Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
File: 4MKGY5gUKldLpHsZfXF5G14jr3w.mft (raw, json)
Hash identifier: MwLWEqIl9YxUShuzwlOQE/qZ6F+3+sqCEJW8gmeMy2c=
Subject key identifier: 6C:86:5C:D9:18:7F:C8:7E:4C:D2:28:D4:68:F2:B8:54:FE:14:04:6A
Authority key identifier: E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C
Certificate issuer: /CN=e0c2866398142a574ba47b197d71791b5e23af7c
Certificate serial: 01A13F39CCBFD9B0D46BA388AF3E617D77C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 11:01:54 +0000
Manifest this update: Thu 15 Oct 2026 11:01:54 +0000
Manifest next update: Fri 16 Oct 2026 11:01:54 +0000
Files and hashes: 1: 4MKGY5gUKldLpHsZfXF5G14jr3w.crl (hash: XYcsIOzK1zUK/RdFRJKUJdt7TbnxjHHZh1Z9ihCXDd8=)
2: QH02WxuzjvjRn51oLBiPvrujLa4.roa (hash: IQDzIfbbVCDUYyTY4gs2wjyKwyhZrH0/tzgcEn65G5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:cc:bf:d9:b0:d4:6b:a3:88:af:3e:61:7d:77:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c2866398142a574ba47b197d71791b5e23af7c
Validity
Not Before: Oct 15 11:01:54 2026 GMT
Not After : Oct 16 11:01:54 2026 GMT
Subject: CN=6c865cd9187fc87e4cd228d468f2b854fe14046a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:70:bf:97:12:25:2a:dc:9f:0a:ab:06:2f:
08:82:92:22:46:81:df:83:40:61:7d:0b:ed:7f:90:
e1:4c:90:30:89:14:26:4a:dc:eb:16:6e:70:bb:09:
24:ec:b1:79:99:4a:60:ce:dc:7a:c7:59:61:8f:7a:
38:29:d8:de:7c:8a:ef:12:53:b3:27:91:4a:ce:05:
dd:ae:95:c7:98:72:65:bf:fa:55:70:80:a8:66:16:
98:a5:c5:92:24:72:9e:57:dd:b3:1a:6f:d4:93:8a:
28:06:f1:7f:c2:27:ef:de:70:74:f6:c9:e0:2e:7f:
f3:ab:47:ab:fc:3f:13:2a:a4:d4:e6:a2:61:72:42:
e5:78:b6:81:e1:ef:01:09:e0:ea:80:58:98:6f:b7:
31:78:b5:50:b5:32:ba:99:c7:ff:9b:f1:af:59:52:
c2:ad:21:68:e4:ea:77:28:3d:5b:e6:af:a1:17:71:
e7:e1:47:62:70:7d:35:42:8d:99:87:40:88:22:e2:
3a:de:58:97:86:1d:16:f1:57:7c:7d:d3:5b:15:32:
b6:0a:4b:b7:d3:0d:07:3a:b9:70:2f:13:a7:2f:5d:
f2:1f:7d:49:37:ec:0f:c6:a6:43:21:3b:b9:9d:29:
a7:ee:e5:89:7a:80:e3:fa:1d:42:b3:5f:dd:ac:57:
bb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:86:5C:D9:18:7F:C8:7E:4C:D2:28:D4:68:F2:B8:54:FE:14:04:6A
X509v3 Authority Key Identifier:
keyid:E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a0:90:4e:df:21:d3:00:ab:cd:47:a7:04:2e:98:e7:a5:80:
53:ed:cf:37:4a:49:53:54:94:a3:64:fc:da:5b:ac:99:cc:bd:
98:ec:33:65:4c:04:55:42:65:5b:95:90:0e:39:f8:e5:de:cd:
a5:50:d3:73:c9:7d:eb:03:79:ad:6f:4e:a0:7e:45:ad:da:a3:
a7:86:1a:61:97:57:eb:6a:d8:d2:15:11:fb:de:b1:b2:f0:1d:
30:36:21:ec:21:18:c9:ef:59:18:57:9a:b0:c1:11:79:1c:b5:
ee:1a:8a:90:41:d9:df:22:cf:bd:80:16:33:f1:3a:0f:83:6f:
b5:91:55:35:ce:e8:03:7b:00:2d:26:06:d4:c4:49:77:fa:71:
86:be:d5:b3:6e:93:cf:9e:20:80:93:dc:dc:9d:28:bf:89:73:
31:6b:c7:46:5f:d6:3d:f3:3a:cb:fe:7d:46:44:da:c0:1e:7d:
e8:1c:5c:40:b9:7c:6f:fd:d4:c3:0a:df:62:33:a5:6a:41:70:
f8:b6:03:04:57:45:8c:04:d9:f9:f6:fd:86:9b:88:cf:b1:bb:
e4:5b:58:80:74:92:f0:7c:1a:2b:bc:ca:f8:fd:84:38:89:11:
f1:d1:98:54:8a:56:91:d7:a3:38:a3:34:1c:2e:e5:b4:30:cb:
45:e9:e0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:25:28 2026 by rpki-client