Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
File: D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft (raw, json)
Hash identifier: +VbAIIXdHhux6acEqSBaPhOX+wfQHq4WLjtIrhCTvsA=
Subject key identifier: FE:09:CE:F1:C5:F0:A0:23:65:29:44:11:2E:FB:1E:68:6F:EA:91:4F
Authority key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
Certificate issuer: /CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Certificate serial: 01A17582C4B25EE83565858EDA2F6A467E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
Manifest number: 1428
Signing time: Mon 26 Oct 2026 00:01:06 +0000
Manifest this update: Mon 26 Oct 2026 00:01:06 +0000
Manifest next update: Tue 27 Oct 2026 00:01:06 +0000
Files and hashes: 1: D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl (hash: kolGTU6YiAJXvIER35qGLbSqHZDNMTvChxOoNtAJRRg=)
2: bOTyO1jGNXvTUzXi3EztaGmz3K4.roa (hash: 5vKYEUvZMHjV6NuMxD9j9IkwxVI/1099N+1KTRpjjYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:82:c4:b2:5e:e8:35:65:85:8e:da:2f:6a:46:7e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Validity
Not Before: Oct 26 00:01:06 2026 GMT
Not After : Oct 27 00:01:06 2026 GMT
Subject: CN=fe09cef1c5f0a023652944112efb1e686fea914f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bc:11:ca:2e:86:f1:ec:c2:19:ce:6d:3f:f8:
3f:e8:4e:e0:a4:63:6c:5d:13:a7:23:a1:f4:c3:fe:
43:2a:f1:a1:fe:ee:29:b9:c8:95:bd:b4:50:0f:45:
5d:6b:d5:66:1a:00:7f:ce:0d:d9:18:14:a0:5c:40:
1a:f8:16:b9:1a:5b:03:93:4f:34:72:5c:cb:a4:4f:
18:17:a7:7b:22:dd:93:19:c6:64:82:e6:b8:87:08:
b8:e1:b4:08:11:ed:bd:9e:36:f0:56:14:18:a0:a0:
17:a7:23:ff:00:dc:6b:47:ca:99:aa:1d:44:62:e9:
c3:47:6d:59:e6:d0:60:c3:4e:f8:15:62:1f:64:62:
ee:e1:50:d9:c4:69:4a:6c:f7:37:7f:cb:42:3e:81:
c7:f5:eb:f7:42:94:c1:a5:47:d3:cd:9a:29:5f:74:
4c:45:90:a1:1d:ec:74:95:11:e9:fc:9d:e6:34:79:
11:fe:ff:79:52:7e:c5:7c:f4:91:fa:f8:a0:89:2f:
18:86:ae:c8:db:d1:fb:75:a9:70:f0:69:cf:fd:39:
7f:b0:bd:e0:74:fb:6d:71:62:29:c3:1e:37:10:65:
d1:37:31:f3:8b:b9:23:8d:e0:58:88:42:dc:38:f0:
15:cc:d2:41:df:a9:88:6a:b9:04:15:22:fd:99:4e:
88:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:09:CE:F1:C5:F0:A0:23:65:29:44:11:2E:FB:1E:68:6F:EA:91:4F
X509v3 Authority Key Identifier:
keyid:0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:47:78:7c:8f:30:56:69:e5:07:8c:6a:86:eb:5e:ab:f7:73:
ae:8c:74:67:b0:ba:05:dd:48:68:67:5b:8d:d9:ba:e5:9e:35:
69:c3:70:a7:a1:13:cd:8a:bb:ae:68:26:c2:19:11:e7:29:d6:
a9:79:bf:4e:52:ec:3e:1b:56:1b:3a:cf:29:d1:46:16:41:f2:
78:85:ed:6b:fd:36:9a:90:d7:6a:49:ca:e6:63:f6:76:00:51:
8d:85:eb:9f:7e:ef:09:88:1d:1d:c3:71:d1:36:6f:63:03:bc:
02:7e:40:cd:21:94:a3:c4:89:da:13:9d:d6:0a:77:62:fc:d8:
be:17:ac:27:03:b8:34:68:87:bb:ef:88:14:ac:30:b5:68:10:
31:b9:5a:7c:35:95:8e:ca:5a:47:a8:6d:80:32:01:b7:a9:d6:
57:47:78:ee:e0:5e:00:41:bb:37:99:06:40:41:fd:5d:cd:ef:
ea:8b:2e:8c:83:8e:73:87:cb:46:f9:4b:7f:26:eb:a6:25:97:
c0:c7:38:cb:ac:ed:92:9c:37:2e:a1:7c:73:cd:75:60:1e:cd:
ed:f8:8f:81:29:5f:cc:9c:b5:87:23:a5:5b:f9:8a:09:2a:25:
43:9a:36:24:5d:2f:c7:0a:80:5f:e3:72:f4:cf:06:26:b8:02:
6e:55:9b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:42:08 2026 by rpki-client