Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
File: F4I131NVJtnm1q_2-nrFIpOpLHE.mft (raw, json)
Hash identifier: Z/K3atfQvEiQoV4X+NxLi+iQkgi2T/aDZ+tj/WNx05c=
Subject key identifier: EB:3F:36:A0:50:0A:D6:EA:3F:30:FD:CE:55:0A:8F:EE:1D:60:3B:D2
Authority key identifier: 17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
Certificate issuer: /CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Certificate serial: 01A08D8DE86D15F765C04CCAC237BD5613FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
Manifest number: 1A4E
Signing time: Thu 10 Sep 2026 23:01:22 +0000
Manifest this update: Thu 10 Sep 2026 23:01:22 +0000
Manifest next update: Fri 11 Sep 2026 23:01:22 +0000
Files and hashes: 1: F4I131NVJtnm1q_2-nrFIpOpLHE.crl (hash: aISLTfVdpubrPptoffrGE4AHykPoQJnFncA2qyMBcdc=)
2: YJGwIn3Hfn4CXGcIfF5Sqvh4L2U.roa (hash: bxowbJpolM8aC3Tyo8Qe1Sfr/zVg+4jTgjgqaAuFw7k=)
3: nSoKCh55lGMD-7gl54YUpZEK_XE.roa (hash: KtXsJGsRFXBW5jD73l5yCg/b8S+cXBnf2k08FtiPNjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:e8:6d:15:f7:65:c0:4c:ca:c2:37:bd:56:13:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Validity
Not Before: Sep 10 23:01:22 2026 GMT
Not After : Sep 11 23:01:22 2026 GMT
Subject: CN=eb3f36a0500ad6ea3f30fdce550a8fee1d603bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:6d:32:e4:ce:0b:11:0a:d6:1b:75:35:64:
e6:db:b4:50:74:e5:d9:6b:b7:1f:fa:c2:54:20:df:
f8:52:4e:d4:26:d4:a5:02:21:4e:50:90:2e:f5:d2:
14:be:d5:c7:1d:ea:f4:74:38:34:a5:c0:55:67:2e:
ab:51:fb:bb:ef:5a:1d:9c:9d:91:80:ae:03:41:d6:
91:75:2c:1c:ea:53:88:ee:aa:d8:71:18:07:f1:f5:
a5:d3:45:27:f6:07:31:4b:24:7d:fd:07:ca:a0:68:
c3:40:95:5e:96:e1:31:17:8e:65:96:a0:f6:81:51:
09:54:6e:67:b3:d1:e0:ca:db:41:a7:90:18:59:ad:
d3:de:7c:79:2e:67:b4:f5:99:d2:06:ac:c5:e8:66:
16:8a:6f:10:28:2e:ca:74:26:58:60:fb:7c:57:cd:
37:2a:b5:55:ed:12:ca:69:bf:93:88:93:f5:90:b1:
9b:c3:8c:e1:24:62:48:ea:bb:77:16:63:bb:59:65:
12:41:03:ad:14:62:ca:04:28:3a:46:0b:2e:97:c9:
11:be:b4:16:57:2c:d8:ba:d4:41:0e:78:5d:df:a3:
41:f4:15:46:2a:f4:b2:c9:9a:24:90:e5:30:b2:7d:
fc:aa:b2:ad:e3:40:4a:da:e7:06:8f:bf:7e:bd:d5:
8a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3F:36:A0:50:0A:D6:EA:3F:30:FD:CE:55:0A:8F:EE:1D:60:3B:D2
X509v3 Authority Key Identifier:
keyid:17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:47:72:ed:b7:51:3f:57:e9:26:c2:b5:2f:0e:76:4e:ce:c9:
c1:97:33:9b:da:f1:0a:b8:84:a1:e8:b4:c8:f1:4f:5a:52:51:
5f:e0:ff:f1:ab:aa:b6:71:b9:de:2f:b2:2e:d2:1b:16:9a:3e:
d2:36:2f:cd:75:90:96:71:59:17:23:25:aa:1a:12:d1:dc:4e:
cd:04:75:12:20:ff:b8:ea:31:23:e6:e2:fc:51:d4:79:42:aa:
4c:77:47:f0:c0:c1:bb:43:72:d5:7d:7f:6c:29:c0:c2:d0:6f:
11:25:bc:bd:bd:49:31:8a:86:9c:11:5d:49:cd:26:5b:4c:b5:
85:e8:09:00:75:3a:fe:03:ef:bf:f6:09:20:39:f7:56:cb:2c:
d7:6b:c2:aa:87:2d:9d:5b:f1:c7:bd:0d:44:68:f1:4b:6f:b1:
f6:a2:03:84:1f:47:39:17:9d:7c:7d:20:72:75:01:0b:e0:01:
7c:e5:13:c7:9a:41:2e:9e:f7:d9:5f:23:22:67:49:6b:b2:ab:
e0:86:8a:bc:7c:44:c7:ec:7b:2b:61:34:ee:e4:1e:1b:67:2d:
95:1b:36:90:f2:2b:58:4d:67:8a:85:2e:76:7b:57:26:69:06:
e7:a5:93:b6:f1:f7:21:28:bd:fd:88:00:84:51:22:c3:02:89:
a7:cb:42:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:50:41 2026 by rpki-client