:2a:52:5c:cf:4a:12:95:85:8e:8d:
4d:54:7d:59:ec:be:00:fd:54:d2:25:05:4b:cc:b4:a7:d2:c0:
53:67:49:5a:da:f2:40:0f:b7:63:fd:77:31:50:c6:19:87:8b:
98:3b:42:8c:d7:b1:08:bf:91:92:8c:d1:12:31:a1:00:b6:53:
ca:82:ac:68:51:15:41:55:0a:22:ac:a7:95:ba:5c:ef:2e:45:
9a:4c:bf:eb:11:3b:fa:e6:6e:f4:40:92:5b:37:8c:d9:d5:d1:
e6:88:21:c5:ba:6f:41:2e:b0:46:08:54:7f:31:83:50:a5:fa:
8f:89:70:69:ad:8e:b4:1a:65:48:ef:fa:0e:e6:0e:cd:45:e5:
77:2d:5e:51:a4:4d:1f:47:a0:31:ca:36:69:aa:f4:14:d5:a4:
f8:3b:36:24:c9:c0:c6:f9:6b:00:a4:2a:86:87:b5:15:5c:e6:
5a:d3:8f:81:46:e3:16:c8:7c:01:94:77:5e:3d:b5:7b:7b:8c:
0c:c7:0f:6e:c8:1c:30:50:6a:e1:be:c6:2b:08:bf:64:6a:ec:
9b:68:f3:01:06:86:3d:b1:e1:37:82:2a:2e:b7:0f:56:d6:f1:
de:9f:dd:29:03:a7:3c:9e:8f:ac:2b:d4:29:34:ff:d7:16:7a:
a5:00:15:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:43:09 2026 by rpki-client