Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
File: 4HG570GlOChYzZ7vmKf7nRJqpK4.mft (raw, json)
Hash identifier: a4+faH34kAqOCrOwKPoSBu/o3d0feHk3wN2qQ8ArFoU=
Subject key identifier: 3F:6F:F6:12:F5:C1:0E:D9:11:58:1E:40:64:9D:C8:3D:DB:AD:5F:CC
Authority key identifier: E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
Certificate issuer: /CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Certificate serial: 01A13F39D6874BD24F707C08838D4C644E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
Manifest number: 07CE
Signing time: Thu 15 Oct 2026 11:01:57 +0000
Manifest this update: Thu 15 Oct 2026 11:01:57 +0000
Manifest next update: Fri 16 Oct 2026 11:01:57 +0000
Files and hashes: 1: 4HG570GlOChYzZ7vmKf7nRJqpK4.crl (hash: 2941GosblqWuI1W6C2LzWJrfUvt0LbUnxtCqHSiNRTA=)
2: JqYIovUOhpMaXbCswunFuuxrXZA.roa (hash: pzyg9bet0YZqCdKyQjx/ZoPH6pBnBtJrgE7rSpscrOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 11:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:d6:87:4b:d2:4f:70:7c:08:83:8d:4c:64:4e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Validity
Not Before: Oct 15 11:01:57 2026 GMT
Not After : Oct 16 11:01:57 2026 GMT
Subject: CN=3f6ff612f5c10ed911581e40649dc83ddbad5fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cd:8d:92:d2:3f:3a:c0:57:9f:bc:98:07:83:
05:42:d0:50:c7:e2:da:ca:24:da:f0:cc:7a:91:89:
5a:6b:de:2f:ac:c5:3f:96:df:80:bf:93:dd:64:d9:
de:e1:21:fc:2c:0e:68:61:33:83:3e:ea:d7:79:e4:
9a:59:bd:bf:57:7a:3b:90:07:19:eb:89:03:b1:13:
be:1a:cf:36:0f:61:fc:80:13:cd:c7:6b:3e:cf:f6:
ea:63:5b:c0:29:6e:07:cb:07:af:b5:81:5f:ef:8e:
8b:c9:1a:d3:5a:83:b4:09:c0:8b:2c:2b:4f:33:b6:
c0:35:79:f9:56:b5:4e:58:74:4c:97:f4:93:b2:6e:
1e:81:0b:fe:a0:c2:94:f7:37:38:7a:ec:94:e7:ca:
66:b6:d7:a1:c6:a4:6f:0c:6b:62:a2:2a:9c:13:fd:
ee:c3:17:97:4d:73:cd:f1:55:a8:eb:95:21:46:46:
7f:b0:1e:32:98:ba:6e:7c:6e:de:ac:63:96:70:9d:
f4:8a:60:ff:8a:6a:da:00:a1:fc:2d:39:a8:12:1d:
05:e4:26:36:72:3b:b2:66:74:2b:68:4f:cc:8d:f1:
97:1d:39:2f:79:b8:6b:03:4d:42:ee:68:40:b7:d5:
3a:39:99:dc:01:a1:a9:0e:74:6f:96:59:33:9a:ff:
b6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6F:F6:12:F5:C1:0E:D9:11:58:1E:40:64:9D:C8:3D:DB:AD:5F:CC
X509v3 Authority Key Identifier:
keyid:E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3b:9a:a9:9e:35:88:e1:04:d6:ca:fd:b6:5c:c0:bb:53:e4:
5d:bf:24:5f:d9:2d:7e:d1:d5:d4:e7:b2:4e:a3:50:27:6c:0f:
01:8a:15:62:fb:79:f5:63:00:b8:89:1a:1f:a8:97:33:4e:11:
f5:d0:7c:40:f9:46:4c:37:09:78:9d:14:1c:35:60:0a:c6:2a:
dc:90:32:de:f0:74:44:7e:32:eb:f1:d7:0c:ae:d6:a8:54:f0:
50:c1:85:c0:a2:01:fd:7d:ce:8e:a1:51:d7:04:2f:b2:66:b3:
d8:90:dc:bb:cf:d6:63:f2:59:d4:6f:82:74:5c:e3:3f:51:7d:
bc:8b:82:a8:79:4b:b8:c0:9d:3b:96:f3:eb:a4:6d:0f:a8:c0:
a0:29:29:a4:70:f6:07:24:94:cd:5f:04:0e:34:52:f9:2a:b2:
31:c5:d0:4c:23:10:90:00:2d:a8:55:fc:08:d5:53:d5:a1:0a:
2d:77:9a:60:ec:dc:db:7a:ce:a9:a8:ed:e4:df:ce:94:6b:a7:
16:69:98:e3:e4:cf:3d:5b:83:af:4e:2d:1e:d7:ce:4e:df:bc:
ee:65:2c:03:76:3c:8b:a7:f7:ac:74:3c:21:e9:a3:ee:9f:e4:
08:89:b6:03:fe:b6:7d:67:2d:13:06:cb:78:8b:40:93:48:f7:
4f:f5:bd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:53:20 2026 by rpki-client