Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
File: 4npTBThB5i83hzAr07PcF66DR6M.mft (raw, json)
Hash identifier: RtLgWI1uak/6G81JxB2uiPigtLthhdvB5sfVKJQGQ04=
Subject key identifier: DE:41:9E:7A:20:70:A3:28:1A:5D:CF:A5:90:4E:5B:8E:83:C6:CD:D9
Authority key identifier: E2:7A:53:05:38:41:E6:2F:37:87:30:2B:D3:B3:DC:17:AE:83:47:A3
Certificate issuer: /CN=e27a53053841e62f3787302bd3b3dc17ae8347a3
Certificate serial: 01A107A599CDA65A3A2B1651C6B126E65FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
Manifest number: 0DE8
Signing time: Sun 04 Oct 2026 16:00:55 +0000
Manifest this update: Sun 04 Oct 2026 16:00:55 +0000
Manifest next update: Mon 05 Oct 2026 16:00:55 +0000
Files and hashes: 1: 4npTBThB5i83hzAr07PcF66DR6M.crl (hash: 3AuCtAzYa3NGx/0r2EVq5XvRo/IQGYjLzNHWzNnAbdc=)
2: cSt6K46EMy2J87fQrUxV7kuln7s.roa (hash: bwoUNClS8M/uJi71mCDhu+Re3L2VQt/bSmzn5caPq7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:a5:99:cd:a6:5a:3a:2b:16:51:c6:b1:26:e6:5f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27a53053841e62f3787302bd3b3dc17ae8347a3
Validity
Not Before: Oct 4 16:00:55 2026 GMT
Not After : Oct 5 16:00:55 2026 GMT
Subject: CN=de419e7a2070a3281a5dcfa5904e5b8e83c6cdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:9a:99:b1:4f:2a:88:f5:ad:37:ab:74:76:
8c:67:88:01:46:e4:6b:ae:12:bb:aa:6e:39:30:78:
93:61:5a:cb:2a:d8:5d:79:f9:32:25:68:33:c2:38:
e9:b1:5c:f2:1e:e4:14:34:8b:8d:07:c4:22:83:8e:
13:93:f3:5d:e5:e7:a5:19:88:3a:23:63:a1:07:e0:
34:33:e2:34:d6:da:a6:fb:5a:6a:e3:c1:77:64:00:
74:88:24:d5:36:65:e1:1a:b1:89:28:06:42:f4:21:
83:73:7c:c7:30:08:8a:70:f7:57:1a:1d:f2:c5:f7:
44:87:1c:a8:65:d7:78:bb:c1:a8:84:e7:f9:8c:df:
74:0f:92:0b:f4:ab:7a:6d:63:47:bb:70:76:64:1e:
44:09:2a:40:75:e8:84:c5:da:d5:e9:11:e7:ff:f5:
c4:30:1c:4e:db:40:5e:76:f9:b7:b8:83:40:0a:35:
22:b3:50:b1:8e:7f:0b:ca:00:d4:dd:a6:3d:ba:90:
9f:7d:20:9f:37:3c:64:3e:aa:f7:4e:08:a3:8e:e4:
7d:88:83:77:cf:82:e0:53:59:b9:0f:fd:81:91:f7:
21:88:30:b6:b4:8f:10:66:08:2b:7f:d1:4b:de:6f:
f6:ec:86:04:88:73:df:c4:9b:ac:5a:d8:4f:5c:b6:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:41:9E:7A:20:70:A3:28:1A:5D:CF:A5:90:4E:5B:8E:83:C6:CD:D9
X509v3 Authority Key Identifier:
keyid:E2:7A:53:05:38:41:E6:2F:37:87:30:2B:D3:B3:DC:17:AE:83:47:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7a:f0:c7:8e:51:cb:30:2f:0a:11:01:2b:02:41:64:97:ba:
90:5e:d4:fa:ee:27:f2:95:48:3d:37:37:49:2c:8e:f7:0b:f7:
d5:fa:8e:b2:25:57:98:20:58:01:ff:64:9a:21:c3:bb:ad:ea:
2f:62:09:6a:25:85:5c:11:f0:b5:92:99:3b:52:1b:08:f7:cd:
fc:2f:4a:01:54:0a:d0:13:9f:d9:de:2d:ce:00:94:75:61:48:
4a:e4:87:f0:7d:25:44:c6:62:b8:89:ca:04:bf:b6:54:59:a5:
fa:02:80:f7:22:82:80:53:a8:3a:27:40:f2:b9:e3:12:75:1b:
51:b6:77:fb:9b:03:15:a5:f9:5d:b2:12:3b:14:76:09:e6:7c:
89:74:83:75:ed:37:42:57:01:4e:49:db:df:cd:22:4b:0a:2f:
8f:7e:06:74:3c:ff:18:a0:17:e4:36:32:a6:15:f3:bf:00:55:
ca:90:91:f2:e1:77:b5:29:f5:9d:3a:ab:e9:e0:b9:64:c8:65:
6a:e5:c5:41:8c:b9:f6:b6:05:5b:9c:a1:46:92:22:dd:89:22:
e1:aa:1f:8d:08:f4:9d:9e:05:03:9a:4b:82:98:27:77:e6:a1:
d3:4b:e3:05:9d:94:e2:05:b0:21:e0:07:31:7a:7b:fd:6a:15:
1c:d6:06:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:29:39 2026 by rpki-client